000300)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x482c2b5b0a554631}, 0x1, 0x0, 0x0, 0x4}, 0x11) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r4, @ANYBLOB="62cf7ef7171f1d8aa7e79662a5b37e0d50ace72d2e32aae5ce193f08a36624e82a941e2d2b20bf609a9a500a9dcbc294d6988c2c8a4309b2a6d078d849bec4f2fdb364"], 0x1c}}, 0x0) 00:12:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000200)=@ringbuf, 0x0}, 0x90) 00:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) 00:12:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x284, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 00:12:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040014) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x482c2b5b0a554631}, 0x1, 0x0, 0x0, 0x4}, 0x11) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r4, @ANYBLOB="62cf7ef7171f1d8aa7e79662a5b37e0d50ace72d2e32aae5ce193f08a36624e82a941e2d2b20bf609a9a500a9dcbc294d6988c2c8a4309b2a6d078d849bec4f2fdb364"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040014) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x482c2b5b0a554631}, 0x1, 0x0, 0x0, 0x4}, 0x11) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r4, @ANYBLOB="62cf7ef7171f1d8aa7e79662a5b37e0d50ace72d2e32aae5ce193f08a36624e82a941e2d2b20bf609a9a500a9dcbc294d6988c2c8a4309b2a6d078d849bec4f2fdb364"], 0x1c}}, 0x0) (async) 00:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) 00:12:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, 0x0, 0x1a}, 0x20) 00:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) 00:12:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x300, 0x0, 0x0, {0x10}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x10, 0x80, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24040000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc810}, 0x410) 00:12:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 00:12:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x30, 0x5f, 0x30]}}, &(0x7f0000000b80)=""/4096, 0x2f, 0x1000, 0x1}, 0x20) 00:12:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (rerun: 32) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 00:12:03 executing program 4: syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 00:12:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x300, 0x0, 0x0, {0x10}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20000000000000000000050000000c00060000000000000000000c000600000000000000000063332954c9fedaeaf61456f4d6fd927ab29e7ee4dd2edeeeed83199c587b31c3e5d618a0b5a33faff665adf8513edd361f0ed03a4157144e6ebaedf163a9ac79f74cfcbdfe7bdc56297909c736d3f8b9a392da6fc2ba663bb05e2ae33a959e421d7f01c47737b34bfe1267f6526c7b7233e7e8b913709f3f50c4c97786e39ebb5088cc223a5fbfbffa35130f024b5db0c7dce8ecb689399101bc47187309826bf3db6dc48e7233e914975ae3db31a57db978a481c4a2b573b3b904a9057c9dab14ac98e2ee88d6061d92c6a8a18fa2998f49cf8cc807af0e32868c52d840fe53f6186223e0d25fd43efdb63141e2d38914e58351b3d2"], 0x2c}}, 0x0) (async, rerun: 64) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x10, 0x80, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24040000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc810}, 0x410) 00:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:12:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 00:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:12:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 00:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:12:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x300, 0x0, 0x0, {0x10}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}}, 0x0) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x300, 0x0, 0x0, {0x10}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x10, 0x80, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24040000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc810}, 0x410) 00:12:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:12:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c24a7049c2f839e309a9399387b2cd869282e9528cd5678dce4234c69f877e813f905c1d6b4b769e37f67b174a7474401f7be5fbeb063b9721e995a0e1e475b9c66c33392081e7299ed17dfaa1e14281f8adfa81398d708b30264a2182a45c0a188b8ee7daffd02309db72d", @ANYRES16=r2, @ANYBLOB="04002cbd7000ffdbdf2503000000080005000000000014000300fc1c79e6e257ac8e29a26d87fa8501800000000000000000000000000114000200fc01000000000000000000000001080004000000000008000400ac1414aa1400060076657468315f746f5f7465616d0000001400020000000000000000000000ffff000000001400030000000000000000000000ffffe0000002"], 0x90}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002ae152a86437b55845f8cfaf872ad3ae2a21016aeb4788a1e6ae8873d2fe40794b050000000000000011edd9c33b", @ANYRESDEC=r1, @ANYRES16=r0], 0x14}}, 0x0) 00:12:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:12:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c24a7049c2f839e309a9399387b2cd869282e9528cd5678dce4234c69f877e813f905c1d6b4b769e37f67b174a7474401f7be5fbeb063b9721e995a0e1e475b9c66c33392081e7299ed17dfaa1e14281f8adfa81398d708b30264a2182a45c0a188b8ee7daffd02309db72d", @ANYRES16=r2, @ANYBLOB="04002cbd7000ffdbdf2503000000080005000000000014000300fc1c79e6e257ac8e29a26d87fa8501800000000000000000000000000114000200fc01000000000000000000000001080004000000000008000400ac1414aa1400060076657468315f746f5f7465616d0000001400020000000000000000000000ffff000000001400030000000000000000000000ffffe0000002"], 0x90}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002ae152a86437b55845f8cfaf872ad3ae2a21016aeb4788a1e6ae8873d2fe40794b050000000000000011edd9c33b", @ANYRESDEC=r1, @ANYRES16=r0], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c24a7049c2f839e309a9399387b2cd869282e9528cd5678dce4234c69f877e813f905c1d6b4b769e37f67b174a7474401f7be5fbeb063b9721e995a0e1e475b9c66c33392081e7299ed17dfaa1e14281f8adfa81398d708b30264a2182a45c0a188b8ee7daffd02309db72d", @ANYRES16=r2, @ANYBLOB="04002cbd7000ffdbdf2503000000080005000000000014000300fc1c79e6e257ac8e29a26d87fa8501800000000000000000000000000114000200fc01000000000000000000000001080004000000000008000400ac1414aa1400060076657468315f746f5f7465616d0000001400020000000000000000000000ffff000000001400030000000000000000000000ffffe0000002"], 0x90}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002ae152a86437b55845f8cfaf872ad3ae2a21016aeb4788a1e6ae8873d2fe40794b050000000000000011edd9c33b", @ANYRESDEC=r1, @ANYRES16=r0], 0x14}}, 0x0) (async) 00:12:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) 00:12:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c24a7049c2f839e309a9399387b2cd869282e9528cd5678dce4234c69f877e813f905c1d6b4b769e37f67b174a7474401f7be5fbeb063b9721e995a0e1e475b9c66c33392081e7299ed17dfaa1e14281f8adfa81398d708b30264a2182a45c0a188b8ee7daffd02309db72d", @ANYRES16=r2, @ANYBLOB="04002cbd7000ffdbdf2503000000080005000000000014000300fc1c79e6e257ac8e29a26d87fa8501800000000000000000000000000114000200fc01000000000000000000000001080004000000000008000400ac1414aa1400060076657468315f746f5f7465616d0000001400020000000000000000000000ffff000000001400030000000000000000000000ffffe0000002"], 0x90}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002ae152a86437b55845f8cfaf872ad3ae2a21016aeb4788a1e6ae8873d2fe40794b050000000000000011edd9c33b", @ANYRESDEC=r1, @ANYRES16=r0], 0x14}}, 0x0) 00:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:12:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210700000000000040001900000008000300", @ANYRES32=r2, @ANYBLOB="12767e52f5e0bbade23a12d3a85141d63669167ad5708ff226a104b6a7ceb38760bef64c38ed7cdf76ecc946bb8bec733f9bffe768121b77021a589c9bdccb5969ebc223431abe314dba03000000fdda"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 00:12:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="21070000cf3ffcdbdf2505000000017d995547da4f4729e40d4204f70531b0d2deda43cca3a4e70f5ae3c4d26a9787477a26a94b4f20e5b48ae51be3f7e114062eaba4dae80c7900f25157d9d86baa14178423e7650c017a98d26e3ddad6c69545f274a6d293d54097d476b1c4a78ae4338d89bb349ee6822a6028f7787c51b20e095ecaee1198e32ff3b037c5f02d65ad5f458efdcf9a91d87d77de89e274f5abe40fcdfe4ce5f8f221c67964b2ccd308c863887a839b7e69927ff3ced101003cf58fcd09af49755241771f979b2c2e289cb1cb75545a226df6e51cc07d7f0472b0"], 0x14}}, 0x10) 00:12:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 00:12:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 00:12:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210700000000000040001900000008000300", @ANYRES32=r2, @ANYBLOB="12767e52f5e0bbade23a12d3a85141d63669167ad5708ff226a104b6a7ceb38760bef64c38ed7cdf76ecc946bb8bec733f9bffe768121b77021a589c9bdccb5969ebc223431abe314dba03000000fdda"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 00:12:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="21070000cf3ffcdbdf2505000000017d995547da4f4729e40d4204f70531b0d2deda43cca3a4e70f5ae3c4d26a9787477a26a94b4f20e5b48ae51be3f7e114062eaba4dae80c7900f25157d9d86baa14178423e7650c017a98d26e3ddad6c69545f274a6d293d54097d476b1c4a78ae4338d89bb349ee6822a6028f7787c51b20e095ecaee1198e32ff3b037c5f02d65ad5f458efdcf9a91d87d77de89e274f5abe40fcdfe4ce5f8f221c67964b2ccd308c863887a839b7e69927ff3ced101003cf58fcd09af49755241771f979b2c2e289cb1cb75545a226df6e51cc07d7f0472b0"], 0x14}}, 0x10) 00:12:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:04 executing program 4: socket(0xa, 0x0, 0xfffffffc) 00:12:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210700000000000040001900000008000300", @ANYRES32=r2, @ANYBLOB="12767e52f5e0bbade23a12d3a85141d63669167ad5708ff226a104b6a7ceb38760bef64c38ed7cdf76ecc946bb8bec733f9bffe768121b77021a589c9bdccb5969ebc223431abe314dba03000000fdda"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210700000000000040001900000008000300", @ANYRES32=r2, @ANYBLOB="12767e52f5e0bbade23a12d3a85141d63669167ad5708ff226a104b6a7ceb38760bef64c38ed7cdf76ecc946bb8bec733f9bffe768121b77021a589c9bdccb5969ebc223431abe314dba03000000fdda"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) 00:12:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="21070000cf3ffcdbdf2505000000017d995547da4f4729e40d4204f70531b0d2deda43cca3a4e70f5ae3c4d26a9787477a26a94b4f20e5b48ae51be3f7e114062eaba4dae80c7900f25157d9d86baa14178423e7650c017a98d26e3ddad6c69545f274a6d293d54097d476b1c4a78ae4338d89bb349ee6822a6028f7787c51b20e095ecaee1198e32ff3b037c5f02d65ad5f458efdcf9a91d87d77de89e274f5abe40fcdfe4ce5f8f221c67964b2ccd308c863887a839b7e69927ff3ced101003cf58fcd09af49755241771f979b2c2e289cb1cb75545a226df6e51cc07d7f0472b0"], 0x14}}, 0x10) 00:12:04 executing program 4: r0 = syz_io_uring_setup(0x3e13, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x7a10, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 00:12:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x48, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="000087d6", @ANYRES16=r3, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20040001) 00:12:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x100, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:12:04 executing program 4: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000340)}]) 00:12:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x48, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="000087d6", @ANYRES16=r3, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20040001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x48, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000804) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="000087d6", @ANYRES16=r3, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20040001) (async) 00:12:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x100, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:12:04 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x800]}, 0x8}) 00:12:04 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x100, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:12:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x48, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="000087d6", @ANYRES16=r3, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20040001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x48, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000804) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="000087d6", @ANYRES16=r3, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20040001) (async) 00:12:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r1, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 00:12:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:04 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10060) 00:12:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) 00:12:04 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) 00:12:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40042) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x61}]}, 0x58}}, 0x4040080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000cc0)={'wpan3\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000740)={'wpan3\x00'}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x8, 0x0}}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c0000806a02c879b20c9c2473dbb4f251b3085f282e4b0f057fae5d3e1b73cd179c413042913737", @ANYRES16=r9, @ANYBLOB="00032bbd7000fbdbdf250d00000005001800800000000500170001000000050019000900000006000a000000000005001d001900000006000a0002000000050007000600000006000a000100000006000800a1aa0000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x50, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r9, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x4001) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ac0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x5014) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r9, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x20000040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000980)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r13, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000094) 00:12:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) (rerun: 32) 00:12:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) (rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40042) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x61}]}, 0x58}}, 0x4040080) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000cc0)={'wpan3\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000740)={'wpan3\x00'}) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r6) (rerun: 64) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x8, 0x0}}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c0000806a02c879b20c9c2473dbb4f251b3085f282e4b0f057fae5d3e1b73cd179c413042913737", @ANYRES16=r9, @ANYBLOB="00032bbd7000fbdbdf250d00000005001800800000000500170001000000050019000900000006000a000000000005001d001900000006000a0002000000050007000600000006000a000100000006000800a1aa0000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x50, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r9, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x4001) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ac0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x5014) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r9, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x20000040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000980)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r13, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000094) 00:12:04 executing program 4: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000180)="a33c4d86518600f976", 0x9}]) 00:12:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 00:12:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) 00:12:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 00:12:04 executing program 4: syz_open_dev$dmmidi(&(0x7f0000000200), 0x0, 0x3043) 00:12:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40042) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x61}]}, 0x58}}, 0x4040080) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000cc0)={'wpan3\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000740)={'wpan3\x00'}) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x8, 0x0}}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async, rerun: 32) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r6) (rerun: 32) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c0000806a02c879b20c9c2473dbb4f251b3085f282e4b0f057fae5d3e1b73cd179c413042913737", @ANYRES16=r9, @ANYBLOB="00032bbd7000fbdbdf250d00000005001800800000000500170001000000050019000900000006000a000000000005001d001900000006000a0002000000050007000600000006000a000100000006000800a1aa0000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x50, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r9, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x4001) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ac0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x5014) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r9, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x20000040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000980)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r13, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000094) 00:12:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x50000000, 0x4, {{0x23, 0x4, 0x1, 0x26, 0x8c, 0x65, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @empty, {[@ssrr={0x89, 0x1b, 0xab, [@multicast2, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0xa}, @remote]}, @noop, @timestamp_addr={0x44, 0x14, 0xde, 0x1, 0xe, [{@loopback, 0x2}, {@private=0xa010101, 0x1}]}, @generic={0x44, 0x3, "16"}, @cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}, @rr={0x7, 0x17, 0x1e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @broadcast, @loopback]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x4, [0x6, 0x8, 0x8, 0x80000001]}, @lsrr={0x83, 0xf, 0x81, [@loopback, @broadcast, @remote]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa8, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xa8}}, 0x8040) 00:12:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/38, 0x1a, 0x26, 0x1}, 0x20) 00:12:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 00:12:05 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000fc0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 00:12:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x50000000, 0x4, {{0x23, 0x4, 0x1, 0x26, 0x8c, 0x65, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @empty, {[@ssrr={0x89, 0x1b, 0xab, [@multicast2, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0xa}, @remote]}, @noop, @timestamp_addr={0x44, 0x14, 0xde, 0x1, 0xe, [{@loopback, 0x2}, {@private=0xa010101, 0x1}]}, @generic={0x44, 0x3, "16"}, @cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}, @rr={0x7, 0x17, 0x1e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @broadcast, @loopback]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x4, [0x6, 0x8, 0x8, 0x80000001]}, @lsrr={0x83, 0xf, 0x81, [@loopback, @broadcast, @remote]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa8, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xa8}}, 0x8040) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}]}]}, 0x40}}, 0x0) 00:12:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="29040008000300af3d5214bee79b80fc9fa2f67ccb9b23aa5e04d4e2da77d44140705ff27b74f789a7240a9adf9e7b8133924e2563abce2477f41426728cdd9ba3de39bfaf51be93150d9fe6d70ed4e1e02d6ced38d9c0fe2043185b59f6131e576382fbde020a0023186600946f275387482bb00a6efd0e5d7d62da42d34930445b16e9627cdf55c4f06ab9bdf64724a4359698f0b99b0345b68f79ec75148f327a815d89ed6a", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 00:12:05 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000200), 0x4) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}]}]}, 0x40}}, 0x0) 00:12:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="29040008000300af3d5214bee79b80fc9fa2f67ccb9b23aa5e04d4e2da77d44140705ff27b74f789a7240a9adf9e7b8133924e2563abce2477f41426728cdd9ba3de39bfaf51be93150d9fe6d70ed4e1e02d6ced38d9c0fe2043185b59f6131e576382fbde020a0023186600946f275387482bb00a6efd0e5d7d62da42d34930445b16e9627cdf55c4f06ab9bdf64724a4359698f0b99b0345b68f79ec75148f327a815d89ed6a", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 00:12:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x50000000, 0x4, {{0x23, 0x4, 0x1, 0x26, 0x8c, 0x65, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @empty, {[@ssrr={0x89, 0x1b, 0xab, [@multicast2, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0xa}, @remote]}, @noop, @timestamp_addr={0x44, 0x14, 0xde, 0x1, 0xe, [{@loopback, 0x2}, {@private=0xa010101, 0x1}]}, @generic={0x44, 0x3, "16"}, @cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}, @rr={0x7, 0x17, 0x1e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @broadcast, @loopback]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x4, [0x6, 0x8, 0x8, 0x80000001]}, @lsrr={0x83, 0xf, 0x81, [@loopback, @broadcast, @remote]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa8, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xa8}}, 0x8040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x50000000, 0x4, {{0x23, 0x4, 0x1, 0x26, 0x8c, 0x65, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @empty, {[@ssrr={0x89, 0x1b, 0xab, [@multicast2, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0xa}, @remote]}, @noop, @timestamp_addr={0x44, 0x14, 0xde, 0x1, 0xe, [{@loopback, 0x2}, {@private=0xa010101, 0x1}]}, @generic={0x44, 0x3, "16"}, @cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}, @rr={0x7, 0x17, 0x1e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @broadcast, @loopback]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x4, [0x6, 0x8, 0x8, 0x80000001]}, @lsrr={0x83, 0xf, 0x81, [@loopback, @broadcast, @remote]}]}}}}}) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa8, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x60, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xa8}}, 0x8040) (async) 00:12:05 executing program 4: fsopen(&(0x7f0000000800)='cgroup2\x00', 0x0) 00:12:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="29040008000300af3d5214bee79b80fc9fa2f67ccb9b23aa5e04d4e2da77d44140705ff27b74f789a7240a9adf9e7b8133924e2563abce2477f41426728cdd9ba3de39bfaf51be93150d9fe6d70ed4e1e02d6ced38d9c0fe2043185b59f6131e576382fbde020a0023186600946f275387482bb00a6efd0e5d7d62da42d34930445b16e9627cdf55c4f06ab9bdf64724a4359698f0b99b0345b68f79ec75148f327a815d89ed6a", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}]}]}, 0x40}}, 0x0) 00:12:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002bbd7000fcdbdf25160000000c00060002000000020000000c000600020000000203000000000000", @ANYRES32=r2, @ANYBLOB="0198225e7b62090000009a2ea3056f4d3939230439a2f34f3c721ab4cc713a166a97ee6d4ea873973677344a7308c3ed9c9b9590459e0000", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20008041}, 0x4004010) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000080}, 0x20000000) 00:12:05 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x170502, 0x0) 00:12:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}]}]}, 0x48}}, 0x0) 00:12:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002bbd7000fcdbdf25160000000c00060002000000020000000c000600020000000203000000000000", @ANYRES32=r2, @ANYBLOB="0198225e7b62090000009a2ea3056f4d3939230439a2f34f3c721ab4cc713a166a97ee6d4ea873973677344a7308c3ed9c9b9590459e0000", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20008041}, 0x4004010) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000080}, 0x20000000) 00:12:05 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x1}) 00:12:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}]}]}, 0x48}}, 0x0) 00:12:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 00:12:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002bbd7000fcdbdf25160000000c00060002000000020000000c000600020000000203000000000000", @ANYRES32=r2, @ANYBLOB="0198225e7b62090000009a2ea3056f4d3939230439a2f34f3c721ab4cc713a166a97ee6d4ea873973677344a7308c3ed9c9b9590459e0000", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20008041}, 0x4004010) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000080}, 0x20000000) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}]}]}, 0x48}}, 0x0) 00:12:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) (async) 00:12:05 executing program 4: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x40}}, 0x0) 00:12:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x100, 0x0, 0x25dfdbff, {0x5}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 00:12:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x40}}, 0x0) 00:12:05 executing program 4: fsopen(0x0, 0x6a6d78acc06fbe57) 00:12:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:12:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x100, 0x0, 0x25dfdbff, {0x5}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 00:12:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000105500001008000300", @ANYRES8=r2, @ANYBLOB="99"], 0x28}}, 0x0) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x40}}, 0x0) 00:12:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:12:05 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3, 0x1, 0x2}) 00:12:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x100, 0x0, 0x25dfdbff, {0x5}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 00:12:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r6, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:12:05 executing program 4: syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f00000004c0), {}, &(0x7f0000000500)=""/136, 0x88, &(0x7f00000005c0)=""/10, 0x0}, 0x58) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:12:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r6, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r6, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) (async) 00:12:05 executing program 4: request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0) 00:12:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:06 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x1) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:12:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 00:12:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x40}}, 0x0) 00:12:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r6, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r6, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) 00:12:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x40}}, 0x0) 00:12:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd9bbc998a9bb4227}, 0x20000000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:12:06 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x2, &(0x7f0000001980)=@raw=[@map_idx_val], &(0x7f00000019c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40), 0x10}, 0x90) 00:12:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8a5afc71c201f60dbccadb4b4b00022abd70df251c0000000c0006007aa536b1d2cdd744d8d00000000c0006000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) 00:12:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x40}}, 0x0) 00:12:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd9bbc998a9bb4227}, 0x20000000) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:12:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8a5afc71c201f60dbccadb4b4b00022abd70df251c0000000c0006007aa536b1d2cdd744d8d00000000c0006000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8a5afc71c201f60dbccadb4b4b00022abd70df251c0000000c0006007aa536b1d2cdd744d8d00000000c0006000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) (async) 00:12:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd9bbc998a9bb4227}, 0x20000000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:12:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8a5afc71c201f60dbccadb4b4b00022abd70df251c0000000c0006007aa536b1d2cdd744d8d00000000c0006000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8a5afc71c201f60dbccadb4b4b00022abd70df251c0000000c0006007aa536b1d2cdd744d8d00000000c0006000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) (async) 00:12:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ab295b8c55"], 0x14}}, 0x0) 00:12:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:12:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r1, 0x721, 0x70bd25, 0x0, {0x19}}, 0x14}}, 0x4000001) 00:12:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x0, 0x80000000}}) 00:12:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ab295b8c55"], 0x14}}, 0x0) 00:12:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ab295b8c55"], 0x14}}, 0x0) 00:12:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r1, 0x721, 0x70bd25, 0x0, {0x19}}, 0x14}}, 0x4000001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r1, 0x721, 0x70bd25, 0x0, {0x19}}, 0x14}}, 0x4000001) (async) 00:12:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x40}}, 0x0) 00:12:06 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 00:12:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r1, 0x721, 0x70bd25, 0x0, {0x19}}, 0x14}}, 0x4000001) 00:12:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x40}}, 0x0) 00:12:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:12:06 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x300, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004005, 0x0, 0x0) 00:12:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x40}}, 0x0) 00:12:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 00:12:06 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000001c80), 0xffffffffffffffff) 00:12:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 00:12:07 executing program 4: r0 = socket$inet(0x2, 0x1, 0x84) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x40}}, 0x0) 00:12:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 32) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) (async, rerun: 32) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (rerun: 32) 00:12:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000002000)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14}, 0x14}}, 0x0) 00:12:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x38}}, 0x0) 00:12:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0xb}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x38}}, 0x0) 00:12:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 00:12:07 executing program 4: socketpair(0xa, 0x800, 0x800, &(0x7f0000000040)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/28, 0x1c) setfsgid(0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000001c0)={0xf, 0x8}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 00:12:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x38}}, 0x0) 00:12:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) 00:12:07 executing program 4: r0 = socket$inet(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)="ef", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) 00:12:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB="22047a99b95f3c16360c9b7719c796ff23f79a176942e21603b0ef0e686b8cb861bf8f3d9f5df003e2a96adc9cef09f4f13b5bb88e3d8716ea6de1dea4583d41c7d9a4c31fe80fecbe"], 0x1c}}, 0x0) 00:12:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x38}}, 0x0) 00:12:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 728.140482][T27221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 00:12:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB="22047a99b95f3c16360c9b7719c796ff23f79a176942e21603b0ef0e686b8cb861bf8f3d9f5df003e2a96adc9cef09f4f13b5bb88e3d8716ea6de1dea4583d41c7d9a4c31fe80fecbe"], 0x1c}}, 0x0) 00:12:08 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x2, &(0x7f0000001980)=@raw=[@map_idx_val], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 00:12:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:12:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$binfmt_aout(r2, &(0x7f0000002140)=ANY=[], 0x20) 00:12:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB="22047a99b95f3c16360c9b7719c796ff23f79a176942e21603b0ef0e686b8cb861bf8f3d9f5df003e2a96adc9cef09f4f13b5bb88e3d8716ea6de1dea4583d41c7d9a4c31fe80fecbe"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB="22047a99b95f3c16360c9b7719c796ff23f79a176942e21603b0ef0e686b8cb861bf8f3d9f5df003e2a96adc9cef09f4f13b5bb88e3d8716ea6de1dea4583d41c7d9a4c31fe80fecbe"], 0x1c}}, 0x0) (async) 00:12:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x70bd29, 0x0, {0x19}}, 0x14}}, 0x0) [ 728.303749][T27247] device syzkaller1 entered promiscuous mode 00:12:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) 00:12:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (rerun: 32) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x70bd29, 0x0, {0x19}}, 0x14}}, 0x0) 00:12:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 00:12:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x721, 0x70bd29, 0x0, {0x19}}, 0x14}}, 0x0) 00:12:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2363f5317962c60d0000", @ANYRES16=r1, @ANYBLOB="04002abd7000ffdbdf25120000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14069e93", @ANYRES16=r1, @ANYBLOB="2107000000000000000005000000"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x10}, 0x20060054) 00:12:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:12:08 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000080) 00:12:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2363f5317962c60d0000", @ANYRES16=r1, @ANYBLOB="04002abd7000ffdbdf25120000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14069e93", @ANYRES16=r1, @ANYBLOB="2107000000000000000005000000"], 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14069e93", @ANYRES16=r1, @ANYBLOB="2107000000000000000005000000"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x10}, 0x20060054) 00:12:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:12:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:12:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x117}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2363f5317962c60d0000", @ANYRES16=r1, @ANYBLOB="04002abd7000ffdbdf25120000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14069e93", @ANYRES16=r1, @ANYBLOB="2107000000000000000005000000"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x10}, 0x20060054) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2363f5317962c60d0000", @ANYRES16=r1, @ANYBLOB="04002abd7000ffdbdf25120000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14069e93", @ANYRES16=r1, @ANYBLOB="2107000000000000000005000000"], 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x10}, 0x20060054) (async) 00:12:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40018000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4041) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b983424e6fbd851e9f528ad142a76b8bee161a3b75d25d7a9ed8de28239d4016674ef06b3bc8aabcde50da3b146bbb4335207f87b7096a0e42b7a86f2c8541c1e6d88ab588b690b8978"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) 00:12:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 00:12:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{0x7e}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:08 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40018000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4041) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b983424e6fbd851e9f528ad142a76b8bee161a3b75d25d7a9ed8de28239d4016674ef06b3bc8aabcde50da3b146bbb4335207f87b7096a0e42b7a86f2c8541c1e6d88ab588b690b8978"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b983424e6fbd851e9f528ad142a76b8bee161a3b75d25d7a9ed8de28239d4016674ef06b3bc8aabcde50da3b146bbb4335207f87b7096a0e42b7a86f2c8541c1e6d88ab588b690b8978"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) [ 728.827961][T27301] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 728.832147][T27301] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:12:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 00:12:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:08 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000500)=""/136, 0x88, &(0x7f00000005c0)=""/10, &(0x7f0000000600)=[0x0], 0x1}, 0x58) 00:12:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40018000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4041) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b983424e6fbd851e9f528ad142a76b8bee161a3b75d25d7a9ed8de28239d4016674ef06b3bc8aabcde50da3b146bbb4335207f87b7096a0e42b7a86f2c8541c1e6d88ab588b690b8978"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) (async) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40018000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4041) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0b983424e6fbd851e9f528ad142a76b8bee161a3b75d25d7a9ed8de28239d4016674ef06b3bc8aabcde50da3b146bbb4335207f87b7096a0e42b7a86f2c8541c1e6d88ab588b690b8978"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) (async) 00:12:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 00:12:08 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 00:12:08 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r0, &(0x7f0000000580)=""/243, 0xf3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) 00:12:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB="c2763af2ac18605c499fe74fd3269531cf1fd10f51dd3d2ac85d330cceede2522fa9c3008354b4f664b3539d12701fb38ef228b8dc3a92c70c5e43c5e39960f1731f8914763b81604be7597bbb3cf75a55dbb9bc315bf3375f4d264b1bacc14d9df5503a8138fcb28e0121cfcc3c3aecc05f01ee1a69b46b2aa8f74e92388775b38fe488c029f173b1dc9d37fb7b374aa7b5c7bc47d9a66e99e5969315a078b5"], 0x1c}}, 0x0) 00:12:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB="c2763af2ac18605c499fe74fd3269531cf1fd10f51dd3d2ac85d330cceede2522fa9c3008354b4f664b3539d12701fb38ef228b8dc3a92c70c5e43c5e39960f1731f8914763b81604be7597bbb3cf75a55dbb9bc315bf3375f4d264b1bacc14d9df5503a8138fcb28e0121cfcc3c3aecc05f01ee1a69b46b2aa8f74e92388775b38fe488c029f173b1dc9d37fb7b374aa7b5c7bc47d9a66e99e5969315a078b5"], 0x1c}}, 0x0) 00:12:09 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@empty}, 0xc) [ 729.088788][T27314] __nla_validate_parse: 641 callbacks suppressed [ 729.088804][T27314] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.096435][T27314] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.100425][T27314] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.102837][T27314] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.105404][T27314] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:09 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@supported_rates]}]}, 0x24}}, 0x0) [ 729.114591][T27314] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.117270][T27314] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.119752][T27314] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.122260][T27314] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. [ 729.124593][T27314] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:09 executing program 1: r0 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000200)="af", 0x1, r0) 00:12:09 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000b40), 0xffffffffffffffff) 00:12:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210700000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB="c2763af2ac18605c499fe74fd3269531cf1fd10f51dd3d2ac85d330cceede2522fa9c3008354b4f664b3539d12701fb38ef228b8dc3a92c70c5e43c5e39960f1731f8914763b81604be7597bbb3cf75a55dbb9bc315bf3375f4d264b1bacc14d9df5503a8138fcb28e0121cfcc3c3aecc05f01ee1a69b46b2aa8f74e92388775b38fe488c029f173b1dc9d37fb7b374aa7b5c7bc47d9a66e99e5969315a078b5"], 0x1c}}, 0x0) 00:12:09 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x300, @multicast2}, 0x10) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 00:12:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000015c0)={0x98, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @beacon=[@NL80211_ATTR_BEACON_HEAD={0x6f, 0xe, {@with_ht, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @void}}]]}, 0x98}}, 0x0) 00:12:09 executing program 4: r0 = socket$inet(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)="ef", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) 00:12:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:09 executing program 1: syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f00000004c0), {}, &(0x7f0000000500)=""/136, 0x88, &(0x7f00000005c0)=""/10, &(0x7f0000000600)=[0x0], 0x1}, 0x58) 00:12:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000220000000500360000000000050035000000000005003300000000000a000100776c616e30"], 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x6004004) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r4, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x4004001) 00:12:09 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x4040, 0x0, 0x0) 00:12:10 executing program 1: r0 = socket$inet(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 00:12:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000034c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000003540)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 00:12:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000220000000500360000000000050035000000000005003300000000000a000100776c616e30"], 0x38}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x6004004) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r4, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x4004001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000220000000500360000000000050035000000000005003300000000000a000100776c616e30"], 0x38}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x6004004) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r4, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x4004001) (async) 00:12:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0xd) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 00:12:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c5}, 0x8d0) 00:12:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01060000000000000000220000000500360000000000050035000000000005003300000000000a000100776c616e30"], 0x38}}, 0x0) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x6004004) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r4, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x4004001) 00:12:10 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000006c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7fff}]}, 0x28}}, 0x0) 00:12:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x9, 0x1, 0x0, "93683ec22aa0387271595bcbdf4f3004c175f6c7b07ddc925f7442ba28ae8020"}) 00:12:10 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/packet\x00') socket$packet(0x11, 0x3, 0x300) read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) 00:12:10 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, 0x0) 00:12:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:12:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x0, 0x0, {{0x10}, {@void, @val={0x10}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x0, 0x0, {{0x10}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:12:10 executing program 3: keyctl$setperm(0x5, 0x0, 0x8000) 00:12:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c21000800", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x721, 0x0, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 00:12:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={0x0, 0xffffffffffffff9b, &(0x7f0000000340)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0) 00:12:10 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000200)) 00:12:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x98f90c}) 00:12:10 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e40)) 00:12:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 00:12:10 executing program 1: add_key(&(0x7f0000000040)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='nl80211\x00', 0x0) 00:12:10 executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) [ 730.613173][T27415] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 730.623015][T27415] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 730.626970][T27415] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 730.631438][T27415] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 730.636021][T27415] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 730.641796][T27415] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 730.646737][T27415] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 730.658483][T27415] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 730.665717][T27415] netlink: 'syz-executor.2': attribute type 72 has an invalid length. [ 730.672311][T27415] netlink: 'syz-executor.2': attribute type 72 has an invalid length. 00:12:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) 00:12:10 executing program 3: r0 = socket$inet(0x2, 0x1, 0x84) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x117}, 0x0) 00:12:10 executing program 4: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 00:12:10 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x17, &(0x7f00000006c0)=@raw=[@ringbuf_output, @map_idx, @map_idx, @generic, @map_val, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x6f, &(0x7f0000000800)=""/111, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940), 0x10}, 0x90) 00:12:10 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000b40), 0xffffffffffffffff) 00:12:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c21000800", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:10 executing program 1: syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {0x7}, &(0x7f0000000500)=""/136, 0x88, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) 00:12:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000180, 0x0, 0x0, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {}]}, 0x108) 00:12:10 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x100, 0x0, 0x0) 00:12:10 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)='\f', 0x1}, {0x0}], 0x2) 00:12:10 executing program 0: add_key$keyring(&(0x7f00000005c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 00:12:10 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x7, @multicast2}, {0x2, 0x4e23, @remote}, 0x214, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='batadv_slave_1\x00', 0x80, 0x8, 0x4}) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 00:12:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 00:12:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:12:10 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x300, @empty}, 0x10) 00:12:10 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @broadcast}, 0x43, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x10000, 0xdb}) 00:12:10 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 00:12:11 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, 0x0, 0x0) 00:12:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x98f906}) 00:12:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x30}}, 0x0) 00:12:11 executing program 1: r0 = socket$inet(0x2, 0x1, 0x84) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000180)) 00:12:11 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:11 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @broadcast}, 0x43, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x10000, 0xdb}) 00:12:11 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x20081) 00:12:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0x4}}}}, 0x28}}, 0x0) 00:12:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000080)=0x10001, 0x4) 00:12:11 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{0x5, 0x4, 0xfff, 0x3, 'syz0\x00', 0x88d4}, 0x5, 0xb5bd5110851f13fc, 0x2, 0xffffffffffffffff, 0x3, 0x6, 'syz0\x00', &(0x7f0000000040)=['\x00', '\x00', '-\\*\x00'], 0x6}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000001c0)={0x5, 0x4, 0x4, 0x9, 'syz0\x00', 0x3d5}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:12:11 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @broadcast}, 0x43, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x10000, 0xdb}) 00:12:11 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0x3c}, 0x2, @in=@dev, 0x0, 0x4}}, 0xe8) 00:12:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000003480)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 00:12:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c21000800", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:11 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x15, &(0x7f00000006c0)=@raw=[@ringbuf_output, @map_idx, @map_idx, @generic, @map_val, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x6f, &(0x7f0000000800)=""/111, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940), 0x10}, 0x90) 00:12:11 executing program 1: r0 = socket$inet(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10) 00:12:11 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @broadcast}, 0x43, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x10000, 0xdb}) 00:12:11 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 00:12:11 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{0x7e}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:11 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x300, @multicast2}, 0x10) 00:12:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000034c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000003540)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) [ 731.446202][T27506] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 731.455996][T27506] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:12:11 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 00:12:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80c5}, 0x8d0) 00:12:11 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) 00:12:11 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 00:12:11 executing program 3: add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) 00:12:11 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000006c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}]}, 0x28}}, 0x0) 00:12:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x149}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:11 executing program 3: r0 = socket$inet(0x2, 0x1, 0x84) sendto$l2tp(r0, &(0x7f0000000000)="f5", 0x1, 0x80, &(0x7f0000000100)={0x2, 0x0, @loopback, 0x4}, 0x10) 00:12:11 executing program 3: r0 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000200)="afaa741efb658bcbc865c526", 0xc, r0) 00:12:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:11 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, 0x0, 0x10) 00:12:11 executing program 3: r0 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000180)='dns_resolver\x00', 0x0, &(0x7f0000000200)="c25f", 0x2, r1) 00:12:11 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 732.012342][T27538] device syzkaller1 entered promiscuous mode 00:12:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x1, @sdr}) 00:12:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0xae272fce2935dc63, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x13}, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x30}}, 0x0) 00:12:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:12 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast1, @remote, 0x1, 0x1, [@multicast2]}, 0x14) 00:12:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c2100080003", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) 00:12:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@supported_rates]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x20}, {0x8}]}]}, 0x40}}, 0x0) 00:12:12 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x2, &(0x7f0000001980)=@raw=[@map_idx_val], &(0x7f00000019c0)='syzkaller\x00', 0x1f}, 0x90) 00:12:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 732.406132][T27549] device syzkaller1 entered promiscuous mode 00:12:12 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x1, 0x2, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x5}]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@multiplanar_overlay={0x7c, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b7b8cf07"}, 0x0, 0x3, {0x0}}) 00:12:12 executing program 0: syz_genetlink_get_family_id$team(&(0x7f00000026c0), 0xffffffffffffffff) 00:12:12 executing program 1: socket$inet(0x2, 0x1, 0x84) 00:12:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={0x0}}, 0x0) 00:12:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000002600)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x38) 00:12:12 executing program 1: add_key(&(0x7f0000000040)='trusted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 00:12:12 executing program 4: syz_open_dev$vcsa(&(0x7f00000008c0), 0x0, 0x145200) 00:12:12 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x300, @empty}, 0x10) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 00:12:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{0x1b}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r2, 0x1, 0x0, 0x0, {{0x4a}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:12 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x300, @empty}, 0x10) 00:12:12 executing program 4: keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="301877319a1b29cd702d7106c270794375a566480d858dae6fb149cbca2b0f6b197e0e778fe421168e9c60977ebe76bea3310f43057e3ba7bf6e780bb017fb018895fa3b918172fa2f6ed7732c80b90e19d708bc2681d6602be4b0b899e5d2e357194416cd7efa48308a264c642e2f77e7aea4349243e7e3843c391614d3238ffe22959ec465123ef80ade2085b41b3a87ac6f701282d91aa16c88c20a66ed914f10b930f6662b4b8c161ff5f6b98ab4238c782743c4f6379c1ceca960ca242f003e36cc611a9bc94c24c4dd596031b9c56d69d57998bd340e", 0xd9}, {&(0x7f0000000340)="f783ff6b6163d91b3c9743d2f6abd255a59d8425cc6fcc0fd0bca45f3d830e30e6a8f9b3a32cb6bb41f9266c06fd479753afc81b8772dea678a868ef3ef620695f049d6a818daaaefbe1b2eb824530a41dd5261829c82ea60e27c29085b10345e9a38889125f353da7e97a208f236813481eb45b1f4bb95e9193d16f1203a0492b0f505023c006b3639007052c52819f84e33056a31768c149a5129cb929802d65c50aff94eed1da08143dc4e2464d83da5b194c1b4450d27cd531952268ff8ace9ee5d5207f8e2a2391d1024fd9afdff721f3d8fe65fa56eb3e346763102f2755812288", 0xe4}, {&(0x7f00000000c0)="105c8c2ec60019d958717bc4af18fb468c3349c384b5882e9092d3", 0x1b}, {&(0x7f0000000440)="5aca073f8e84d95699019b8b78fc74eba611088f25f8f47d7822e8b84c60622b505e46f7c98d144d6a668bf3acba946493ccc2e2dffd03aa0a6f8057818ca09e98432b1490e8bfb468c37ba576cf450daa80d1ee699c58928e5bacd2b8ba1df5626b53e749", 0xfffffec5}, {&(0x7f00000004c0)="afda5efbca485b3f4423fb78ae0cbd421e29f3c1b7f8e473967d5479ba60419c830962b9a553c5f589081438f13f76b6761d4bcb944f49d5b28ff7a56bbca1391ac1ffebdc84ad31a331d75944bbfc325a51fd9bd55ca1e2167fe254efd06004f9db2b0b87adffad283cb5abf9f1fce7ff9149c5ca044bf2427bc8d5e58764f1895c945585f80936625fad", 0x8b}, {&(0x7f0000000580)="b203392fed2c950bc3d1ae9a0af14588bc8e93a9b344ae0ec202d5cadd8a19a92545df5c0b02790a4b85a5d7086ebb71850a9d6e19a1430183efa478a20bed012a303a14c75617dcbad39a5f2edc7ea84a276ee7c9e1893b520e076ebcc4d2c4f67da64dbaffa5e130a9e6c6bd6831", 0x6f}, {&(0x7f0000000280)="65e30049", 0x4}, {&(0x7f0000000600)="8dc2713c0f8ca9079b9ae0c107f47eeb88f50065f59f1a13ba8ab57ca28ad28057523df6fde1aa9f38bdec69675610d5539f3804f5eaddc1bbe71a3b20f1ad781203599d1e67fb41533d5faaa27465960d67e1d9c0d4644b209b6d991c4f317cec9c741175255ee264a442073b5bd7d0bfb4dca046b2ff1e4f689f152cf520a8625a03c56ee882", 0x87}], 0x8, 0x0) 00:12:12 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x0, {0x1, 0x0, 0x1f}}, 0x6) 00:12:12 executing program 1: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 00:12:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:12 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001000c"], 0x30}}, 0x0) 00:12:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{0x7e}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 00:12:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r2, 0x1, 0x0, 0x0, {{0x7}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) [ 732.946448][T27594] device syzkaller1 entered promiscuous mode [ 732.959850][T27601] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 732.962483][T27601] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:12:12 executing program 4: socket$inet(0xa, 0x1, 0x84) 00:12:12 executing program 0: socketpair(0xa, 0x0, 0x800, &(0x7f0000000040)) 00:12:13 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x200000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:12:13 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x15, &(0x7f00000006c0)=@raw=[@ringbuf_output, @map_idx, @map_idx, @generic, @map_val, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x6f, &(0x7f0000000800)=""/111}, 0x90) 00:12:13 executing program 0: r0 = socket$inet(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) 00:12:13 executing program 4: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, 0x0}, 0x20) 00:12:13 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0, {}, &(0x7f0000000500)=""/136, 0x88, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) 00:12:13 executing program 0: r0 = socket$inet(0x2, 0x1, 0x84) accept$inet(r0, 0x0, 0x0) 00:12:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 00:12:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 00:12:13 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x6, 0xd, &(0x7f0000001680)=@raw=[@snprintf], &(0x7f0000001780)='GPL\x00'}, 0x90) 00:12:13 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @v={0x80, 0x2, 0x6, 0x1, {0x0, 0x0, "416c34cd9fdfc4b1"}}}, 0x12) 00:12:13 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 733.357309][T27631] device syzkaller1 entered promiscuous mode 00:12:13 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@remote, 0x0, 0x3c}, 0x2, @in=@dev, 0x0, 0x4}}, 0xe8) [ 733.383225][ T9] nci: nci_add_new_protocol: the target found does not have the desired protocol 00:12:13 executing program 4: syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000500)=""/136, 0x88, &(0x7f00000005c0)=""/10, 0x0}, 0x58) 00:12:13 executing program 4: r0 = socket$inet(0x2, 0xa, 0x4) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @broadcast}, 0x43, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x10000, 0xdb}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x58) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="2108a5aa5796e68a4ee6b65443b4befcbdceb6d42bb004b674b8c6831228b4f626a4f1e8b2597794591e296cd6c62e0f315d94451674eb55395ec5ddae4780fa1569ae25a8b20c56242a0b7253f5583569bce046c78d9a6e6bd4b2a6e121eb6b61a432", 0x63) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x50}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x17}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44050}, 0x4004011) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x4) 00:12:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 00:12:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 733.723521][T27653] device syzkaller1 entered promiscuous mode 00:12:13 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x1, r1, 0x0, 0x0, 'syz1\x00', 0x0}) 00:12:13 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x3, 0x0, @empty}, 0x10) 00:12:13 executing program 1: r0 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, r1) 00:12:13 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x9, &(0x7f00000006c0)=@raw=[@ringbuf_output], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940), 0x10}, 0x90) 00:12:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}]}]}, 0x34}}, 0x0) [ 734.045630][T27667] device syzkaller1 entered promiscuous mode 00:12:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:14 executing program 4: r0 = socket$inet(0x2, 0x1, 0x84) connect$inet(r0, 0x0, 0x0) 00:12:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0x28}}}}, 0x28}}, 0x0) 00:12:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x5}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 00:12:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 734.272201][T27676] __nla_validate_parse: 2114 callbacks suppressed [ 734.272218][T27676] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:12:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{0x1a}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{0x7e}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) [ 734.328796][T27684] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 734.351085][T27684] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:12:14 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x7, @multicast2}, {0x2, 0x4e23, @remote}, 0x214, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='batadv_slave_1\x00', 0x80, 0x8, 0x4}) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) [ 734.410742][T27686] device syzkaller1 entered promiscuous mode 00:12:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x98f903}) 00:12:14 executing program 1: r0 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, r0) 00:12:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x98f900}) 00:12:14 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x20, 0x4) 00:12:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0xb4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x90, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x89, 0x0, "58d6821c81894efc6392c239d41b3601e7e680fed85225d6bf693f7596313244f8a58decd394fa309e62acfe7db99e0e874a3e771179ab303f34302ee32c920ef07a15d14c3c749bbd07c46d261097952c7efa89a95bca53c73c08464cb722bebe32d83d93df5ba615ebef924db2051e6e5e506c5ff53037b3627d52fcd4032c1fd898e696"}]}, @NL80211_ATTR_IE={0x6, 0x2a, [@supported_rates]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) 00:12:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}, 0x55}, 0x0) 00:12:14 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 00:12:14 executing program 1: socketpair(0x3, 0x0, 0x1000, &(0x7f0000000100)) 00:12:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0xb4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x90, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x89, 0x0, "58d6821c81894efc6392c239d41b3601e7e680fed85225d6bf693f7596313244f8a58decd394fa309e62acfe7db99e0e874a3e771179ab303f34302ee32c920ef07a15d14c3c749bbd07c46d261097952c7efa89a95bca53c73c08464cb722bebe32d83d93df5ba615ebef924db2051e6e5e506c5ff53037b3627d52fcd4032c1fd898e696"}]}, @NL80211_ATTR_IE={0x6, 0x2a, [@supported_rates]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) 00:12:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f043}) 00:12:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0xae272fce2935dc63, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x32}}}}}, 0x30}}, 0x0) 00:12:14 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r0, &(0x7f0000000240)="0003d284", 0x4, 0x0, &(0x7f0000000040)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @remote}, 0x14) [ 734.781042][T27714] device syzkaller1 entered promiscuous mode 00:12:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x98f907}) [ 734.814817][T27719] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3 00:12:14 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:14 executing program 1: r0 = socket$inet(0x2, 0x1, 0x84) bind$l2tp(r0, 0x0, 0x0) 00:12:14 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 00:12:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) 00:12:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14}, 0x14}}, 0x0) 00:12:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 00:12:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}]}]}]}, 0x38}}, 0x0) 00:12:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x30}}, 0x0) 00:12:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f046}) 00:12:15 executing program 0: r0 = socket$inet(0x2, 0x1, 0x84) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 00:12:15 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x300, @empty}, 0x10) 00:12:15 executing program 4: r0 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "0bacb8555c18dc6b95da1be3269829c0c02a36810d982e5a29cfe53c90a48988aae96c21712f1a1a78deb035b319b80bee4629a8dc2ba4c147699e8824c41812"}, 0x48, r0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r1) 00:12:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000400), 0x4) 00:12:15 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CLOSE_RSP, 0x4) 00:12:15 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x15, &(0x7f00000006c0)=@raw=[@ringbuf_output, @map_idx, @map_idx, @generic, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val], &(0x7f00000007c0)='syzkaller\x00'}, 0x90) 00:12:15 executing program 4: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 00:12:15 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) 00:12:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x1, 0x2, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x5}]}}}) 00:12:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 00:12:15 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x48}, 0x48) 00:12:15 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 00:12:15 executing program 4: r0 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r1) 00:12:15 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x17, &(0x7f00000006c0)=@raw=[@ringbuf_output, @map_idx, @map_idx, @generic, @map_val, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x6f, &(0x7f0000000800)=""/111, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900), 0x8}, 0x90) 00:12:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:15 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680), 0x4) 00:12:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x2, &(0x7f0000001980)=@raw=[@map_idx_val], &(0x7f00000019c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a00), 0x8}, 0x90) 00:12:15 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0xd01, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:12:15 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DEACTIVATE_NTF, 0x5) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) 00:12:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:15 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x0, {0x1}}, 0x6) 00:12:15 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) 00:12:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1}}}}}, 0x20}}, 0x0) [ 736.012647][T27802] device syzkaller1 entered promiscuous mode 00:12:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000002000)={&(0x7f0000001c40), 0xc, &(0x7f0000001fc0)={0x0}}, 0x0) 00:12:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @loopback, 0x2}, 0x10) 00:12:16 executing program 1: r0 = socket$inet(0x2, 0x1, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 00:12:16 executing program 0: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 00:12:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x23, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x0, 0x0, {{0x10}, {@void, @val={0x8, 0x2}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x2}}}}}, 0x28}}, 0x0) [ 736.726699][T27815] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. 00:12:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000080), 0x4) 00:12:16 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x0, 0x1}, 0x4) 00:12:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000180, 0x0, 0x0, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 00:12:16 executing program 1: socket$inet(0xa, 0x1, 0x0) 00:12:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x14}, 0x0) 00:12:16 executing program 0: r0 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r0) 00:12:16 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) bind$l2tp(r0, 0x0, 0x0) 00:12:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002"], 0x30}}, 0x0) 00:12:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:16 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x2, @empty}, 0x10) [ 737.028132][T27839] device syzkaller1 entered promiscuous mode [ 737.033242][T27843] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:17 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x2, &(0x7f0000001980)=@raw=[@map_idx_val], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001a40)={0x5, 0x1, 0x100, 0x17}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001b40)=[{0x5, 0x3, 0x8, 0x6}], 0x10, 0x1}, 0x90) 00:12:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x30}}, 0x0) 00:12:17 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{0x7e}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8}, {0x8}]}]}, 0x38}}, 0x0) [ 737.188068][T27854] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 737.193883][T27854] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:12:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x15}, 0x0) 00:12:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:17 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 00:12:17 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x15, &(0x7f00000006c0)=@raw=[@ringbuf_output, @map_idx, @map_idx, @generic, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x6f, &(0x7f0000000800)=""/111, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940), 0x10}, 0x90) 00:12:17 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x14, &(0x7f00000006c0)=@raw=[@ringbuf_output, @map_idx, @map_idx, @map_val, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x6f, &(0x7f0000000800)=""/111}, 0x90) 00:12:17 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000500)=""/136, 0x88, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) 00:12:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x10000000, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 737.446612][T27870] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present 00:12:17 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "1e76ce080b0ed4755f844e45303e11cda55c9db579786ca16aeb743a85b3359fb653d0a57a68a52e7853e29a388952e4a289d950acd7f216efdd26863d4bcbe1"}, 0x48, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r0) 00:12:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000002000)={0x0, 0x0, 0x0}, 0x0) 00:12:17 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 00:12:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:17 executing program 1: add_key(&(0x7f0000000040)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 00:12:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{0x32}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:17 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r0, &(0x7f0000000580)=""/243, 0xf3) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan4\x00'}) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) 00:12:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x10, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:17 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}, 0x43}) 00:12:17 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:12:17 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x2, &(0x7f0000001980)=@raw=[@map_idx_val], &(0x7f00000019c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x0, 0x1, 0x100, 0x17}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001b40)=[{0x5, 0x3, 0x8, 0x6}], 0x10, 0x1}, 0x90) 00:12:18 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000002080), 0x300, 0x0) 00:12:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x0, 'syz0\x00'}) 00:12:18 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty=0x6}, 0x10) 00:12:18 executing program 4: add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000010c0)={'fscrypt:', @desc3}, &(0x7f0000001100)={0x0, "5299714b404c92bf41e652663c28ca648ee1f2eb392ea11e83a21ec606082b3535dfe6b9a6981ef6a5410494358657d2c462413bdad662cc75ce39d71055b64b"}, 0x48, 0xfffffffffffffffb) 00:12:18 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x2, &(0x7f0000001980)=@raw=[@map_idx_val], &(0x7f00000019c0)='syzkaller\x00'}, 0x90) 00:12:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES8, @ANYBLOB="99"], 0x28}}, 0x0) [ 738.277934][T27916] device syzkaller1 entered promiscuous mode 00:12:18 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 00:12:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x0) [ 738.467646][T27923] device syzkaller1 entered promiscuous mode 00:12:18 executing program 0: r0 = socket$inet(0x2, 0x1, 0x84) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 00:12:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000015c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, 0x28}}, 0x0) 00:12:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 738.655015][T27932] device syzkaller1 entered promiscuous mode 00:12:18 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f041}) 00:12:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:12:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 738.826568][T27935] vivid-000: disconnect 00:12:18 executing program 0: r0 = socket$inet(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 738.842839][T27933] vivid-000: reconnect 00:12:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 00:12:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r2, 0x1, 0x0, 0x0, {{0x31}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:18 executing program 0: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@empty}, 0xc) [ 738.950047][T27945] device syzkaller1 entered promiscuous mode 00:12:18 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, r0) 00:12:18 executing program 4: r0 = socket$inet(0x2, 0x1, 0x84) sendto$l2tp(r0, &(0x7f0000000000)="f5", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) 00:12:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf256400000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 00:12:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000006c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}}, 0x0) 00:12:19 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0xc, 0x0, &(0x7f0000000080)) 00:12:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25010000000c00030000020000000000000c00060002000000000000002400078008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c0002000100008000000000140007"], 0x8c}}, 0x0) 00:12:19 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x2, &(0x7f0000001980)=@raw=[@map_idx_val], &(0x7f00000019c0)='syzkaller\x00', 0x1f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x5, 0x1, 0x100, 0x17}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001b40)=[{0x5, 0x3, 0x8, 0x6}], 0x10, 0x1}, 0x90) 00:12:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x31, 0x1, 0x0, "b3d3c1e1ef34bd95c4ac1402cb73b8573a3a8aa9cf4eab61a826c71b37b1670f"}) 00:12:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x5, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000007c0)='syzkaller\x00', 0x7}, 0x90) 00:12:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000034c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, 0x0, 0x0) [ 739.265716][T27971] device syzkaller1 entered promiscuous mode 00:12:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x9, &(0x7f00000006c0)=@raw=[@ringbuf_output], &(0x7f00000007c0)='syzkaller\x00', 0x7}, 0x90) 00:12:19 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x300, @empty}, 0x10) 00:12:19 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000400)) 00:12:19 executing program 0: syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {0x7}, &(0x7f0000000500)=""/136, 0x88, 0x0, 0x0}, 0x58) 00:12:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:19 executing program 1: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000026c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) 00:12:19 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x12141, 0x0) 00:12:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_SE_APDU={0xead, 0x19, "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"}]}, 0xec4}}, 0x0) [ 739.484617][T27987] device syzkaller1 entered promiscuous mode 00:12:19 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) 00:12:19 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x4, @empty}, 0x10) 00:12:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:19 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x1a1081, 0x0) write$cgroup_type(r0, &(0x7f00000000c0), 0x9) 00:12:19 executing program 1: request_key(&(0x7f0000000240)='.dead\x00', 0x0, 0x0, 0xfffffffffffffff8) 00:12:19 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) 00:12:19 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8001}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x40}}, 0x0) 00:12:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x5c}}, 0x0) [ 739.736677][T28008] device syzkaller1 entered promiscuous mode 00:12:19 executing program 1: sigaltstack(&(0x7f0000000000)={0x0, 0x2}, &(0x7f00000001c0)={0x0}) 00:12:19 executing program 0: getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000800)) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 00:12:19 executing program 1: r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x10}) 00:12:19 executing program 4: r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x3, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffffffffff7}) 00:12:19 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/4096, 0x1000) 00:12:19 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) 00:12:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000105500001008000300", @ANYRES8=r2], 0x28}}, 0x0) 00:12:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 740.031298][T28028] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:12:20 executing program 4: r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x7c15a60e0633c565, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0}) 00:12:20 executing program 1: write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x2) [ 740.112293][T28030] device syzkaller1 entered promiscuous mode 00:12:20 executing program 4: r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0}) 00:12:20 executing program 1: r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1}) 00:12:20 executing program 4: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000340)) 00:12:20 executing program 1: pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 00:12:20 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) 00:12:20 executing program 4: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$qrtrtun(r0, 0x0, 0x0) 00:12:20 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8001}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x38}}, 0x0) [ 740.339460][ T2052] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.340869][ T2052] ieee802154 phy1 wpan1: encryption failed: -22 00:12:20 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 00:12:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:20 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind(r0, &(0x7f0000000040)=@can, 0x80) 00:12:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:20 executing program 1: sigaltstack(&(0x7f0000000000)={&(0x7f0000000080)=""/119, 0x2, 0x77}, &(0x7f00000001c0)={0x0}) 00:12:20 executing program 4: r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x10}) 00:12:20 executing program 1: socket(0x3, 0x0, 0x101) [ 740.523149][T28062] device syzkaller1 entered promiscuous mode 00:12:20 executing program 1: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000340)) 00:12:20 executing program 4: pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x2) 00:12:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000010c0)={&(0x7f0000000080)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_SE_APDU={0xead, 0x19, "ff5ee189008cebd87a1e8f6700a2b08bd167515772897080a3da948c09b0ea96f301ff5506b06ae91f370faa12bf62685d8cef99f7abc78107dad3dec58f63915104b7872a5344e7c0b319baac8d24e3d4a1506fcde271e72d03ba5b537e52185f1cf120716107caf14e2bf7c8bb6509037d50155bf459a13511d21297e40cd90bbd400929ac65a3db6a7241541325fe8a0ca9fe61905628fde0202f2e1cd041746b4df7e73f6768410e69f2ed6cac122a584c183b0c84fa57e57b2255fa92ce5acc400b68f1063f7a06834d972997d5086fa997015401adb2ac4bc9d9b91afe9ae7fa756b5d90cc1477cb5c259c0d0eb879551f8eaf07af1cc80c1aa41582331c5a1af5524bf6c2c3adf8673223e4d75de2567e87bc4a3ac0d7b980ed6dcf8052b7695ba2990234d611e1eef7bfa165adc678def54367198fa0c550dbaa8720af19f02e9a35a481af32f17ca7b69848567eb6ba61932215c7b95faa5aba9b25da82f744a88297425057502de7b0ac69297a37ade462716e78c77617064dee7c3db4833204e3bfd24fa6af4d80a62c1adda4d9589e84dc1681b0938e7c131a98ca88d28a638070576c6b6c7e16f7ed16b31c9c71bdbdd03080644d1396f2856ef57f65f69d326de89ff1b3e1eb6d278c9c1b72d142fd1b1ad0059f1fd9e7e2a48e4de74862123e07d6ef7f0b61caa63b3607604d47f0469c5ef72e79da2e5edb361b415e06e664ac87bde419b8948f73d6f5ccf02417fc1fb8850a6b0f1f414eafa600bb64cdb382cbf597d56b7d744081b04d3f75e0280a2676b2756cad0e6cbcf6bcbbd0f8ea9afc336eff16917a7ac742b72fda2216897e054622d36e6997a73808b6474d6c9d335621604d0b466d8d2bd969cd18033a1de5e35addd146a06a29cf3e5d4f4b90a6877189d769b54b092d4d7addcb65c6ad228475dce3377d1f952b04abe26b9dc99b6b3f1ba0f6ee391af89f6dd5689e5a26c7c0fd68104c33a43c0ed3c588c27fac5c15cefbfb89ec4595c1eaf6d3a2f972034ac6f746334adc259b7ea8a0f7854347f332fee66cb0374c49d8b93b3ce8f61eae27310c1aa684ff478caf5887aac7ea1ce68640893482347c6a8be1bc9202e039134a63e93f160134e22b5677263cd2a194a7f54abe583e0210657a662f16bf708f867b0e287c26b99d05ac3d82f1d2d7127abbc7e512154b6ad8a70662084d131599c496d5e137097ad1e4da36766d7845b846c77afdb68f7292882c75edd70ecd1c8b9924f6877c03cf4dda4bfed3da197f36f366e308c581c569db316cd74d335e8a6565fa5be8af824d14f99e9f2c2c752c8efcd54f8d97cef732562946c5fab6c6d171305ea0220518b8f5ab53ae70a9d13ac76a51217045340089f5c36362bc78393d6f789aa5aac82349a9c083f0f21124d72334c3205bbe22a718d1c3064d97b0f583c2b0ca4910a7a7547534a61448bf3743f5bd055de0d9ecf7db800f6bf436099a78d1aed87380ad45e4cba63bd7ff05b1e84332fd46277cc55bab89764b8398a6a0a0144e6c5056af22203b35c1b21688c96da9e3a10b34b16bac057156f1e227701c31cf852ec4472206a7a40c9b8ca1d15c2077f09c5f41e17d988707f66d7bb91a5c261553220cc2428b415d0d497235fc5c2cda7350fe73408828ecf3ea239ed8bd6b5f650ea06beedeaed952a71c29350ac60ccb1a40c0739b960cd3c6048b97db036c2b89778993d1402353fd4a9a2bb9263f359dd905317fb74a3c6496a8af70bcd5da87fb7e9bcd180881668bea56650a717646cd1e9d66286f31b90327e0a68bf888be1258ec64fd3cd1caee23308533e76acd6e15729cb6617b637451c9838d1f5f85480da97c0bf5e17c9e5b63c8827a6cf3b090aac2ed6e21dc2a4d67ecd3f4cb6ac3b88eaa6fe3fcbae5f079594f8b5446745d49524750683716d0561d026a4cd31fcd513345fa8a7416a3daa7128b1731a48135510a8e4cb18dd5b38877ee16d831e376248dd2c64eac7dc980d68d446ae17d51c8075086896f2bd20209695c6523d585ba43efd205ff6e09b16572c16d5cb38188a344af33df26a306eea1434188b8052be15d87d17d93fe296330e119608656b05dd9484984c79efa07008b3371b41fb0b6abb01f6c5c2a74d99707465f48b2fa587d6d7bc1739ad8b31f6a14e5fa4a1292b66c060991bfaf9ebe4fb104d852a32acead02288e45359eecdd15211d851c6ef128e6b595c20eb78ea85449ab7066f5443251f438010e91a6c316b334819cd412464511ed6dc2abf59ce43c87bfdc4120d87f7d95bac36af733a9bca8035e9a0788ac2cd3d6b3fddb5644aea0ddbd287c0324ece852b31a93385d15702870290a93fe9ad107b1ce9e6adc33dd6ded6f116a6def4d9218ec27e3f38c02b98789ba660f52ddd5b5a4149e0dd0d0dbf61135d2f9751ca0d8369437098f635b25953ed150053c471af78b01842305508c33d8cb028a97f0253eb752eedca311980e6a23ba7e8123cbd57a5089a7b13c479caa95d3be451a95d33ea6a7b14e2760d3aa258aa4f67d61e57e3aaad55895e11f667d7092a16cc31bc948c63b97a993c77dcbf89d54486b74d389b61b539d3d66aa55bf8f65057ee49115a4d3e479886e76aabd3c4a9e0c7f07ec9135509aa90c05cc4a6df193f9ba34b3af3c29ebbc1813eac6a2ad1beeabd4c5a2be2e45bac0166afcfdf65664d25d619f51581de8b209f8a18050b0d42d8786e9edc03215df4ae6bd4c01bddaa69a092e94c287ddd06bcc4f5d69a7e2a4416d5751d65401d8f2f17de0a8fad720f0e8bedb220321f19baae89c50c3b3644ec5db8ac5b465b3e2f05e26b9c4be080e633368992ade5ef92777805417c6b28321346c2d6b19e994f392e651832c3431df745e2d6c80366eaf9542c7f67f0895ac025a32d7cba582dd04b048fd6c0328c0c363da84773ea637fa0490cad0f3fde3a84c9147066d10c650bf3b4f4f6cff07fb6a3a0354e816cac21bb9d9df15ebd775ed85ded105dcf26c30d622512cea1cd28c7f622d60790cd6db2ca031b809e6b8878ecc158ac6151355e8e2b9da88eae6bf444ab4abe8fc2091c0050ef27bb2aa4bc1bf122ce55becda825e417bf19d3a1d6f5d07282690f8abbac469d0427e46b5539ec9fda9eb49e4182c11d9d7eb2a005435ee08609e1e50b65bf8b37634975eb8df2c9df4c096d0ef03dd479cabdb4cb236dd7047e08b2f2e6a935d73ea9710d58699efc96617c4136d04ed9577ae3625b5f5d350a3456fbb062841d33fb0443a247db5086825b1e3a02c133f9f3c66b6586c0976d3e341f862f4f704ace3c9b467b84f09a9c291f4b5098746ebbf4c5e2a557090ca45d2e30624cabc88aeada681a0fe7eea8807364fad1ebc9289c315e5b27b2a669763ae3808d06695f12b21608194dde99e7748efbcfb00d0214f3122949356bfb3679e54578d633f06395c81b15e01a78b85973ee99f071f858ec4492e89d7a29736788edd496783d28ab819690cf470fde93eb37e9d84f1bb6fa110b7dce76f8df60006d7e69e79a958460ef505725c9c14a71a2e56141586f07ca19236959640e781c43164ce85999b7ec8162857042c8ded09102e67a27e5997b25705bc19c4806bf511465bedc8858b278de8c5cd84ee6a93271929911ad2485b15195ff104767496047ad91b29021b1c0c4efad4f99c06b66b025b38157df393c6b276812a16a9bb688da97a58edb77713ea6322b196560f3b56aa30e7dc1926b80fae142d50fdb65843cabfedbc9be08a35592f17df601a3b309129f8ccaf999f28cbd7ee2f4218e3b9dea81db397378fa459a77feeb7edc056945fa9403db06ac729c3c3455f7654d5777d0d0b6c954f0a7b43d36e59cabac765390f52ece579e318ca4c298a706b88843c794a3cb69b7df2fbc575d9b9e060d18538eea3fab9de0192ee5c1ab50ca908be6048af8ece77918270c345c23f230108a208f885f03cb84fb0e65157d953adad57d2f861b000f105fedcad7dcfe83285ee1cbb7a2fee86e31d3a4963479d4dc1f0d3b274f909d9f6c2f37a52dea126b467dc38f88c532f850427079914deecf248ea048d8390188d453d84aea9fe0458b17ea2ad4b638ea9926c9d7e510f955a75220097dcc178d4c610f02aca98e20725a31507ea01083c700f41551240dd75f2ad3368e8a8d18d69e2e54ba029a49ef47bddeca81f6f9f7962f5dbb77ddf430c50c2deafe9b2b1cafa950c941068014122f11e10797013a782a6619b215d566431b36e7a57ccb7429419466c6b59a58caa6cd049f13da56363c93047449fd7bf956f5559ba868d17859a045514c98e4d2591dd18a51a28b8e951230ca6a7d3925b216292e5acb539ee9ad0f55e45681cf9e2af3d98707efcfee285636e62dbde352bb07fa24a22f8c55578b95cb3d4b16c7544aa8f9f1ade43b8acb6ac26bf4fe6a44e21e3585b12f23018c87b816b4ce09d5b933fa9dc0eb13395f504ecccdd3ca5309510301297fd00c4977ba1af2dbd7e15b03cb37c4a3ba7f5a5a3b40c0940bf2156e4d501d976c6ad576d78f2f2e540fa1a5f2afca4139d4dd949a4fd8bacf3f1d70c412036cf72313162aec72026777aee5dfee001c8b0ed505fd056bddc037c546aa987f2079ce2922c4b552214ca5296452ebae784acfc004a14765823e2fb75a398bc941a518a87dba34917fd46da1c837e49d276fcefd9cd91d799b9bae0e794e9ee9612b30ceb71e0b7267f409b45abb0f9dfc45f0558799bbeb259af7d2d309335f4d5b7c2e634f39bca822fe58e8034387f127b6121c21a141c60fb43bc3b1110dd2306f7d0b8b4c9c7476c958bda32084263490a6b7529d93e44414d5c8444a7b9bc2e037e278adae998b6d41e1cf44e4ce1604862e53c9183e032771f8a337570c58d8596cb581ce842394c758569da29e110da8b445fc1ddf773c48b32ed703a28c1474cdda1557b2d5a3f5565b5d48dd44ec340c6bc23ea20bd543c6631c4f0f2f37a853367f5fad3e3ed7d5ca71996345cae226fa13d03567cb2fb68d3989dccd04c26a4e909f236108b1ae443121e8af50807661fb09ad9dbf5c4cf3449446883910042ced3f98bd8cb5a58a790703d744f2e48c744e8d9eebbf21263f28df90acb71b11e27691e2af96f6ad5f699be05ff07850bb2303ad789a0140e4cbe1a17d076eb506839ae3e13e8d664caf92f47129d778c4724e9a9fe7a388f6bf7dc333f69b1dd46d221f47fe5cc0240a59b419271e003690f15493676693fed14a1591aa416b9edfe"}]}, 0xec4}}, 0x0) 00:12:20 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001600eb0d"], 0x13c4}}, 0x0) 00:12:20 executing program 1: r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000040)}) 00:12:20 executing program 0: r0 = socket(0x2b, 0x1, 0x0) sendmmsg(r0, &(0x7f0000001880)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @private}, 0x80, 0x0}}], 0x1, 0x2000c044) 00:12:20 executing program 1: pipe2$watch_queue(&(0x7f0000000180), 0x80) 00:12:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MON={0x4}]}, 0x20}}, 0x0) 00:12:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1c000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, 0x0) 00:12:20 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001e00eb"], 0x13c4}}, 0x0) 00:12:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1804d41, &(0x7f0000000000)={[{@lazytime}]}, 0x1, 0x4ca, &(0x7f0000001bc0)="$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") 00:12:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) socket$kcm(0x2, 0xa, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 740.847970][T28090] loop1: detected capacity change from 0 to 512 00:12:20 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @null, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) [ 740.876249][T28090] EXT4-fs (loop1): fragment/cluster size (1073741824) != block size (4096) 00:12:20 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) bind(r0, &(0x7f0000000040)=@can={0x1d, r1}, 0x80) 00:12:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="480400", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:20 executing program 1: r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffff7}) 00:12:20 executing program 4: sigaltstack(&(0x7f0000000000)={&(0x7f0000000080)=""/119, 0x2, 0x77}, 0x0) 00:12:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="05", 0x1}], 0x1}], 0x1, 0x0) 00:12:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1804d41, &(0x7f0000000000)={[{@lazytime}]}, 0x1, 0x4ca, &(0x7f0000001bc0)="$eJzs3d9rW9cdAPDvvbay/HAmZ9tDFlgWlgwnbJHseEnMHrIMxvIU2Ja9Z54tG2PZMpacxCYMh/0BgzG2QZ/61JdC/4BCyZ9QCoH2vbSlpbRJ+9CHtiqSrvPDlWy3cXxB/nzg6J5zf+h7jo2u7jn3oBvAvnUqIq5GxEBEnIuIYrY+zdK1VmG9s9+jh3enWimJZvPGJ0kk2bp46piWI51D4mBE/OVaxN+Tb8etr67NT1arleWsXG4sLJXrq2vn5xYmZyuzlcXx8bFLE5cnLk6M7ko7k+GIK3/44L//euWPV9749e13b3509h+tajWbzWZsasdzObApbvu10P5bbBiMiOVdCZa/gWxZ2MG+xRdcFwAAtte6Zv9RRPyiff1fjIH21SkAAADQT5q/G4ovk859MAAAAKA/pRExFElayuYCDEWalkqdObw/icNptVZv/GqmtrI43doWMRyFdGauWhnN5nMORyFplcfa+SflC5vK4xFxLCL+UzzULpematXpvAc/AAAAYJ84sqn//3mx0/8HAAAA+sxw3hUAAAAAXjj9fwAAAOh/+v8AAADQ1/50/XorNTeefz19a3Vlvnbr/HSlPl9aWJkqTdWWl0qztdps+zf7FrZ7v2qttvSbWFy5U25U6o1yfXXt5kJtZbFxc+6ZR2ADAAAAe+jYz++/k0TE+m8PtVPLgbwrBeyJ5Lvs/H5nYSAP+sNA3hUAcjOYdwWA3BR6b2ruZT2A/Gw3DtCzz//m7sUAAABerJGf9r7/v8XYANAH0rwrAADsOff/Yf8qmAEI+94Pt9n+/Pf/m+YTAQBAzobaKUlL2b3AoUjTUiniaPuxAIVkZq5aGc36B28XCz9olcfaRybm8wIAAAAAAAAAAAAAAAAAAAAAAADADjWbSTQBAACAvhaRfpi0f80/YqR4Zmjz+MCB5ItiexkRt1+68b87k43G8lhr/aeP1zf+n62/kMcIBgAAAOxn613XbvTTN/rxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCbHj28O7WR9jLux7+PiOFu8QfjYHt5MAoRcfizJAafOi6JiIFdiL9+LyKOd4uftKoVw1ktusU/lGP8NCKO7EJ82M/ut84/V7t9/tI41V52//wNZul59T7/pY/PfwM9zj9HdxjjxIPXyj3j34s4Mdj9/LMRP+kR//QO4//tr2trvbY1X44Y6fr9kzwTq9xYWCrXV9fOzy1MzlZmK4vj42OXJi5PXJwYLc/MVSvZa9cY//7Z619v1f7DPeIPb9P+Mzts/1cP7jz8cSdb6Bb/7Onu37/Hs9fN8dPsu++XWb61fWQjv97JP+3kq2+d3Kr90z3av93//+wO23/uz/98b4e7AgB7oL66Nj9ZrVaWZWRk+iYT653P9/d/n7zPTAAAwG57ctGfd00AAAAAAAAAAAAAAAAAAABg/9qLXyPbHHM9n6YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzpmwAAAP//ALDXpQ==") 00:12:21 executing program 1: r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000800)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) [ 741.051735][T28107] loop4: detected capacity change from 0 to 512 [ 741.069087][T28107] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 741.071053][T28107] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=e040e01c, mo2=0000] [ 741.074076][T28107] System zones: 0-2, 18-18, 34-34 [ 741.076062][T28107] EXT4-fs (loop4): orphan cleanup on readonly fs [ 741.082358][T28107] EXT4-fs warning (device loop4): ext4_enable_quotas:7000: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 741.109121][T28107] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 741.110783][T28107] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 4097 [ 741.118345][T28107] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. 00:12:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1804d41, &(0x7f0000000000)={[{@lazytime}]}, 0x1, 0x4ca, &(0x7f0000001bc0)="$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") [ 741.147055][ T4257] EXT4-fs (loop4): unmounting filesystem. 00:12:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) socket$kcm(0x2, 0xa, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 741.251856][T28115] loop4: detected capacity change from 0 to 512 [ 741.273429][T28115] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 741.275400][T28115] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=e040e01c, mo2=0000] [ 741.277290][T28115] System zones: 0-2, 18-18, 34-34 00:12:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 741.287747][T28115] EXT4-fs (loop4): orphan cleanup on readonly fs [ 741.291426][T28115] EXT4-fs warning (device loop4): ext4_enable_quotas:7000: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 741.305392][T28115] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 741.307014][T28115] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 4097 [ 741.315123][T28115] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. 00:12:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000ac0)='ns/net\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) close(r1) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000940), 0x2, 0x3) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000e80)="dd8846375bab18c0c265c7a7f080613096788c824c9638fb05002fbdd9aa271b3207a3559812f193ba48b0cc108623a6fd89622a62bd3534861260a030ca9a61b39453ff1b7b6ca2149226f99bd9f1817a4ec428e77752b3e2e2c1bbc1cece5d4391428a9c3942ab12e9f327557970616850d6ba4a5ae9ce1fef4f65f4c41a507b8635711ba02b0e06befc3fd1c007aed85cfb87796ade298c145d5d697270ee895bc7d2a549296c1652a8054e1b9fd4def3f20d9c7667", 0xb7) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000001080)="092fdca4b02ee3ab94c367d77a44e3c0ecb1cf696c61bfd626d94bc97e0b68bd30ce04295ad12c8191743594a11f9519b34826572dea85b6d861f0f280b06c6d60b47471cab1f867c58659425f548ced3e1f9829d16c81f5a08792e0f1a8f54246a73f37e6b2f161146474ac5c6356b208d51a88fd510aaa1e0a44191b1c0a33c5658b89ac3436c2b4d6f12620551ee9a7524d1014cd74bb5827ff", 0x9b) setrlimit(0x9, &(0x7f0000000040)={0x6, 0x4}) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000d40)=""/126, 0x7e}, {&(0x7f0000000dc0)=""/141, 0x8d}], 0x2, 0x8, 0x7f) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x40804) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000b00)={@rand_addr, @rand_addr, 0x4, 0x2d}}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000900)=0x1, 0x8) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000a80), 0x115203, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000001140)=ANY=[@ANYRESHEX, @ANYRES64=r2, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4008881}, 0x20040011) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000980)={0x7, 'macsec0\x00', {0xffffff05}, 0x4ae}) getrlimit(0x8, &(0x7f0000000a40)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x1f, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x4000000000000eb, 0x28004881) [ 741.380324][ T4257] EXT4-fs (loop4): unmounting filesystem. 00:12:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) socket$kcm(0x2, 0xa, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:21 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001ac0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000033c0)=@generic={0x0, 0x2, 0x0, "12de343a"}) 00:12:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2d, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 742.163972][T13480] usb 1-1: new high-speed USB device number 13 using dummy_hcd 00:12:22 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fremovexattr(r0, &(0x7f0000000000)=@random={'security.', '/^\x00'}) 00:12:22 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:22 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000000340)=""/1, 0x1}, {0x0}], 0x2, 0x0, 0x0) 00:12:22 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x12) 00:12:22 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 742.719165][T13480] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 742.721116][T13480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.722932][T13480] usb 1-1: Product: syz [ 742.723849][T13480] usb 1-1: Manufacturer: syz [ 742.724897][T13480] usb 1-1: SerialNumber: syz 00:12:22 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 742.804388][T13480] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 742.818065][T13480] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 742.829945][T13480] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw 00:12:22 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:23 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:23 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000800)) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) syz_open_procfs$userns(0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) socket$xdp(0x2c, 0x3, 0x0) 00:12:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1804d41, &(0x7f0000000000)={[{@lazytime}]}, 0x1, 0x4ca, &(0x7f0000001bc0)="$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") [ 743.366289][T28193] loop4: detected capacity change from 0 to 512 [ 743.387498][T28193] EXT4-fs (loop4): orphan cleanup on readonly fs [ 743.397530][T28193] EXT4-fs warning (device loop4): ext4_enable_quotas:7000: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 743.434609][T28193] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 743.436264][T28193] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 4097 [ 743.444156][T28193] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. 00:12:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1804d41, &(0x7f0000000000)={[{@lazytime}]}, 0x1, 0x4ca, &(0x7f0000001bc0)="$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") [ 743.485596][ T4257] EXT4-fs (loop4): unmounting filesystem. 00:12:23 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 743.581620][T28199] loop4: detected capacity change from 0 to 512 [ 743.609095][T28199] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=e040e01c, mo2=0000] [ 743.610892][T28199] System zones: 0-2, 18-18, 34-34 [ 743.612677][T28199] EXT4-fs error (device loop4): ext4_init_orphan_info:586: comm syz-executor.4: inode #0: comm syz-executor.4: iget: illegal inode # [ 743.625257][T28199] EXT4-fs (loop4): get orphan inode failed [ 743.627980][T28199] EXT4-fs (loop4): mount failed 00:12:23 executing program 4: personality(0x1bb2baf3005ac137) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) 00:12:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000404c05d50300000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x50, @string={0x50, 0x3, "705c72064b5a80029e3f0420a3209d0b21b403cbe83da56f95546f69a820a9db41d7963057758f92126f1399273626c331ddea282f29f496b454e24d7ef2baaae0480d6195f3055ac84ff76cd0b2"}}, &(0x7f0000000540)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "6f088ed3"}, @global=@item_012={0x1, 0x1, 0xb, "ad"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0xcc4}}}}, 0x0) [ 743.817899][T28202] device syzkaller1 entered promiscuous mode [ 743.831601][T28210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.845016][T28210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:12:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000000000404c05d50300000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, &(0x7f00000003c0)={0x20, 0xe, 0xb5, {0xb5, 0x22, "161a7f6d8c9d4009a07b9595a59f2d51d04d5d2576c5f6bac08ccbdab14da7fae2ae2438614f3e8229ae918f2175e7262815e85425756b6b8cd0686f0adab5c024f7275e44dd789385b79b7fb2214fef187a7ab88f42ee7fda7741fd89a00e9fff01874e743eacdba939d54aaf6b6012830eaf146769a3964db3079b4bdd343d215e10634e4daaed7226fd3794d0cd5842d6d8744110b2506c7aa91409cd8dee88caf2f6c90510f8f7b5fd384698b7d3244b2f"}}, &(0x7f0000000480)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "705c72064b5a80029e3f0420a3209d0b21b403cbe83da56f95546f69a820a9db41d7963057758f92126f1399273626c331ddea282f29f496b454e24d7ef2baaae0480d6195f3055ac84ff76cd0b2918c769008a77e7b1cbce6f9da771f1d60bc388ca6486a24062564cc8771eaa740f6dc5d2fbc4d936a3e51508650069e7dc0f9b8e75f1d7bbbfdd9cd95bd4e7c7fca6f23b351dc3a9fda17115c8f63aeb76a89e60d72824e1db04eed75bdd597e3"}}, &(0x7f0000000540)={0x0, 0x22, 0x11, {[@local=@item_4={0x3, 0x2, 0x1, "6f088ed3"}, @global=@item_012={0x1, 0x1, 0xb, "ad"}, @global=@item_4={0x3, 0x1, 0x4, "88d3ce41"}, @local=@item_4={0x3, 0x2, 0x9, "bc24360c"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0xcc4}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)={0x20, 0x8, 0x9, "19edf9e313de0086ea"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1f}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000700)={0x20, 0x1, 0x54, "ce56c2a60925ea0512695b8e5144161a8ff402edc10c3ddf55d805138ed415b920e6aa45858a1c9a71b04843fb2c901abd73581e14a5ba0bc4adc03ae5e0e899c388b54e341927609ef41ffd47f90e03cae2dc47"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x1}}) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) [ 744.205445][T28219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.207525][T28219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:12:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:24 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 00:12:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 744.704222][T28231] device syzkaller1 entered promiscuous mode 00:12:24 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000800)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0xff}, 0x5) [ 744.887565][ T7331] usb 1-1: USB disconnect, device number 13 00:12:24 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x14018, &(0x7f00000004c0)={[{@uid}, {@nobarrier}, {@nodecompose}, {@barrier}, {@gid}, {@creator={'creator', 0x3d, "16a79dad"}}, {@creator={'creator', 0x3d, "04efedeb"}}, {@creator={'creator', 0x3d, "8e4d9137"}}, {@gid}]}, 0x1, 0x6af, &(0x7f0000000b80)="$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") 00:12:24 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x7ff}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6}]}]}, 0x58}}, 0x0) 00:12:25 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:25 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8001}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0x48}}, 0x0) 00:12:25 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:25 executing program 4: r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1!\x00\x00\x80\x19w\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:25 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) [ 745.785164][T28276] loop1: detected capacity change from 0 to 512 00:12:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 745.837227][T28276] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=e040e01c, mo2=0000] [ 745.843723][T28276] System zones: 0-2, 18-18, 34-34 [ 745.869714][T28276] EXT4-fs error (device loop1): ext4_init_orphan_info:586: comm syz-executor.1: inode #0: comm syz-executor.1: iget: illegal inode # 00:12:25 executing program 4: syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000800)) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) [ 745.906403][T28276] EXT4-fs (loop1): get orphan inode failed [ 745.931405][T28276] EXT4-fs (loop1): mount failed 00:12:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:25 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendfile(r0, r0, 0x0, 0xdc08) 00:12:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:26 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendfile(r0, r0, 0x0, 0xdc08) 00:12:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 00:12:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:26 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x14018, &(0x7f00000004c0)={[{@uid}, {@nobarrier}, {@nodecompose}, {@barrier}, {@gid}, {@creator={'creator', 0x3d, "16a79dad"}, 0xa}, {@creator={'creator', 0x3d, "04efedeb"}}, {@creator={'creator', 0x3d, "8e4d9137"}}, {@gid}]}, 0x1, 0x6af, &(0x7f0000000b80)="$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") 00:12:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:26 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x14018, &(0x7f00000004c0)={[{@uid}, {@nobarrier}, {@nodecompose}, {@barrier}, {@gid}, {@creator={'creator', 0x3d, "16a79dad"}}, {@creator={'creator', 0x3d, "04efedeb"}}, {@creator={'creator', 0x3d, "8e4d9137"}}, {@gid}]}, 0x1, 0x6af, &(0x7f0000000b80)="$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") 00:12:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:26 executing program 0: r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1804d41, &(0x7f0000000000)={[{@lazytime}]}, 0x1, 0x4ca, &(0x7f0000001bc0)="$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") 00:12:26 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 00:12:26 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000800)) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) 00:12:27 executing program 0: r0 = socket(0x10, 0x2, 0x9) sendto$ax25(r0, &(0x7f0000000080)="0ff9e90d7acb5244519ca06e4f974f87", 0x10, 0x0, 0x0, 0x0) 00:12:27 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', 0x0}) 00:12:27 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f00000000c0)=0xffff0000) 00:12:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:27 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0xc0305710, &(0x7f0000000240)=0xba71) 00:12:27 executing program 1: keyctl$dh_compute(0x2, 0x0, 0x0, 0x1ffff000, 0x0) 00:12:27 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x133, 0xffffffffffffffff, 0x0) 00:12:27 executing program 1: syz_open_dev$audion(&(0x7f0000000180), 0x0, 0x200000) 00:12:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:27 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x32, 0xffffffffffffffff, 0x0) 00:12:27 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "19392d87430aa254bbe448f919a714323ac5eabcbbaad98a479680cea8b89a222af729287e9e670149d428de54a0c6c80b4da6518811883d6f0c1a56845386a8"}, 0x48, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 00:12:27 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8941, 0x0) 00:12:27 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8917, 0x0) 00:12:27 executing program 0: socket(0x3, 0x0, 0xffff) 00:12:27 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x0, 0xe0789ac5255b9dfe}, 0x0, 0x0) 00:12:27 executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000, 0x0) 00:12:27 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 00:12:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x479, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x6, 0x0, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x1, 'vlan1\x00', {}, 0x890}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r2}) accept(r2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000019c0)={r4, 0xffffffffffffffff}, 0xfffffffffffffe53) r6 = socket(0x25, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r6) getsockname$llc(r6, &(0x7f0000001ac0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001b00)=0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000001a40)={0x1, 0x0, &(0x7f0000001a00)=[r2, r1, r5, r1, r7]}, 0x5) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000001b40)={0x0, 'bond_slave_1\x00', {0x2}, 0x7}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000001980)={&(0x7f0000002000)={[{&(0x7f0000000400)="715e4c5da64fde52feac8013768e0540246c", 0x12, 0x3}, {&(0x7f0000000440)="33b3043636c74f4738a4f287505610a0f1372e277a38ffaf5b62f289eb08186255250f09ffe513f753cda4c24b16dc719471de96af951164fc97b5e475e4a9f4b9d62ba1a6c657a83c6e726ac200f5d4e8ae1960b81e8a1297b24c597b733c187b5d94a4ec0ee77d06fd1d583aaf54c4d7db49b076926e3e0735a0a9b0f11063ac9aa7416ffe210cc32c70bafc6c1d5f7b48afb77f135db4c6c9289c9aec2a91275dd083bbe11aa8e61074d88fe6f40b71", 0xb1, 0x3}, {&(0x7f0000000500)="6e5050e75bad820969749e5677eed0d3f0039834a6979a3b9cfe194d0fbe80b0ed96239b1ae0dff0f917aa6c8e7511c9914f498bd6", 0x35, 0x3}, {&(0x7f0000000540)="6b20782265105435feae4a908d9471ba4df960cb13a522af2000c5b34aa25feb353ed12f38ec4a02c3ca6f5c2e92da7bcc591d4b6b599b6f5cd721ef86f97317a65872aac31eeb76adfccc6e57b677793562ad648cb4b4f107aace420923d1c4ccda791d0413f0456e251167beeacb678a0d7fd5ee04d6c9726756d2a0db13288b9fcb4dbe5755eba17f2e9082", 0x8d, 0x3}, {&(0x7f0000000600)="7d5f84002522206aef53927e06e02fb850381b1b40bba46cc7db76bb56d900d02c5db099a1152d14ddc5a9cccccbb6bc1e1cb97cd44c28d98ccdf09d996d9afbdc9414eac663e42abad9e9e98956991b65c8b541b4d7defc9445dd699fc32bfb1b1b8a522906189b03656647b5c85bef04f9a838290e3cbaa7b64b86f48e6955cee58a4d0bf00bc56f2e895d54b22c96371591b16a0798c768d7699307806b4a393c7b9d21da4ff2974178a5400b04aee0bb247e96d5d8c61653d9862052232c9a19f290c002410e840614e01890eaeab857f107e7fbaa211adc7a6b55323b6b7e6dd56ccab074b670a26fd4fbfd0ed6ae", 0xf1, 0x3}, {&(0x7f0000000700)="1060be9ced0581b2e32b2737dd577ce47a9fed28ab60b7d507c06f988de26ae5287a2c1f41e8d7db4bb3ce8c151fdf03f4f218ea7eecde13dab697bf6e68c3328a81a8167b2c4f8c5ac0b174f6d9ca9c319c3740af09f9fea1d717371de096d7386431390e182e", 0x67, 0x1}, {&(0x7f0000000780)="d705c67047e6dd35c471629edfa881f870d8b4e9da32709c4e12b53b44ab0af79da7337698d3ca6d3c023bdbc4fbc808632ff5eeeec9955062a16feab7865e8c728474e6706462e4a90a1333a3e041e1cc4f357fc65cb5b14889873e6243e78e753e96748821dae5a97f2432bd8f07e4d228863b400beb7e0a3caa46e7e060eb0cb3579f35ff36edc903ffa42c40108deedb2e966c6badcf75e5a4135b43b6b111d47eaa129a014e213be19fb113b929490653a219b30a861711e3405c59bc", 0xbf, 0x1}, {&(0x7f0000000840)="9e99f49f2c5fd8e2f7ef", 0xa}, {&(0x7f0000000880)="f9088e7f48d9fd011dac7d1dddb9920c315eb0b32ea6f2322c687dfec7fa37a20d3429563e4561f25e514addbd37af493b54607a2edfc64073438dce658690b2bd6e2bc43da36ba5f84e2a19235ede14d078fa953715cd717468df57036520067ed4b1f1ed868e0a53924a9116784ee74ccc3bf512479fe28b80ec36d3102bcfa746a7298218916fcb565eea7298c3f80afa331469cd00ca57076432b4702ff72cbe914226dab3d177207d2f7543430d4fb7c97f1333c3e96e3cb28bebde4e97c38288332ee732444c26d24d0bba7cda71968f373227a2d6adb4f4dee23e23ad3519ce0a62973e", 0xe7, 0x2}, {&(0x7f0000000980)="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", 0x1000, 0x3}]}, 0xa, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000001200)={&(0x7f0000002000)={[{&(0x7f0000000000)="2ac5af102db73c5d0fd7399eb21010b5fb90a31ec23eb9633b2cbc8c1ec3749e456faf", 0x23, 0x2}, {&(0x7f0000000040)="9001a28018c124ca9bee94875aa119681e937a3e0b4bfcbd234b9123beaf1e235091dc9e7713eea9670a47b26199a1a6d125e1d0bad94844ee5b76f83d0182de2115d8511b94570b3b2d1a58ae64e94cd30b9d03442bff72b640f8f8ec8a7210007e3981cbbf2bcf079d83a379f97474baab54dc03a9cd5bbe4d41eadf4e8d6e5e3c5e3eb23eee5da2bb9eb741d7c018902c4fa4bf46978291fcc010fe4bbb248c55073f0ad38a4b20fd9442d0716d6e91", 0xb1, 0x1}, {&(0x7f0000000180)="7f005fd7ce83a2659ef81602c2040ebc18e0923d66e86a02546b4490047d4acb27a57747fe6243c6cb58a09de7e6a1b963d80d4587a8de4b742e119dd9d401602791f878206467c3d32ddcf05d6afd7237acb613a4469c55afa765a0f5104a965e236fe7bbafa9d701", 0x69}, {&(0x7f0000000100)="bd6bcb10fe63c29786a60e9c206730e669b5", 0x12, 0x2}, {&(0x7f0000000200)="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", 0x1000, 0x2}]}, 0x5, 0x2}, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x401c5820, &(0x7f0000000140)={0x8, 'veth0_macvtap\x00', {}, 0x4007}) 00:12:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:27 executing program 0: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8907, 0x0) 00:12:27 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x400454a4, &(0x7f0000000180)) 00:12:27 executing program 0: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) 00:12:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @dev}}) 00:12:28 executing program 4: io_uring_setup(0x0, &(0x7f0000000080)) 00:12:28 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) 00:12:28 executing program 1: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000e00)=[&(0x7f0000000d00)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 00:12:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:28 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendto$ax25(r0, 0x0, 0x0, 0x10000081, 0x0, 0x0) 00:12:28 executing program 4: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000e00)=[&(0x7f0000000d00)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 00:12:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x6f03}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) [ 748.323488][T28442] tipc: Enabling of bearer rejected, failed to enable media 00:12:28 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x40, r0}, 0x38) 00:12:28 executing program 4: set_mempolicy(0x0, &(0x7f0000000000)=0x8, 0x8ca) 00:12:28 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, 0x0) 00:12:28 executing program 4: io_uring_setup(0x4e97, &(0x7f0000000000)) 00:12:28 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000c0000000600000005000085010000000f00000000000000000000800000000003000000000100000200000005000000070000000e0000000100000001000000ffff000004000000070000000b00000000000002000000000000000000000003000000000200000001000000ff010000005f1e005f006161302e5f"], 0x0, 0x90}, 0x20) 00:12:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:28 executing program 4: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000180)) write(0xffffffffffffffff, &(0x7f0000000340)="c744a84e7426165c08bcffb2873bfebe0aa003a1fcd00083edd6801c2d02702432771581948077b4bf8a01aafb", 0x2d) timerfd_create(0x0, 0x0) 00:12:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 00:12:28 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x3, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 00:12:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250200000008000100", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB='\b'], 0x54}}, 0x0) [ 748.774808][T28469] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r0) 00:12:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:28 executing program 1: socket(0x23, 0x0, 0x100000) 00:12:28 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x32, 0xffffffffffffffff, 0x0) 00:12:28 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0, 0x2}, 0x18) 00:12:28 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000140)) 00:12:28 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2, 0x0, 0x2}}, &(0x7f0000000240)=""/38, 0x1a, 0x26, 0x1}, 0x20) 00:12:28 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) 00:12:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000c00)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}]}]}, 0x28}}, 0x0) 00:12:29 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "bec7ccbecf5af825d2352606f1134d5b334dc2205acd83ad10b5c3359befa467", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6b562e43ae069c94e1740d8ecf27f5250ffd56db133fb0059ef867a0ecd893be", r1}) [ 749.070676][T28489] tipc: Enabling of bearer rejected, failed to enable media 00:12:29 executing program 0: syz_open_dev$vcsn(&(0x7f0000000500), 0x1, 0x10000) 00:12:29 executing program 1: r0 = fsopen(&(0x7f0000000240)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) 00:12:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r1, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:29 executing program 4: socketpair(0x1a, 0x0, 0x0, &(0x7f0000002340)) 00:12:29 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:29 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x10, 0x0) 00:12:29 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000240)) 00:12:29 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, @default, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 00:12:29 executing program 0: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, r0+60000000}, 0x0) 00:12:29 executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 00:12:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) 00:12:29 executing program 4: r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x3, 0x3, 0xcf1, 0x0, 0x1}, 0x48) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x5, r0, r1, 0x0) 00:12:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x80000001}, 0x48) 00:12:29 executing program 1: keyctl$dh_compute(0x1e, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0}) 00:12:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}}, 0x0) 00:12:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000180)) [ 749.586305][T28528] syz-executor.4 uses old SIOCAX25GETINFO 00:12:29 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x89f7, &(0x7f0000000000)={'ip6_vti0\x00'}) 00:12:29 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@x={0x94, 0x0, "dc49ed4db42f"}) 00:12:29 executing program 1: keyctl$dh_compute(0x18, 0x0, 0x0, 0x20000000, 0x0) 00:12:29 executing program 4: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 00:12:29 executing program 0: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@dont_measure}]}}, 0x0, 0x0, 0x0) 00:12:29 executing program 1: r0 = socket(0x2, 0x5, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) [ 749.786509][T28543] fuse: Bad value for 'fd' 00:12:29 executing program 1: bpf$MAP_UPDATE_ELEM(0x9, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 00:12:29 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 00:12:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:29 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}]}}, &(0x7f0000000240)=""/38, 0x32, 0x26, 0x1}, 0x20) 00:12:29 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:29 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:29 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)={{0x0, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 00:12:29 executing program 1: keyctl$KEYCTL_WATCH_KEY(0x16, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='4', 0x1, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) 00:12:29 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={0x0}}, 0x0) 00:12:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0xffffff7f00000000}}, 0x0) 00:12:30 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup=r0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:30 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8903, 0x0) 00:12:30 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0189436, &(0x7f0000000180)) 00:12:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:30 executing program 4: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x891c, 0x0) 00:12:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:30 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)={0x2, 0x0, @c}, 0x29, 0xffffffffffffffff) 00:12:30 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5460, 0x0) 00:12:30 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040)) 00:12:30 executing program 1: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040), 0x14) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='/dev/virtual_nci\x00', 0x0, 0xffffffffffffffff) socket$phonet(0x23, 0x2, 0x1) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) 00:12:30 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x1, &(0x7f00000005c0)=@raw=[@func], &(0x7f0000000640)='syzkaller\x00'}, 0x90) 00:12:30 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x2, &(0x7f0000000180)) 00:12:30 executing program 4: r0 = socket(0xa, 0x3, 0x1) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) [ 750.412442][T28584] Unsupported ieee802154 address type: 0 00:12:30 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x4}, &(0x7f0000000040)={0x2}, &(0x7f0000000080)={0x3}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 00:12:30 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xa}, {}]}]}}, &(0x7f00000008c0)=""/81, 0x36, 0x51, 0x1}, 0x20) 00:12:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd70a20c0000003a"], 0x1c}}, 0x0) 00:12:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) 00:12:30 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, &(0x7f0000000180)={{0x3, 0x0, 0x1, 0x1}}) 00:12:30 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) 00:12:30 executing program 4: r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='posixacl\x00', 0x0, 0x0) 00:12:30 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:12:30 executing program 4: r0 = socket(0xa, 0x3, 0x1) bind$pptp(r0, 0x0, 0x52) [ 750.688066][T28603] device syzkaller1 entered promiscuous mode 00:12:30 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x401c5820, &(0x7f0000000180)) 00:12:30 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000140)=@framed={{}, [@map_idx_val]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x90) 00:12:30 executing program 4: add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="61ceeb30c4aa351a67f24516ba5f928ec6cd8d42bf499a2f269e09", 0x1b, 0xfffffffffffffffd) 00:12:30 executing program 1: r0 = fsopen(&(0x7f00000003c0)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000400)='sockfs\x00', &(0x7f0000000580)="9b", 0x1) [ 750.812888][T28621] trusted_key: encrypted_key: master key parameter '' is invalid 00:12:30 executing program 0: socket(0x23, 0x0, 0x6) 00:12:30 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000080)}]) 00:12:30 executing program 4: r0 = socket(0x2, 0x6, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x40) 00:12:30 executing program 4: syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x0, 0x0, 0x0) 00:12:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) 00:12:30 executing program 4: r0 = socket(0x2, 0x5, 0x0) connect$pptp(r0, 0x0, 0x0) 00:12:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:12:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 751.133933][T28643] device syzkaller1 entered promiscuous mode 00:12:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:31 executing program 4: io_setup(0x0, 0x0) io_setup(0xc61c, &(0x7f0000000180)) 00:12:31 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 00:12:31 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 00:12:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:31 executing program 0: r0 = socket(0xa, 0x3, 0x1) ioctl$SIOCRSSCAUSE(r0, 0x89e1, 0x0) 00:12:31 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8954, 0x0) [ 751.526860][T28648] device syzkaller1 entered promiscuous mode 00:12:31 executing program 0: syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB=',allow_other,default_permissions,appraise_type=imasig,context=sysadm_u,smackfstransmute=))){/'], 0x0, 0x0, 0x0) [ 751.595327][T28659] fuse: Unknown parameter 'appraise_type' 00:12:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1}, 0x90) 00:12:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0xeed06adc25b5fb47}, 0x48) 00:12:31 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000040000000000000e0100000000000000039168c7bf161c6625000000000000070000000000000000000000010000000062"], 0x0, 0x4a}, 0x20) 00:12:31 executing program 1: r0 = socket(0x2, 0x6, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x48}}, 0x0) 00:12:31 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x89f5, &(0x7f0000000080)={'bond0\x00'}) 00:12:31 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0, 0x4}, 0x20) 00:12:31 executing program 1: r0 = socket(0x2, 0x6, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x48}}, 0x0) 00:12:31 executing program 0: r0 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='(', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={0x0, r0}, 0x0, 0x0, 0x0) 00:12:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'sit0\x00'}]}, 0x28}}, 0x0) 00:12:31 executing program 1: r0 = syz_io_uring_setup(0x4509, &(0x7f0000000280), &(0x7f0000000080), &(0x7f00000000c0)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x70002000}) 00:12:31 executing program 0: io_setup(0x800, &(0x7f0000000b40)=0x0) io_destroy(r0) 00:12:31 executing program 1: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000940)=[{}], 0x1, &(0x7f0000000980), &(0x7f00000009c0), 0x60) 00:12:31 executing program 4: socket(0x18, 0x0, 0x8000004) [ 751.962615][T28684] device syzkaller1 entered promiscuous mode 00:12:31 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = fsopen(&(0x7f0000000800)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000840)='\x00', 0x0, r0) 00:12:32 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8901, 0x0) 00:12:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) 00:12:32 executing program 4: io_setup(0x3, &(0x7f0000000000)=0x0) io_destroy(r0) io_getevents(r0, 0x7fff, 0x0, 0x0, 0x0) 00:12:32 executing program 0: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd59}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x89f5, &(0x7f0000000000)={'ip_vti0\x00'}) 00:12:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:12:32 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x228640, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:12:32 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x200000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 00:12:32 executing program 4: keyctl$dh_compute(0xa, 0x0, &(0x7f0000000740)=""/4096, 0x1000, 0x0) 00:12:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 752.360099][T28713] device syzkaller1 entered promiscuous mode 00:12:32 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:32 executing program 4: syz_mount_image$fuse(&(0x7f0000000500), &(0x7f00000003c0)='./file1/file0\x00', 0x0, &(0x7f0000000400)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 00:12:32 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x141440, 0x0) 00:12:32 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x38001, 0x0) 00:12:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:32 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) sendto$ax25(r0, 0x0, 0x0, 0x8080, 0x0, 0x0) 00:12:32 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$pptp(r0, 0x0, 0x0) 00:12:32 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) [ 752.776218][T28720] device syzkaller1 entered promiscuous mode 00:12:32 executing program 0: r0 = socket(0x10, 0x2, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 00:12:32 executing program 4: socket(0xa, 0x0, 0x45b3) 00:12:32 executing program 1: syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, '/\xe5(&'}}]}}, 0x0, 0x0, 0x0) [ 752.862688][T28731] fuse: Bad value for 'fd' 00:12:32 executing program 1: bpf$MAP_CREATE(0xa, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:12:32 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:12:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 00:12:32 executing program 1: r0 = fsopen(&(0x7f0000000240)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:12:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 00:12:33 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x140f, 0x1}, 0x10}}, 0x0) 00:12:33 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045731, 0x0) 00:12:33 executing program 0: r0 = socket(0x10, 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) 00:12:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:33 executing program 4: fsopen(&(0x7f0000000040)='ext3\x00', 0x0) 00:12:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2a}, 0x20) 00:12:33 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x4, &(0x7f0000000400)={r0}, 0x4) 00:12:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0x2, 0x0, 0x0, @local}}, {0x4, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 00:12:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 753.232758][T28755] device syzkaller1 entered promiscuous mode 00:12:33 executing program 0: syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB=',a'], 0x0, 0x0, 0x0) 00:12:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x18}}, 0x0) [ 753.304389][T28770] fuse: Unknown parameter 'a' [ 753.329250][T28768] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 753.331469][T28768] tipc: Enabling of bearer rejected, failed to enable media 00:12:33 executing program 0: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8935, 0x0) 00:12:33 executing program 1: socket$inet6(0xa, 0x5, 0x20) 00:12:33 executing program 4: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}, 0xa2) 00:12:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:33 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendto$ax25(r0, &(0x7f0000000000)="d2", 0x1, 0x0, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) [ 753.509357][T28780] device syzkaller1 entered promiscuous mode 00:12:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:33 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 00:12:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 00:12:33 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 00:12:33 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:33 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 00:12:33 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 00:12:33 executing program 4: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040), 0x14) socket$inet6(0xa, 0x5, 0x20) [ 753.884887][T28791] device syzkaller1 entered promiscuous mode 00:12:33 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x10e, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) [ 753.963160][T28803] Unsupported ieee802154 address type: 0 00:12:33 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000001c0)=ANY=[], 0x4) 00:12:33 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0xfffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 00:12:34 executing program 0: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8906, 0x0) 00:12:34 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x101}}) 00:12:34 executing program 4: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) 00:12:34 executing program 0: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000ec0)=',#\x00', 0x0) 00:12:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:34 executing program 0: syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c000, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0), 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 00:12:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x105}, 0x14}}, 0x0) 00:12:34 executing program 1: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty}}) [ 754.249520][T28822] device syzkaller1 entered promiscuous mode 00:12:34 executing program 0: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000180)="a33c", 0x2}]) 00:12:34 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x541b, 0x0) 00:12:34 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 00:12:34 executing program 4: r0 = socket(0x1e, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, 0x0) 00:12:34 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, 0x0, 0x0}, 0x20) 00:12:34 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x51b153d7355cde7]}}, 0x0, 0x2b}, 0x20) 00:12:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:34 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x249111c903287981}}) 00:12:34 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000700), 0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={'crc32c-generic\x00'}}) 00:12:34 executing program 1: fsopen(&(0x7f00000009c0)='binfmt_misc\x00', 0x0) 00:12:34 executing program 0: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, r0+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x8]}, 0x8}) 00:12:34 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, 0x0, 0x0) 00:12:34 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xca2f, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) [ 754.612947][T28847] device syzkaller1 entered promiscuous mode 00:12:34 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:34 executing program 1: r0 = socket(0x2, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 00:12:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee00"/20, @ANYRES32=r4, @ANYBLOB="01000000010051001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000024000b0e0000000000000000ffe40000", @ANYRES32=r4, @ANYBLOB="00002000ffffffff000000000a0001006e6574656d000000280002000000000002008812df00002674000000fdffe1ff000000000c000400eb9b23fa"], 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="050350035801480301020200c52cf7c25975e010b02f8848eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 00:12:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 754.821833][T28867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:12:34 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendto$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:34 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}, {0x3}]}, 0x90) keyctl$dh_compute(0xa, 0x0, &(0x7f0000000740)=""/4096, 0x1000, 0x0) [ 754.882300][T28868] device syzkaller1 entered promiscuous mode 00:12:34 executing program 1: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={{0x0, 0x3938700}}, 0x0) 00:12:34 executing program 4: syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x68, &(0x7f00000006c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 00:12:34 executing program 1: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 00:12:35 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x10) 00:12:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:35 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040), 0x4) [ 755.129455][T28884] device syzkaller1 entered promiscuous mode 00:12:35 executing program 1: keyctl$dh_compute(0x2, 0x0, &(0x7f0000000740)=""/4096, 0x1000, 0x0) 00:12:35 executing program 4: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={r0, r1+60000000}, 0x0) 00:12:35 executing program 1: sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={0x0}, 0x18) 00:12:35 executing program 0: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000180), 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 00:12:35 executing program 0: syz_io_uring_setup(0x8045b, &(0x7f00000004c0), 0x0, 0x0) 00:12:35 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a40)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/222, 0xde, 0xd0, 0x9, 0x80000001, 0x1}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000001f00), 0x4) 00:12:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 755.346934][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.348625][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.354233][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.361642][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 00:12:35 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000280)="e9", &(0x7f0000000340)=""/183}, 0x20) [ 755.375199][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.380309][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.385490][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.388913][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 00:12:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 755.394056][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.397700][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.404216][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.407180][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.412340][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.414230][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.416303][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.418280][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.428659][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.434410][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.435569][T28901] device syzkaller1 entered promiscuous mode 00:12:35 executing program 0: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0xffffffffffffffff, 0x0}, 0x20) [ 755.436283][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.442633][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.444459][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.446252][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.448359][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.452410][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.454223][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.456131][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.457892][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.466479][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.473375][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.475242][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.477059][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.478771][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.491238][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.494322][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.498334][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.504608][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.507452][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.512568][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.515489][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 00:12:35 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 755.522673][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.527265][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.532438][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.536614][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.543172][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.546220][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.551206][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.554178][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.557182][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.562528][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.564321][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.566228][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.568036][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.572536][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.574442][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.576476][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.578420][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.586511][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.593627][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.597385][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.604912][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.611234][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.614226][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.618244][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.624547][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.627203][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 00:12:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 755.647521][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.653956][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.662214][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.667352][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.673429][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.676316][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.678720][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.685051][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.686755][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.688646][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.690879][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 00:12:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 755.692774][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.694733][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.696661][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.698435][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.711932][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.715994][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.720382][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.723513][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.725324][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.727363][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.732240][T28913] device syzkaller1 entered promiscuous mode [ 755.732302][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.735688][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.737667][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.744554][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.746635][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.748547][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.752163][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.754343][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.756095][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.757865][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.764360][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.766084][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.767788][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.771335][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.773101][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.774984][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.776784][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.778603][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.785048][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.786865][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.788635][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.798531][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.802772][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.805702][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.808701][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.811986][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.815997][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.817808][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.824163][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.825922][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.827753][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.831210][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.832956][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.835801][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.837578][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.843936][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.845680][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.847449][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.850740][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.852549][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.854318][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.855958][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.857701][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.865473][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.867191][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.870336][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.872110][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.878331][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.880310][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 00:12:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 755.885181][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.887152][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.888984][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.891170][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.892936][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.894671][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.896538][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.898264][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 00:12:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 755.903712][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.905430][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.907155][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.911230][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.912957][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.914686][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.916428][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.918128][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.923208][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.924906][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.926607][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.935311][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.938327][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.943870][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.945678][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.947485][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.951616][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.953299][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.954999][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.956877][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.958538][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.963740][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.965479][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.967325][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.971576][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.973278][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.974977][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.976721][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.978469][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.982028][T28920] device syzkaller1 entered promiscuous mode [ 755.985779][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.988061][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.992671][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.995307][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 755.997136][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.002434][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.004157][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.005911][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.007674][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.011710][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.013533][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.015317][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.017054][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.018783][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.027034][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.031272][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.033121][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.034813][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.036509][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.042751][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.044443][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.046211][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.047928][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.055500][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.057758][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.063848][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.066158][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.067976][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.072273][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.074056][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.075810][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.077547][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 00:12:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 756.088654][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.104865][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.106611][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.108300][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.114325][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.115974][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.117619][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.131723][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.133401][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.135034][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.136687][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.138470][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.154393][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.158328][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.163256][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.164937][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.166611][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 [ 756.168296][T13483] hid-generic 00D0:0009:80000001.0005: unknown main item tag 0x0 00:12:36 executing program 4: r0 = socket(0x26, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x0, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) [ 756.192672][T13483] hid-generic 00D0:0009:80000001.0005: hidraw0: HID v0.01 Device [syz0] on syz0 00:12:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 00:12:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:36 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) 00:12:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000140)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) [ 756.417426][T28935] device syzkaller1 entered promiscuous mode 00:12:36 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000600)) 00:12:36 executing program 4: syz_open_dev$midi(&(0x7f0000000080), 0x2a, 0x0) 00:12:36 executing program 1: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 00:12:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:36 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:36 executing program 1: syz_open_dev$vcsn(&(0x7f0000000300), 0x6, 0x0) 00:12:36 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 00:12:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:36 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) write(r0, 0x0, 0x0) 00:12:36 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x894c, 0x0) [ 756.755828][T28958] device syzkaller1 entered promiscuous mode 00:12:36 executing program 1: fsopen(&(0x7f0000000240)='nfs\x00', 0x0) 00:12:36 executing program 4: r0 = socket(0x28, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 00:12:36 executing program 1: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 00:12:36 executing program 4: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x7800}}) 00:12:36 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) getsockname$l2tp(r0, 0x0, &(0x7f0000000040)) 00:12:36 executing program 4: r0 = socket(0x2, 0xa, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:36 executing program 1: r0 = socket(0x22, 0x2, 0x4) connect$can_bcm(r0, 0x0, 0x0) 00:12:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:36 executing program 4: add_key(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x1e, r0, 0xffffffffffffffff, 0x0) [ 757.027223][T28977] device syzkaller1 entered promiscuous mode 00:12:38 executing program 0: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) 00:12:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000600)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) 00:12:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:38 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x51b153d7355cde7, 0x2e, 0x2e]}}, 0x0, 0x2d}, 0x20) 00:12:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) 00:12:38 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x70002017}) [ 758.665026][T28990] device syzkaller1 entered promiscuous mode 00:12:38 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)={0x50002010}) 00:12:38 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0245720, 0x0) 00:12:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000100)=@raw=[@map_val], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) 00:12:38 executing program 0: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r0}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'sha384-ssse3\x00'}}, 0x0, 0x0) 00:12:38 executing program 4: add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)=' ', 0x1, 0xfffffffffffffffc) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) 00:12:38 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x3ff, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 00:12:38 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)) 00:12:38 executing program 4: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8914, 0x0) 00:12:38 executing program 0: r0 = socket(0x26, 0x5, 0x0) accept$ax25(r0, 0x0, 0x0) 00:12:38 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001f00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0}) 00:12:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x14, 0x0, 0xb6d0b25d749e3d9d}, 0x14}}, 0x0) 00:12:39 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)) 00:12:39 executing program 4: r0 = socket(0x29, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) 00:12:39 executing program 1: r0 = socket(0x26, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x6, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 00:12:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:39 executing program 4: syz_io_uring_setup(0x7f3d, &(0x7f00000000c0)={0x0, 0x0, 0x100}, &(0x7f0000000140), &(0x7f0000000180)) 00:12:39 executing program 1: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000e00)=[&(0x7f0000000d00)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:12:39 executing program 4: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, r0+60000000}, &(0x7f0000000340)={&(0x7f0000000300), 0x8}) 00:12:39 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001400)={'vxcan1\x00'}) 00:12:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:39 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) 00:12:39 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x0, 0x4858}) 00:12:39 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a40)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/222, 0xde}}, 0x120) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$UHID_DESTROY(r0, &(0x7f0000001f00), 0x4) 00:12:39 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 00:12:39 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0x7}]) 00:12:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:39 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 00:12:39 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000)="a4", 0x0}, 0x20) 00:12:39 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)) 00:12:39 executing program 1: r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x16, r0, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='4', 0x1, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) 00:12:39 executing program 4: r0 = socket(0x22, 0x2, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:12:39 executing program 1: syz_open_dev$dmmidi(&(0x7f0000002340), 0x0, 0x0) io_setup(0xf40, &(0x7f0000000240)) [ 759.855586][T29071] device syzkaller1 entered promiscuous mode 00:12:39 executing program 4: r0 = socket(0x2, 0x6, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0x0) 00:12:39 executing program 4: r0 = socket(0x2, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x140) 00:12:39 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000300)=@raw={0x0, 0x0, "2206ca2ace9a"}) 00:12:39 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:39 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000340)="c7", 0x1) 00:12:40 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000300)=@raw={0x0, 0x0, "2206ca2ace9a"}) 00:12:40 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0}, 0x4) 00:12:40 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:12:41 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @enum]}}, 0x0, 0x3e}, 0x20) 00:12:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x9, 0xff, 0xffff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 00:12:41 executing program 4: syz_io_uring_setup(0x5793, &(0x7f0000000500)={0x0, 0x0, 0x2100}, 0x0, 0x0) 00:12:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:42 executing program 4: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback}}) [ 762.086583][T29102] device syzkaller1 entered promiscuous mode 00:12:42 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@raw={0x0, 0x0, "942bc02962c3"}) 00:12:42 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5452, 0x0) 00:12:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(r0, 0xffffffffffffffff, 0x0) 00:12:42 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000040)) 00:12:42 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@e={0xff, 0x0, 0x7, 0x0, @SEQ_NOTEON=@special}) 00:12:42 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) 00:12:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x4881) 00:12:42 executing program 4: syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x2291820, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 00:12:42 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) read$sequencer(r0, &(0x7f0000000080)=""/48, 0x30) 00:12:42 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x94000, 0x0) 00:12:42 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x4020940d, 0x0) 00:12:42 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:42 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000200)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 00:12:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:42 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x4}, 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 00:12:42 executing program 1: syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='.\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0) 00:12:42 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendto$ax25(r0, &(0x7f0000000700)='l', 0x1, 0x0, 0x0, 0x0) 00:12:42 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000640)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000540)=""/194, 0xc2}}, 0x120) write$UHID_INPUT(r0, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0x1006) 00:12:42 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/mnt\x00') 00:12:42 executing program 4: keyctl$dh_compute(0x13, 0x0, &(0x7f0000000740)=""/4096, 0x1000, 0x0) [ 762.576994][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.578676][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.581463][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.585490][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.590629][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.598074][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.605327][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.613947][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.617970][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.626935][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.634515][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.636325][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.638156][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.641891][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.643696][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.645447][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.647207][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:42 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) [ 762.654134][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.656017][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.657852][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.662101][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.663874][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:42 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 762.686940][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.694880][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.700322][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.703235][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.707229][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.711348][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.714276][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.718290][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.722626][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.726615][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.731050][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.733284][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:42 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 762.735394][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.737264][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.740529][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.742412][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.744240][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.745988][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.747893][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.751002][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.752814][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.754685][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.756526][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.758321][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.765604][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:42 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0xfffffffffffffffc}}) [ 762.786350][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.792666][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.799140][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.802362][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.805320][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.808262][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:42 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/38, 0x1a, 0x26, 0x1}, 0x20) [ 762.812099][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.814267][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.816128][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.817843][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.820045][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.821784][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.823580][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.825350][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:42 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2, &(0x7f0000000740)=@raw=[@cb_func], &(0x7f00000007c0)='GPL\x00', 0xc}, 0x90) [ 762.836248][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.840412][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.852652][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.855526][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.861820][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.867346][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.870321][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.874418][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.878430][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.890090][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.894033][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.896821][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.901520][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.906489][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.908403][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:42 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000380)='bbr\x00', 0x4) write$tcp_congestion(r0, &(0x7f0000000100)='hybla\x00', 0x6) [ 762.923517][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.929846][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.936131][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.942509][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.945451][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.950517][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.954613][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.959185][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.963348][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.967416][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:42 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$sequencer(r0, &(0x7f00000001c0)=""/161, 0xa1) [ 762.981541][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 762.983552][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:42 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r0, &(0x7f00000000c0)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0x0, "1651504ec7f56361a8e08138f93bba1c7371f05384465572725e4c606616eac9920ce686abf89511cb5815a906e7bf3787d144f2880d972eeeaad90167119f696ab0fb83677073446989d3d34c69547242b10402ad2f701a1e5d7cde49b82a3d187287022ec75a852b26f8"}, 0xffffff35) [ 762.988706][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.003085][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.009114][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.016637][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.021891][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.026977][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.032458][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.036687][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.039887][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.043444][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.045318][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.047199][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.049591][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:43 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000b40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 763.051750][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.053563][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.055410][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.057261][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.059820][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.061586][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.063433][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.065355][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.067285][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.070364][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.072490][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.074385][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 763.095378][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.100324][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.102536][T29174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.105555][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.108499][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:43 executing program 4: keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000740)=""/4096, 0x1000, &(0x7f0000000080)={0x0}) 00:12:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 763.123688][T29174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.125710][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.132016][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.137181][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.142419][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.145136][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.147864][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.150977][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.153884][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.156741][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.160862][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.163786][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.167812][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:43 executing program 4: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x891b, 0x0) [ 763.171951][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.175920][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.179237][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.183266][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.190940][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.194934][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.199286][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.202186][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.206798][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.211722][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.215719][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.218574][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.223108][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.227150][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.231042][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.235169][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.238110][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.242481][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.246518][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.250550][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.254602][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.257500][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.261661][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:43 executing program 4: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, &(0x7f0000000080)={0x3}, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x800]}, 0x8}) [ 763.269668][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.273649][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.277735][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.280633][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.284691][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.288606][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.292951][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.295956][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.299886][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.303950][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.306852][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.311911][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.314766][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.319285][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.323278][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:43 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x60000008}) [ 763.327418][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.338044][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.343840][T29185] device syzkaller1 entered promiscuous mode [ 763.344498][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.351540][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.354268][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.356314][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.358122][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.360411][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.362184][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.364039][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.365845][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.367723][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.370402][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.372244][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.374084][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.375783][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.377558][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.379867][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.381598][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.383364][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.385071][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.386825][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.388688][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.391131][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 00:12:43 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x80108906, 0x0) [ 763.392848][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.406086][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.410367][T28463] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 763.415250][T28463] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz1 00:12:43 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x8]}, 0x8}) 00:12:43 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x2, &(0x7f0000000c80)=@raw=[@initr0], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d80), 0x8}, 0x90) 00:12:43 executing program 0: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) 00:12:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000240)=""/38, 0x0, 0x26, 0xa}, 0x20) 00:12:43 executing program 0: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) 00:12:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:12:43 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x2, &(0x7f00000007c0)=@raw=[@func], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 00:12:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48) 00:12:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}}, 0x0, 0x2e}, 0x20) 00:12:43 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000000)=0x1f) 00:12:43 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:43 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) 00:12:43 executing program 0: syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) getrusage(0x0, &(0x7f0000000000)) 00:12:43 executing program 4: fsopen(&(0x7f0000000240)='ntfs3\x00', 0x0) 00:12:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:43 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0xd, &(0x7f0000000c80)=@raw=[@snprintf], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0), 0x10}, 0x90) 00:12:43 executing program 0: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/102, 0x210000, 0x1000, 0x0, 0x1}, 0x20) 00:12:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a, 0x0, 0x0, 0x0, 0x2005, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) 00:12:43 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:43 executing program 4: socketpair(0x29, 0x5, 0x2, &(0x7f0000000040)) 00:12:44 executing program 1: r0 = socket(0x10, 0x2, 0x9) sendto$ax25(r0, &(0x7f0000000080)="0f", 0x1, 0x0, 0x0, 0x0) 00:12:44 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) fcntl$setstatus(r0, 0x4, 0x400) 00:12:44 executing program 4: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x0, r1, 0x0}]) 00:12:44 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x1, &(0x7f0000000c80)=@raw=[@alu], &(0x7f0000000d00)='GPL\x00'}, 0x90) 00:12:44 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) read$sequencer(r0, &(0x7f00000001c0)=""/235, 0xeb) 00:12:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:44 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r0, &(0x7f00000047c0)={0x0, 0x0, 0x0}, 0x40002003) 00:12:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250200000008"], 0x54}}, 0x0) 00:12:44 executing program 1: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x10) 00:12:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 764.331484][T29247] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 00:12:44 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40485404, &(0x7f0000000180)={{0x3, 0x0, 0x1, 0x0, 0x3d}}) 00:12:44 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$midi(r0, 0x0, 0x0) 00:12:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0xa09}, 0x48) 00:12:44 executing program 1: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='.dead\x00', 0x0) 00:12:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x4, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x4, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 00:12:44 executing program 0: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 00:12:44 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$damon_init_regions(r0, 0x0, 0x0) [ 764.499669][T29260] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 00:12:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r0) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_VENDOR(r4, 0x0, 0x800) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x880) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, 0x0, 0x24008841) 00:12:44 executing program 1: r0 = socket(0x2, 0x6, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 00:12:44 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 00:12:44 executing program 0: socket(0x2, 0x3, 0x8) 00:12:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe8000000000000000000000000000aa00000000200002000a0000000000000020010000000000000000000000000000000000000d0001007564813a73"], 0x6c}}, 0x0) [ 764.663641][T29270] device syzkaller1 entered promiscuous mode [ 764.669766][T29276] tipc: Enabling of bearer rejected, media not registered 00:12:44 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5450, 0x0) 00:12:44 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x116, r0}, 0x38) 00:12:44 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 00:12:44 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x116, r0}, 0x38) 00:12:44 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) 00:12:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x10, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 00:12:44 executing program 4: keyctl$dh_compute(0x18, 0x0, 0x0, 0xfffffffff000, 0x0) 00:12:44 executing program 0: r0 = socket(0x28, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 00:12:44 executing program 1: fsopen(&(0x7f00000000c0)='fusectl\x00', 0x0) 00:12:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:44 executing program 4: r0 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='%@!%\x00', 0x0, r1) 00:12:44 executing program 0: syz_open_dev$midi(&(0x7f0000000080), 0xffffffffffffffff, 0x230902) 00:12:44 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) 00:12:44 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:44 executing program 0: keyctl$dh_compute(0x18, 0x0, 0x0, 0xffff91dfffff, 0x0) 00:12:45 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:12:45 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 00:12:45 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x40049409, 0x0) 00:12:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:45 executing program 0: add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffb) 00:12:45 executing program 4: io_setup(0xc61c, &(0x7f0000000180)) 00:12:45 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x89a0, 0x0) 00:12:45 executing program 0: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8953, 0x0) 00:12:45 executing program 1: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, r0+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x8]}, 0x8}) 00:12:45 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a40)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/222, 0xde, 0x0, 0x0, 0x0, 0x1}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000001f00), 0x4) [ 765.759989][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.761639][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.763261][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.764890][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.766850][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.768550][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.779924][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.783119][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.786193][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:45 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) [ 765.799378][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.805772][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.816527][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.822928][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.828247][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.832764][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.836851][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.841063][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.843360][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.847376][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.850645][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.858080][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.863513][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.866420][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.874030][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.876912][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.881205][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:45 executing program 4: r0 = socket(0x28, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x28, 0x7, 0x0, 0x0) [ 765.883989][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.896644][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.900293][T29333] device syzkaller1 entered promiscuous mode [ 765.903144][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.917119][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.924919][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.928430][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.936538][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.943517][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:45 executing program 4: clock_gettime(0x2, &(0x7f0000000240)) [ 765.949512][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.966484][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.972863][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.984104][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.987628][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.989667][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.991366][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.993209][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.995101][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.996901][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 765.998776][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.006101][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.007866][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.009841][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.011672][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:45 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file1\x00'}, 0x18) [ 766.016029][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.017938][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.024823][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.026698][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.028479][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.030311][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.031998][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.033743][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.035498][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.037224][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.044323][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.046106][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.048041][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.049919][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.051694][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.072676][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.075882][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.080492][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80281, 0x0) [ 766.085812][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.091325][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.095458][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.107247][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.114174][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.118516][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.124991][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.128681][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.136142][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 766.153635][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 4: keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={'ghash-generic\x00'}}) [ 766.159360][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.163444][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.166739][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.176519][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.181741][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.187463][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.195472][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.200785][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.208612][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.213952][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.221692][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.225703][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.232587][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) write$FUSE_IOCTL(r0, 0x0, 0x0) [ 766.237743][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.243925][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.246931][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.250995][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.254381][T29345] device syzkaller1 entered promiscuous mode [ 766.255775][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.267498][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.271565][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 766.274546][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.283676][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.288797][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.293051][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.297168][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.304579][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.308605][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a1) [ 766.314171][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.318231][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.325797][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.330915][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.335064][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.339209][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.342164][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.344723][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.346433][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.358348][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.365503][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.367095][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.368672][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.375655][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.377330][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.379341][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f00000005c0)={@null, @bcast}) [ 766.381742][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.383781][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.385585][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.387182][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.389496][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.391003][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.392726][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.394263][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.395865][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.397476][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.399834][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.401429][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.403022][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.404645][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.406237][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.407812][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.413286][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.414877][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.416510][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.418068][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.421208][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.422835][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.424413][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.425980][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.427661][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.448907][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.453604][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.455286][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.456862][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.458489][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.461674][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.463272][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5421, &(0x7f0000000180)) [ 766.466002][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.468142][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.474846][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.476435][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.478019][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.481175][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.482774][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.486375][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.487984][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.490100][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.491620][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.493227][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.494729][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.496316][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={'hmac(sha256-avx2)\x00'}}) [ 766.498803][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.501116][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.502655][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.504242][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.505861][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.507352][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.509463][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.511096][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.512656][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.514271][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.515832][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.517359][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.525750][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.527401][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.534930][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.536698][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.538702][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 766.545430][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.548200][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.552466][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.556545][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.560477][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.563249][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.567247][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.570709][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.574645][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.578532][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.583592][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.585845][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) [ 766.595684][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.598424][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.604702][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.607493][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.614672][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.617156][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.619283][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.621077][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.622838][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.626850][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 4: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040), 0x0, 0x0) [ 766.639807][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.641491][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.656689][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.660824][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.662544][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.664217][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.665867][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.676683][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.678612][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.682200][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.684994][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.689378][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.693292][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.696028][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.697963][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 00:12:46 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) [ 766.707704][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.711391][ T109] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 766.725931][ T109] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.01 Device [syz0] on syz0 00:12:46 executing program 0: r0 = socket(0x28, 0x5, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000001) 00:12:46 executing program 4: io_uring_setup(0x4d60, &(0x7f0000000180)={0x0, 0x0, 0x1000}) 00:12:46 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, 0xfffffffffffffffe, 0x2, 0x0) [ 766.845951][T29360] could not allocate digest TFM handle hmac(sha256-avx2) 00:12:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB='\b'], 0x54}}, 0x0) 00:12:46 executing program 1: r0 = syz_io_uring_setup(0x6944, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 00:12:46 executing program 0: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x20) 00:12:46 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) [ 766.943330][T29386] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 00:12:46 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @default}) 00:12:46 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x80108907, 0x0) 00:12:46 executing program 1: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="14", 0x1}, {0x0}], 0x2, 0x0) 00:12:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x4}) 00:12:47 executing program 4: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x10010c}, 0x20) 00:12:47 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) [ 767.075739][T29391] device syzkaller1 entered promiscuous mode 00:12:47 executing program 1: r0 = socket(0x2b, 0x1, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={0x0}}, 0x2004c001) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:47 executing program 4: r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000001740)="c3", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='4', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={'michael_mic-generic\x00'}}) 00:12:47 executing program 0: keyctl$dh_compute(0xc, 0x0, &(0x7f0000000740)=""/4096, 0x1000, 0x0) 00:12:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}}, 0x0) 00:12:47 executing program 4: r0 = socket(0xa, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 00:12:47 executing program 1: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB='d'], 0x0, 0x0, 0x0) 00:12:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 767.261190][T29412] fuse: Bad value for 'fd' 00:12:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0xe10, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) 00:12:47 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20002001}) 00:12:47 executing program 1: keyctl$dh_compute(0x19, &(0x7f0000000000), &(0x7f0000000740)=""/4096, 0x1000, 0x0) 00:12:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:47 executing program 0: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001f80)=[&(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 00:12:47 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x8001, 0x0) 00:12:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r1, 0x105, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) [ 767.436149][T29425] device syzkaller1 entered promiscuous mode 00:12:47 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)) 00:12:47 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x891a, 0x0) 00:12:47 executing program 4: keyctl$dh_compute(0xc, 0x0, &(0x7f0000000000)=""/4110, 0xfffffffffffffe37, 0x0) 00:12:47 executing program 0: socket(0x29, 0x5, 0xf86c) 00:12:47 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x400454a4) 00:12:47 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp6, 0x1}, 0x20) 00:12:47 executing program 0: r0 = socket(0x10, 0x2, 0x0) bind$rose(r0, 0x0, 0x0) 00:12:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x17, 0xa, 0x201}, 0x14}}, 0x0) 00:12:47 executing program 1: socket(0x26, 0x5, 0xa42e) 00:12:47 executing program 0: io_setup(0x80000001, &(0x7f0000000100)) 00:12:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'}) 00:12:47 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB='d'], 0x0, 0x0, 0x0) 00:12:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:12:47 executing program 1: r0 = fsopen(&(0x7f0000000280)='bpf\x00', 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\x00', 0x0, r1) 00:12:47 executing program 4: socket(0x1e, 0x0, 0xa1) 00:12:47 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 00:12:47 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001400), 0x40, 0x0) 00:12:47 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x11, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:47 executing program 1: r0 = socket(0x1, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) [ 767.957638][T29458] device syzkaller1 entered promiscuous mode 00:12:47 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) 00:12:47 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @private}}, 0x1e) bind$pptp(r0, &(0x7f0000000540)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 00:12:47 executing program 1: r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)=':)[\x00', &(0x7f00000000c0)='^', 0x1) 00:12:48 executing program 0: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x80000000}]) 00:12:48 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18) 00:12:48 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) 00:12:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write$tun(r2, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:48 executing program 4: r0 = epoll_create1(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) 00:12:48 executing program 1: r0 = socket(0x11, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 00:12:48 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x983802) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000180)) 00:12:48 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) 00:12:48 executing program 0: r0 = socket(0x2, 0x6, 0x0) sendto$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, ')#'}]}, 0x24}}, 0x0) 00:12:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x244001, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000023c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000004180), 0xffffffffffffffff) [ 768.320530][T29496] device syzkaller1 entered promiscuous mode 00:12:48 executing program 0: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) [ 768.350364][T29504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.352394][T29504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:12:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) [ 768.394063][T29507] tipc: Started in network mode [ 768.395265][T29507] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 768.397244][T29507] tipc: Enabling of bearer rejected, failed to enable media 00:12:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x5f, 0x51b153d7355cde7, 0x2e, 0x2e]}}, 0x0, 0x36}, 0x20) 00:12:48 executing program 0: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x80a40, 0x0) 00:12:48 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 00:12:48 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0xd, &(0x7f0000000c80)=@raw=[@snprintf], &(0x7f0000000d00)='GPL\x00'}, 0x90) 00:12:48 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x0, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 00:12:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}]}, 0x28}}, 0x0) 00:12:48 executing program 4: syz_io_uring_setup(0x7592, &(0x7f0000000400)={0x0, 0x362d, 0x8}, 0x0, 0x0) 00:12:48 executing program 0: r0 = socket(0xa, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 00:12:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:48 executing program 4: r0 = socket(0x2, 0x6, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0x10, &(0x7f0000000280)={0x0, 0x48}}, 0x0) 00:12:48 executing program 0: keyctl$dh_compute(0x17, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={'hmac(sha1-ce)\x00'}}) 00:12:48 executing program 4: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty}}) [ 768.764630][T29531] device syzkaller1 entered promiscuous mode 00:12:48 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x10, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/38, 0x1a, 0x26, 0x1}, 0x20) 00:12:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:48 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/38, 0x1a, 0x26, 0x1}, 0x20) 00:12:48 executing program 1: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private0}}) 00:12:48 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000240)={0x1}) 00:12:48 executing program 4: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8919, 0x0) 00:12:48 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890d, 0x0) 00:12:49 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5423) 00:12:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x39) 00:12:49 executing program 1: r0 = socket(0x2b, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={0x0}}, 0x2004c001) recvfrom$llc(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) 00:12:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) 00:12:49 executing program 0: ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) [ 769.156426][T29557] device syzkaller1 entered promiscuous mode 00:12:49 executing program 1: r0 = socket(0x26, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 00:12:49 executing program 4: r0 = socket(0x1e, 0x5, 0x0) bind$rose(r0, 0x0, 0x0) 00:12:49 executing program 0: r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) 00:12:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, {0x9}}}]}}]}}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001f00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 00:12:49 executing program 4: r0 = socket(0x28, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 00:12:49 executing program 0: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket$pptp(0x18, 0x1, 0x2) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}]) [ 769.299696][T29572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.317559][T29572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.332758][T29572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.337211][T29572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:12:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@val, @void, @ipv6=@udp={0x0, 0x6, "001ca3", 0x10, 0x11, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}, 0x3c) 00:12:49 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x113240) 00:12:49 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000001880), 0x8) [ 769.460286][T29578] device syzkaller1 entered promiscuous mode 00:12:49 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 00:12:49 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 00:12:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local={0xfc, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 00:12:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:49 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x2801, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) [ 769.611996][T29589] tipc: Enabling of bearer rejected, failed to enable media 00:12:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x51b153d7355cde7]}}, 0x0, 0x2a}, 0x20) 00:12:49 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000600)=0x7) 00:12:49 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x214544f69ab9af08) 00:12:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, 0x0, 0x0) 00:12:49 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000001880), 0x8) read$eventfd(r0, &(0x7f0000000040), 0x8) 00:12:49 executing program 0: io_setup(0xa, &(0x7f0000000b80)) io_setup(0x5f, &(0x7f0000000a00)) io_setup(0x800, &(0x7f0000000b40)) [ 769.785047][T29603] device syzkaller1 entered promiscuous mode 00:12:49 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0x0, 0x2}}) 00:12:49 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000140), 0x29fe7440744c02e2) 00:12:49 executing program 4: openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000100)={{}, {0x0, 0x2710}}, &(0x7f0000000140)) 00:12:49 executing program 0: r0 = socket(0x2, 0x6, 0x0) connect$pptp(r0, &(0x7f0000000340)={0x18, 0x2, {0x0, @local}}, 0x1e) 00:12:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}]}}, 0x0, 0x32}, 0x20) 00:12:49 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @null}, 0x1c) 00:12:49 executing program 0: r0 = fsopen(&(0x7f0000000040)='ext3\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 00:12:50 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:12:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, 0x0, 0x0) 00:12:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_LLC_SDP={0x4}]}, 0x18}}, 0x0) 00:12:50 executing program 1: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x7f}]) 00:12:50 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x0, 0x3}}) 00:12:50 executing program 0: r0 = socket(0x28, 0x5, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) 00:12:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x2, 0x0, 0xe058}}) [ 770.196019][T29632] device syzkaller1 entered promiscuous mode 00:12:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 00:12:50 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x3}}}]}}]}}, 0x0) 00:12:50 executing program 0: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x404001) [ 770.279476][T29644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:12:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 770.293871][T29644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:12:50 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:12:50 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendto$ax25(r0, &(0x7f0000000700)="6c214e5f5744a0a36869c87d03cbe926", 0x10, 0x0, 0x0, 0x0) 00:12:50 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000140), 0x0, 0x0) read$midi(r0, 0x0, 0x0) 00:12:50 executing program 1: r0 = io_uring_setup(0x39e4, &(0x7f0000000000)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:12:50 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000080)={"2a1224e47677c1535d9f1ad71272ea1e5a27b9a5d04e340a162ff1e99cbd", 0xfffffffc}) 00:12:50 executing program 0: syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x70000) 00:12:50 executing program 0: r0 = socket(0x29, 0x80002, 0x0) bind$rose(r0, 0x0, 0x0) 00:12:50 executing program 1: setitimer(0x0, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) 00:12:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, 0x0, 0x0) 00:12:50 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x1c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:50 executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x2) 00:12:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000004180), 0xffffffffffffffff) [ 770.582496][T29666] device syzkaller1 entered promiscuous mode 00:12:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/38, 0x5f5e0ff, 0x26}, 0x20) 00:12:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:12:50 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000300)=@raw={0xfe, 0x0, "2206ca2ace9a"}) 00:12:50 executing program 0: syz_io_uring_setup(0xac8, &(0x7f0000000000)={0x0, 0x0, 0x142}, 0x0, 0x0) 00:12:50 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000300)=@raw={0xfe, 0x0, "2206ca2ace9a"}) 00:12:50 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 00:12:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '\\*{\x00'}]}, 0x1c}}, 0x0) 00:12:50 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x116, r0}, 0x38) 00:12:50 executing program 0: r0 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x5, r0, r1, 0x0) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, r0) 00:12:50 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x2) 00:12:50 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5451, 0x0) 00:12:50 executing program 4: syz_io_uring_setup(0x20, &(0x7f0000000040), 0x0, 0x0) 00:12:50 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0xc0189436, 0x0) 00:12:50 executing program 0: io_uring_setup(0x236f, &(0x7f0000000280)={0x0, 0x7a9b, 0x5e}) 00:12:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 00:12:50 executing program 4: r0 = socket(0x22, 0x2, 0x4) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, 0x0) 00:12:50 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 00:12:51 executing program 1: bpf$MAP_UPDATE_ELEM(0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 00:12:51 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x408) 00:12:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250200000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08002d7b96487f8b620100", @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4008054) 00:12:51 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, 0x0) 00:12:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 0x2}}) 00:12:51 executing program 3: r0 = fsopen(&(0x7f0000000240)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:12:51 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) [ 771.150243][T29719] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:12:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:12:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x1c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:51 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x541b, 0x0) 00:12:51 executing program 3: keyctl$dh_compute(0xa, 0x0, &(0x7f0000001040)=""/4123, 0x101b, 0x0) pipe2$watch_queue(&(0x7f0000000200), 0x80) 00:12:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x13}, 0x48) 00:12:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 00:12:51 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8906, 0x0) 00:12:51 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000180)) 00:12:51 executing program 3: r0 = socket(0x2, 0x5, 0x0) connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @dev}}, 0x1e) 00:12:51 executing program 0: set_mempolicy(0x0, &(0x7f0000000040), 0x5) 00:12:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 00:12:51 executing program 0: r0 = socket(0x26, 0x5, 0x0) bind$rose(r0, 0x0, 0x0) 00:12:51 executing program 4: set_mempolicy(0x0, &(0x7f0000000000), 0x8ca) 00:12:51 executing program 1: r0 = socket(0x22, 0x2, 0x4) sendto$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}}, 0x0) 00:12:51 executing program 0: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', 0x0}) 00:12:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x9}, 0x48) 00:12:51 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)) 00:12:51 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8907, 0x0) 00:12:51 executing program 3: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty}}) 00:12:51 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 00:12:51 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x101001) write$cgroup_freezer_state(r0, 0x0, 0x0) 00:12:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2a}, 0x20) 00:12:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x9, 0xff, 0x0, 0x6}, 0x48) 00:12:51 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000003c0)=@l) 00:12:51 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5452, &(0x7f0000000180)={{0x3}}) 00:12:51 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8955, 0x0) 00:12:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 00:12:51 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000000)) 00:12:51 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000001000000000000020000000800010040afed6cc255688fa8d2faafbf70bb", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 00:12:51 executing program 4: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000024c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:12:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, &(0x7f0000002f80)=""/148, 0x0, 0x94, 0x1}, 0x20) 00:12:51 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001f00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 00:12:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x1c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:51 executing program 1: r0 = socket(0x2, 0x5, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) [ 771.859848][T29790] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:51 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:12:51 executing program 1: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @default, @bcast]}) 00:12:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000c0000000600000005000085010000000f00000000000000000000800000000003000000000100000200000005000000070000000e0000000100000001000000ffff000004000000070000000b00000000000002000000000000000000000003000000000200000001000000ff010000005f1e005f0061"], 0x0, 0x90}, 0x20) 00:12:51 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x80086601, 0x0) 00:12:51 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000180)) 00:12:51 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/mnt\x00') io_uring_setup(0x4e97, &(0x7f0000000000)={0x0, 0x0, 0x2}) 00:12:52 executing program 4: r0 = socket(0x1e, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @null}, 0x1c) 00:12:52 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/102, 0x210000, 0x1000}, 0x20) 00:12:52 executing program 1: r0 = socket(0x2, 0x6, 0x0) connect$pptp(r0, 0x0, 0x0) 00:12:52 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)) 00:12:52 executing program 1: syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x70500) 00:12:52 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 00:12:52 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) 00:12:52 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x541b, 0x0) 00:12:52 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0x0, 0xb4805b4c5c8a938a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:12:52 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 00:12:52 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) 00:12:52 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 00:12:52 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) 00:12:52 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, 0x0) 00:12:52 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001700)="104b2967b1d3e1a58594e7595514d20558ccd9a8909366fd5674e8217b695dabc949ae8b2013b24cffdea3e090c24b4edb2d42c3b7df9fdccc077b1e073ebc80035d6b116e72c55c289fe21fe5f0f0c1cc18aca7deba97c882f82eb990e4161968da18f397002aecc6d95c9589a3a1e772a269e5d422adf29cb05d9f67261c59", 0x80}}, 0x0) 00:12:52 executing program 3: r0 = socket(0x2a, 0x2, 0x0) bind$l2tp(r0, 0x0, 0x0) 00:12:52 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000240)=0xba71) 00:12:52 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0xc0045878, 0x0) 00:12:52 executing program 1: r0 = socket(0x2, 0x6, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) 00:12:52 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 00:12:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x20, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:52 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) 00:12:52 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x541b, 0x0) 00:12:54 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x8d72, "0a44c5f5123612b81dc3d3fa1a1e49e3a7371fd2226286664a60c9feb906a9e4"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000180)) 00:12:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd70a20c0000003a913a"], 0x1c}}, 0x0) 00:12:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) 00:12:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x20, 0x3, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 00:12:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x20, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 774.859031][T29869] tipc: Invalid UDP bearer configuration [ 774.859063][T29869] tipc: Enabling of bearer rejected, failed to enable media 00:12:54 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 00:12:54 executing program 4: r0 = socket(0x18, 0x0, 0x1) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 00:12:54 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 00:12:54 executing program 0: syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x68, &(0x7f00000006c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x408) 00:12:54 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000b80)) 00:12:54 executing program 4: r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x4, r0, r1, 0x0) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) 00:12:54 executing program 3: fsopen(&(0x7f0000004680)='efs\x00', 0x0) 00:12:54 executing program 0: r0 = socket(0x10, 0x2, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10041) 00:12:55 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 00:12:55 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000540)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:55 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c0000000c0000000600000005000085010000000f00000000000000000000800000000003000000000100000200000005000000070000000e0000000100000001000000ffff000004000000070000000b00000000000002000000000000000000000003000000000200000001000000ff010000005f1e005f006161"], 0x0, 0x90}, 0x20) 00:12:55 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a40)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/222, 0xde}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000001f00), 0x4) [ 775.086113][T29894] fuse: Bad value for 'user_id' [ 775.094252][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.095799][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.097405][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.102726][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.104391][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.105930][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.107612][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40012040) [ 775.126842][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x4020940d, &(0x7f0000000180)={{0x3}}) 00:12:55 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1, &(0x7f00000007c0)=@raw=[@func], &(0x7f0000000000)='syzkaller\x00'}, 0x90) [ 775.160690][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.162344][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.163958][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.167113][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.171272][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.175310][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000002240)={&(0x7f0000000140), 0xc, &(0x7f0000000100)={&(0x7f00000021c0)={0xfffffffffffffda2}, 0x10}}, 0x0) [ 775.184170][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.190758][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 0: r0 = socket(0x2, 0x6, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) [ 775.198106][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.201166][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.207406][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.213768][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x244001, 0x0) [ 775.219476][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.224648][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.228641][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.234001][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.239221][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.245514][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.249773][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.255926][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000fc0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) [ 775.260954][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.266023][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000280)={{0x3, 0x0, 0x9}}) [ 775.271161][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.278422][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x1}}) [ 775.282695][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.289146][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.296881][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.301362][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.306379][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.313466][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.318527][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.323964][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.330220][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.333299][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.337258][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) [ 775.340356][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.345451][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.349188][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.353239][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffe35, 0x0, 0x0, 0x0, 0x0, {}, [@NFC_ATTR_TM_PROTOCOLS]}, 0x1c}}, 0x0) [ 775.358258][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.362629][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.366563][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.370113][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.374173][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.376948][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.381274][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.385000][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.389542][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0xc, &(0x7f0000000400)={r0}, 0x4) [ 775.395284][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.399516][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.403607][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.406626][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.411866][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.414773][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.423764][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.435230][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 1: bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}, 0x38) [ 775.442654][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.447817][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.453144][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.458327][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.464304][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.467344][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 0: socket(0x3, 0x0, 0xec0) [ 775.472968][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.475967][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 3: fanotify_mark(0xffffffffffffffff, 0x846, 0x0, 0xffffffffffffffff, 0x0) [ 775.491165][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.495089][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.502099][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.508366][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x2, 0x0) [ 775.517482][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 775.524750][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.532068][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.537676][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.544391][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.548300][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.555282][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.562754][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.568056][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.574350][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.578946][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 775.590086][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.595148][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x0, 0xf, &(0x7f0000001840)=@ringbuf, &(0x7f00000018c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) [ 775.602928][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.608120][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.614472][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.620129][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.624590][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.628659][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.635142][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.638054][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.642248][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.646418][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.650457][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.653379][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.657387][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.660556][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.662479][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.668733][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.671863][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.674123][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.675879][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.677618][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.679512][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.681231][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.683062][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.684775][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.686511][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.692839][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.694542][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.696295][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.698065][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.707476][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x20, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/38, 0x1a, 0x26, 0xa}, 0x20) 00:12:55 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001700)="10", 0x1}}, 0x0) 00:12:55 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) [ 775.720226][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.725305][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.730323][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.736548][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.738289][T29941] ieee802154 phy0 wpan0: encryption failed: -22 [ 775.744642][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 0: r0 = socket(0x2, 0x3, 0x7) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) [ 775.752369][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.756353][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.763589][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.768564][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8933, 0x0) [ 775.775884][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.777986][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.782176][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.786087][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_setup(0xc229, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000001340)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) 00:12:55 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001100)={'syztnl2\x00', 0x0}) keyctl$dh_compute(0xa, 0x0, &(0x7f0000000040)=""/4110, 0x100e, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) [ 775.788994][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.792668][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.796689][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.800973][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.805238][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.814425][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.817342][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.821437][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.825523][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.834428][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.838557][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.842891][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 775.847026][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.857000][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc030570a, 0x0) [ 775.864405][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.867820][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.877574][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.881981][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.886075][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.895038][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.897928][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.903258][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.909405][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.912290][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.916625][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.921601][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 3: r0 = socket(0xa, 0x3, 0x1) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) [ 775.925689][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.929333][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 00:12:55 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) [ 775.933326][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.936558][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.940505][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.944563][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.947388][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.952653][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.955877][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.961369][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.965484][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.970904][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.974222][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.979296][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 775.983982][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.001599][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.003237][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.007902][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.017626][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.020981][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.022793][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.024558][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.026304][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.028136][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.038244][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.040507][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.042590][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.044838][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.047094][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.049812][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.051553][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.053308][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.055066][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.056835][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.058614][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.060984][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.062729][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.064466][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.066196][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.067921][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.070196][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.071937][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.073704][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.075423][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.077130][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.079431][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.081215][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.082939][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.084682][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.086429][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.088140][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.095341][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.097049][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.098764][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.100583][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.102177][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.103727][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.105285][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.106890][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.108467][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.122719][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.124425][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.126134][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.127725][ T4305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 776.135303][ T4305] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 00:12:56 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='0'], &(0x7f00000000c0)='GPL\x00'}, 0x90) 00:12:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000310000000800d200", @ANYRES32], 0x30}}, 0x0) 00:12:56 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$l2tp(r0, 0x0, 0x36f94ef34fcf0eee) 00:12:56 executing program 0: r0 = timerfd_create(0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:12:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x38, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x19, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7e"}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) [ 776.205255][T29970] validate_nla: 560 callbacks suppressed [ 776.205271][T29970] netlink: 'syz-executor.1': attribute type 210 has an invalid length. 00:12:56 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) 00:12:56 executing program 3: r0 = socket(0x2, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020) 00:12:56 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$midi(r0, &(0x7f0000000000)=""/152, 0x98) 00:12:56 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$nci(r0, &(0x7f0000000200)=""/4096, 0x1000) 00:12:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250300000005"], 0x74}}, 0x0) 00:12:56 executing program 0: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000018c0), 0x0, 0x0) 00:12:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001940)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) 00:12:56 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000080)={"2a1224e47677c1535d9f1ad71272ea1e5a27b9a5d04e340a162ff1e99cbd"}) [ 776.341623][T29983] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:56 executing program 1: r0 = socket(0x2, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) [ 776.400178][T29988] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? 00:12:56 executing program 4: syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x70002) 00:12:56 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$can_bcm(r0, 0x0, 0x0) 00:12:56 executing program 0: r0 = socket(0x26, 0x5, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x48}}, 0x0) 00:12:56 executing program 1: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000180)="a33c4d86518600f9", 0x8}]) 00:12:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 00:12:56 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0) 00:12:56 executing program 3: socket(0x0, 0xa00, 0x0) 00:12:56 executing program 1: r0 = socket(0x1d, 0x2, 0x2) ioctl$sock_rose_SIOCADDRT(r0, 0x541b, 0x0) 00:12:56 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640), 0xc, 0x0}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 00:12:56 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x65d5, &(0x7f0000000180)={0x0, 0x5f80, 0x1068, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) 00:12:56 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x38, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x19, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7e"}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:56 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)) 00:12:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, {0x14}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) 00:12:56 executing program 3: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x32000, 0x0) 00:12:56 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40049409, &(0x7f0000000180)) [ 776.708309][T30017] tipc: Enabling of bearer rejected, failed to enable media 00:12:56 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000000)) 00:12:56 executing program 3: r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000001740)="c3", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='4', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r1, r2}, 0x0, 0x0, 0x0) 00:12:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:12:56 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendto$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:56 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000fc0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000001440), 0x18) 00:12:56 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 00:12:56 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x2801, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000000)) 00:12:56 executing program 0: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 00:12:56 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x0, 0xe0789ac5255b9dfe}, &(0x7f00000003c0), &(0x7f0000000400)) 00:12:56 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) 00:12:56 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x40, r0}, 0x38) 00:12:56 executing program 0: syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001f00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 00:12:56 executing program 3: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x3, &(0x7f0000000c80)=@raw=[@initr0, @alu], &(0x7f0000000d00)='GPL\x00', 0x0, 0x2e, &(0x7f0000000d40)=""/46, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x4aff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000e00)=[{}]}, 0x90) 00:12:56 executing program 1: keyctl$dh_compute(0xa, 0x0, &(0x7f0000000740)=""/4096, 0x1000, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) 00:12:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x4, 0x0, 0x24, 0x1}, 0x48) 00:12:57 executing program 4: r0 = socket(0x2, 0x6, 0x0) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:12:57 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0xf6, 0xf8}, 0x20) 00:12:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x105}, 0x14}}, 0x0) 00:12:57 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8943, 0x0) 00:12:57 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000003c0)=@l={0x92, 0x0, 0xb0}) 00:12:57 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8934, 0x0) 00:12:57 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000001c0)=@e={0xff, 0x9, 0x0, 0x0, @generic}) 00:12:57 executing program 1: r0 = socket(0xa, 0x3, 0x1) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 00:12:57 executing program 4: r0 = epoll_create1(0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, 0x0) 00:12:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x541b) 00:12:57 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 0x4}}) 00:12:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 00:12:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x38, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x19, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7e"}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:57 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x2100) read$midi(r0, &(0x7f0000000000)=""/78, 0x4e) 00:12:57 executing program 1: r0 = epoll_create1(0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002480), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 00:12:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2502"], 0x54}}, 0x0) 00:12:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8902, 0x0) [ 777.437763][T30088] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:57 executing program 1: keyctl$dh_compute(0x18, 0x0, 0x0, 0x200000000000000, 0x0) 00:12:57 executing program 3: r0 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x5, r0, r1, 0x0) 00:12:57 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x10000000, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 00:12:57 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 00:12:57 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) read$sequencer(r0, 0x0, 0x0) 00:12:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 00:12:57 executing program 1: r0 = socket(0x15, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 00:12:57 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 00:12:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a, 0x0, 0x0, 0x0, 0x2005, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 00:12:57 executing program 3: syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x3, 0xe7, 0xc1, 0x40, 0x187f, 0x302, 0xa298, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x48, 0x81}}]}}]}}, 0x0) [ 777.704569][T30110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:12:57 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 777.708041][T30110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:12:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 00:12:59 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) 00:12:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x40, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae650105"}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:12:59 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000380)='bbr\x00', 0x4) write$tcp_congestion(r0, 0x0, 0x0) 00:12:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000004c0)=@keyring) 00:13:00 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, 0x0) 00:13:00 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xc1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8001}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0x40}}, 0x0) 00:13:00 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045702, 0x0) 00:13:00 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:13:00 executing program 3: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 00:13:00 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 00:13:00 executing program 1: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000180)="a33c4d86518600f97667f43ea74f0d91", 0x10}]) 00:13:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x2, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x4, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 00:13:00 executing program 4: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x80000000}]) [ 780.174687][T30137] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 780.176597][T30137] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 00:13:00 executing program 3: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0) 00:13:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x24}}, 0x0) 00:13:00 executing program 1: socket(0x2, 0x0, 0x300) 00:13:00 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)) 00:13:00 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 00:13:00 executing program 1: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYBLOB='d'], 0x0, 0x0, 0x0) 00:13:00 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a1) [ 780.332699][T30153] fuse: Bad value for 'fd' 00:13:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 00:13:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) [ 780.382204][T30156] tipc: Enabling of bearer rejected, failed to enable media 00:13:00 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "19392d87430aa254bbe448f919a714323ac5eabcbbaad98a479680cea8b89a222af729287e9e670149d428de54a0c6c80b4da6518811883d6f0c1a56845386a8"}, 0x48, 0xfffffffffffffffd) 00:13:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x40, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae650105"}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:00 executing program 4: r0 = socket(0xa, 0x3, 0x1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 00:13:00 executing program 1: syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x10001) 00:13:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) 00:13:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000060000000a000000000000090500000008000000000000070000000000005f61303e"], &(0x7f0000000040)=""/18, 0x36, 0x12, 0x1}, 0x20) 00:13:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x400454a4) 00:13:00 executing program 4: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x80108906, 0x0) 00:13:00 executing program 3: r0 = socket(0x26, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 00:13:00 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) 00:13:00 executing program 4: syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000023c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 00:13:00 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 780.644415][T30182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.652884][T30182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:13:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_LLC_SDP={0x8, 0x13, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) 00:13:00 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0/file0\x00', r0}, 0x18) 00:13:00 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x280, 0x0) 00:13:00 executing program 1: r0 = socket(0x28, 0x5, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:13:00 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x40086602, 0x0) 00:13:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x18, r1, 0x1, 0x0, 0x0, {0x15}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 00:13:03 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40086602, &(0x7f0000000180)) 00:13:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:13:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x40, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x24, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae650105"}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:03 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x7a}}, &(0x7f0000000240)=""/38, 0x1a, 0x26, 0x1}, 0x20) 00:13:03 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x10, 0x0) 00:13:03 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 00:13:03 executing program 4: fsopen(&(0x7f0000000180)='jffs2\x00', 0x0) 00:13:03 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x8d) 00:13:03 executing program 3: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001f80)=[&(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 00:13:03 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)="d2", &(0x7f00000000c0)=@udp6}, 0x20) 00:13:03 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000002a80)={0xffffffff}, 0x8) 00:13:03 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 00:13:03 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:13:03 executing program 4: r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x5, r0, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x0) 00:13:03 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000480)='\x00', 0x0, 0x4000}, 0x18) 00:13:03 executing program 0: bpf$BPF_BTF_LOAD(0x9, &(0x7f0000000000)={0x0, &(0x7f0000000240)=""/37, 0x0, 0x54}, 0xd) 00:13:03 executing program 4: io_uring_setup(0x6a41, &(0x7f0000000040)={0x0, 0x0, 0x100}) 00:13:03 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f00000000c0)='GPL\x00'}, 0x90) 00:13:03 executing program 3: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) 00:13:03 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0xc020660b, 0x0) 00:13:03 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000001c0)) 00:13:03 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x3}}) 00:13:03 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x7}, {}]}]}}, &(0x7f0000000540)=""/86, 0x3e, 0x56, 0x1}, 0x20) 00:13:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c26bd7000fedbdf2512000000080001"], 0x4c}}, 0x0) 00:13:03 executing program 3: io_setup(0x6, &(0x7f0000000240)=0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 00:13:03 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x0) read$midi(r0, 0x0, 0x0) 00:13:03 executing program 4: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8918, 0x0) [ 783.585344][T30245] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 00:13:03 executing program 0: syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB=',allow_other,default_permissions,appraise_type=imasig,context=sysadm_u,smackfstransmute=))){/^-{\'],smackfsdef='], 0x0, 0x0, 0x0) 00:13:03 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000200)='w', &(0x7f0000000380)=""/116, &(0x7f0000000440), &(0x7f0000000540), 0x40, r0}, 0x38) 00:13:03 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "19392d87430aa254bbe448f919a714323ac5eabcbbaad98a479680cea8b89a222af729287e9e670149d428de54a0c6c80b4da6518811883d6f0c1a56845386a8"}, 0x48, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, r0) [ 783.668186][T30254] fuse: Unknown parameter 'appraise_type' 00:13:03 executing program 3: bpf$BPF_BTF_LOAD(0x9, &(0x7f0000000280)={0x0, &(0x7f0000000240)=""/38, 0x0, 0x26}, 0x20) 00:13:03 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x51b153d7355cde7, 0x2e]}}, 0x0, 0x2b}, 0x20) 00:13:03 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 00:13:03 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)=0xfffffffd) 00:13:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x48, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x29, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a"}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:03 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0}}, 0x0) 00:13:03 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000140), 0x0, 0x4a301) read$midi(r0, 0x0, 0x0) 00:13:03 executing program 4: r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x4, r0, r1, 0x0) add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, r0) 00:13:03 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, 0x0) 00:13:03 executing program 3: syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 00:13:03 executing program 0: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 00:13:03 executing program 4: socket(0x0, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x800}, &(0x7f00000002c0)={0x0, r0+60000000}, &(0x7f0000000340)={0x0}) io_setup(0x0, 0x0) 00:13:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) [ 783.947245][T30277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.954257][T30277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:13:03 executing program 1: r0 = fsopen(&(0x7f0000000240)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\x00', 0x0, r0) 00:13:03 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 00:13:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f00000002c0)=@raw=[@kfunc], &(0x7f00000000c0)='GPL\x00'}, 0x90) 00:13:04 executing program 0: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 00:13:04 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1, 0x1}}) 00:13:04 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0) 00:13:04 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000070000000700000000a000000000000000700000d000000000e000000050008000e000000030000000a000000030000000e00000004000000080000000000000002000000010000000100000005000000040000000000000e02000000010000000e000000000000010000000077002e0404000000000000070000000000005f305f6130"], 0x0, 0x92}, 0x20) 00:13:04 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@e={0xff, 0x0, 0x0, 0x0, @SEQ_NOTEON=@special}) 00:13:04 executing program 0: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8940, 0x0) 00:13:04 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "bec7ccbecf5af825d2352606f1134d5b334dc2205acd83ad10b5c3359befa467", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6b562e43ae069c94e1740d8ecf27f5250ffd56db133fb0059ef867a0ecd893be", r1}) 00:13:04 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8904, 0x0) 00:13:04 executing program 1: r0 = socket(0x2a, 0x2, 0x0) bind$l2tp(r0, &(0x7f00000007c0)={0x2, 0x0, @empty}, 0x10) 00:13:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x284, 0x1}, 0x48) 00:13:04 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f00000006c0)=""/4071}, 0x20) 00:13:04 executing program 1: bpf$BPF_BTF_LOAD(0x14, &(0x7f0000000280)={0x0, &(0x7f0000000240)=""/38, 0x0, 0x26}, 0x20) 00:13:04 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 00:13:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:13:04 executing program 1: keyctl$dh_compute(0x18, 0x0, 0x0, 0x1ffff000, 0x0) 00:13:04 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 00:13:04 executing program 4: io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = socket(0x10, 0x2, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000180)="a3", 0x1, 0x80000000}]) 00:13:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xf, &(0x7f0000000200)=@ringbuf, 0x0}, 0x90) 00:13:04 executing program 1: r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='^\x00', &(0x7f0000000080)='\xfc\xc4!({,[\x00', 0x0) 00:13:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x48, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x29, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a"}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:04 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000200), 0x0, 0x0, 0x0, 0x40, r0}, 0x38) 00:13:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) 00:13:04 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$sequencer(r0, 0x0, 0x0) 00:13:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:13:04 executing program 3: io_setup(0xc229, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 00:13:04 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x801c581f, 0x0) 00:13:04 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x541b, 0x0) 00:13:04 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 00:13:04 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x1}}) 00:13:04 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@func]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0xc6, &(0x7f00000002c0)=""/198}, 0x90) 00:13:04 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) 00:13:04 executing program 1: r0 = socket(0x2, 0x6, 0x0) bind$rose(r0, 0x0, 0x0) 00:13:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2}, 0x0) 00:13:04 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 00:13:04 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8912, 0x0) 00:13:04 executing program 1: r0 = socket(0x18, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 00:13:04 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0x3}}) 00:13:04 executing program 0: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x541b, 0x0) 00:13:04 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x401c5820, 0x0) 00:13:04 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x20) 00:13:04 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:13:04 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x48, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x29, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a"}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}}, 0x0) 00:13:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 00:13:04 executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0xe, 0x0, 0x0) 00:13:05 executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180), 0xffffff88) 00:13:05 executing program 4: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0x0, 0x0) 00:13:05 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x20) 00:13:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x7}, {0x7, 0x2}]}]}}, &(0x7f0000000540)=""/86, 0x3e, 0x56, 0x1}, 0x20) 00:13:05 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x0) 00:13:05 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f00000002c0)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) 00:13:05 executing program 3: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 00:13:05 executing program 1: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x20002014}) 00:13:05 executing program 0: add_key(&(0x7f0000000140)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x16, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='4', 0x1, 0xfffffffffffffffd) 00:13:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 00:13:05 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x1}) 00:13:05 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=', @ANYBLOB='d'], 0x0, 0x0, 0x0) 00:13:05 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x15, &(0x7f0000000400)={r0}, 0x4) 00:13:05 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x2, &(0x7f0000000c80)=@raw=[@initr0], 0x0}, 0x90) 00:13:05 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) 00:13:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a, 0x0, 0x0, 0x0, 0x2005, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) [ 785.323182][T30411] fuse: Bad value for 'rootmode' 00:13:05 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1, 0x0, 0x3d}}) 00:13:05 executing program 0: setitimer(0x2, &(0x7f0000000100)={{}, {0x0, 0x2710}}, &(0x7f0000000140)) 00:13:05 executing program 1: socketpair(0x1d, 0x3, 0x1, &(0x7f0000000200)) 00:13:05 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x3, &(0x7f0000000c80)=@raw=[@initr0, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}], &(0x7f0000000d00)='GPL\x00', 0x0, 0x2e, &(0x7f0000000d40)=""/46}, 0x90) 00:13:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x48, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2c, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab"}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:05 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000080), 0x0, 0x42540) read$midi(r0, 0x0, 0x0) 00:13:05 executing program 0: keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={'crc32\x00'}}) 00:13:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x28, r1, 0x1, 0x0, 0x0, {0x15}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 00:13:05 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x5421, 0x0) 00:13:05 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 00:13:05 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)) 00:13:05 executing program 1: syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x8cffffff, &(0x7f00000006c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) 00:13:05 executing program 0: io_setup(0x9, &(0x7f0000000b80)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 00:13:05 executing program 3: r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x15, r0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) 00:13:05 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 00:13:05 executing program 1: syz_mount_image$fuse(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor}]}}, 0x0, 0x0, 0x0) 00:13:05 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000340)=""/183}, 0x20) 00:13:05 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)="da5fb8", 0x3}}, 0x0) [ 785.668740][T30452] fuse: Bad value for 'fd' 00:13:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 00:13:05 executing program 1: r0 = socket(0x2, 0x5, 0x0) bind$pptp(r0, 0x0, 0x0) [ 785.710194][T30455] ieee802154 phy0 wpan0: encryption failed: -22 00:13:05 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000240)) 00:13:05 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/38, 0x1000000, 0x26, 0x1}, 0x20) 00:13:05 executing program 0: io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0xdfe7dff8b168c400}) 00:13:05 executing program 1: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "19392d87430aa254bbe448f919a714323ac5eabcbbaad98a479680cea8b89a222af729287e9e670149d428de54a0c6c80b4da6518811883d6f0c1a56845386a8"}, 0x48, 0xfffffffffffffffd) 00:13:05 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 00:13:05 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:13:05 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:13:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c}, 0x48) 00:13:05 executing program 3: io_setup(0xf40, &(0x7f0000000240)=0x0) io_submit(r0, 0x0, 0x0) 00:13:05 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x20fff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 00:13:05 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1c}}, 0x0) 00:13:05 executing program 0: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x80108907, 0x0) 00:13:05 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x48, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2c, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab"}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter, 0x48) 00:13:06 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x101001) write$cgroup_freezer_state(r0, &(0x7f0000000180)='FROZEN\x00', 0x7) 00:13:06 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000180)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}) 00:13:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000180), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x41}}, 0x0) 00:13:06 executing program 4: bpf$BPF_BTF_LOAD(0x8, &(0x7f0000000280)={0x0, &(0x7f0000000240)=""/38, 0x0, 0x26}, 0x20) 00:13:06 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x1, 0x1, 0x3d}}) 00:13:06 executing program 4: fsopen(&(0x7f0000000540)='ramfs\x00', 0x0) 00:13:06 executing program 0: add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='4', 0x1, 0xfffffffffffffffd) 00:13:06 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:13:06 executing program 4: r0 = socket(0x10, 0x2, 0x0) connect$can_bcm(r0, 0x0, 0x0) 00:13:06 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40002002) 00:13:06 executing program 3: r0 = socket(0x2, 0x6, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 00:13:06 executing program 1: syz_open_dev$vcsa(&(0x7f0000000380), 0x0, 0x0) 00:13:06 executing program 4: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) socket$phonet(0x23, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x3, &(0x7f0000000c80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x565878e4}, @alu={0x0, 0x0, 0x0, 0x4, 0x0, 0x40}], &(0x7f0000000d00)='GPL\x00', 0x0, 0x2e, &(0x7f0000000d40)=""/46, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x0, 0x2, 0x3}, 0x10}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 00:13:06 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00'}}) 00:13:06 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) 00:13:06 executing program 1: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8915, 0x0) 00:13:06 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/102, 0x210000, 0x1000, 0x0, 0x1}, 0x20) 00:13:06 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) 00:13:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) 00:13:06 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8982, 0x0) 00:13:06 executing program 3: io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0xedf82a205465b707}) 00:13:06 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x5452, &(0x7f0000000240)=0xba71) 00:13:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/38, 0x1a, 0x26, 0x1}, 0x20) 00:13:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1c}}, 0x0) 00:13:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x48, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2c, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab"}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:06 executing program 4: r0 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x3, r0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, r0) 00:13:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='.dead\x00', &(0x7f00000004c0)=@keyring) 00:13:06 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2, &(0x7f0000000740)=@raw=[@cb_func], &(0x7f00000007c0)='GPL\x00', 0xc, 0x16, &(0x7f0000000800)=""/22, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), 0x10}, 0x90) 00:13:06 executing program 4: add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "4bb54af70d08473a532afab707d10bf24a1052572e0a81b8b9b9c77098cbec021af27ca6afc1f520e8895a7bc06583442cc3eae20fa33c26230e0ac858287cad"}, 0x48, 0xfffffffffffffff9) 00:13:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x0) 00:13:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 00:13:06 executing program 4: socket(0x2, 0xa, 0x1111) 00:13:06 executing program 3: syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x3, 0xe7, 0xc1, 0x40, 0x187f, 0x302, 0xa298, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x48, 0x81}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) [ 786.807765][T30566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:13:06 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) [ 786.819203][T30566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:13:06 executing program 4: r0 = socket(0x2, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000000)) 00:13:06 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:13:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003b40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) 00:13:06 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, r1}, 0x38) 00:13:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000240)=""/38, 0x1a, 0x26, 0x1}, 0x20) 00:13:06 executing program 1: socket(0x25, 0x1, 0xffffb4ae) 00:13:07 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0xc0385720, &(0x7f0000000240)=0xba71) 00:13:07 executing program 0: io_uring_setup(0x4e97, &(0x7f0000000000)={0x0, 0x0, 0x2}) 00:13:07 executing program 1: r0 = socket(0x10, 0x2, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@bcast, @null, @null, @null, @null, @null]}, 0x40) 00:13:07 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 00:13:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2d, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:07 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000002340)) 00:13:07 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) 00:13:07 executing program 0: r0 = socket(0x2, 0x6, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 00:13:07 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:13:07 executing program 1: r0 = socket(0x22, 0x2, 0x4) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 00:13:07 executing program 0: r0 = socket(0x25, 0x1, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, 0x0) 00:13:07 executing program 4: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x89a1, 0x0) 00:13:07 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 00:13:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x3, 0x3, 0xcf1, 0x0, 0x1}, 0x48) 00:13:07 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000380)=""/116, &(0x7f0000000440), &(0x7f0000000540), 0x40, r0}, 0x38) 00:13:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x33, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x30}}, 0x0) 00:13:07 executing program 4: r0 = socket(0xa, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 00:13:07 executing program 1: r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, 0x0, 0x0) 00:13:07 executing program 3: r0 = socket(0x2, 0x6, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8916, 0x0) 00:13:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", "", ""]}, 0xffffff73}}, 0x0) 00:13:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x2}, 0x0) 00:13:07 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0xd, &(0x7f0000000c80)=@raw=[@snprintf], &(0x7f0000000d00)='GPL\x00', 0x0, 0x2e, &(0x7f0000000d40)=""/46, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000e00)=[{}, {0x4}, {}], 0x10, 0x7fffffff}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 00:13:07 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={'xcbc(des3_ede)\x00'}}) 00:13:07 executing program 4: syz_io_uring_setup(0x3, &(0x7f00000001c0)={0x0, 0x0, 0x62}, 0x0, 0x0) 00:13:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2d, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:07 executing program 1: syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0}) socketpair(0x1a, 0x0, 0x0, &(0x7f0000002340)) 00:13:07 executing program 4: add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 00:13:07 executing program 0: r0 = socket(0x2, 0x6, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={0x0}}, 0x0) 00:13:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48) 00:13:07 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x10042, 0x0, 0x0) [ 787.771489][T30629] could not allocate digest TFM handle xcbc(des3_ede) 00:13:07 executing program 4: r0 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='ns/mnt\x00', 0x0, r1) 00:13:07 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x0, 0x2040}}) 00:13:07 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 00:13:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x60, r1, 0x105, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 00:13:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 00:13:07 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x9, 0xff, 0xffff, 0x6}, 0x48) 00:13:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 00:13:07 executing program 4: syz_open_dev$media(&(0x7f0000000540), 0x0, 0x0) 00:13:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:13:07 executing program 3: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8983, 0x0) 00:13:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:13:08 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@e={0xff, 0xa, 0x7, 0x0, @SEQ_NOTEON=@special}) 00:13:08 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a00eb0d"], 0x13c4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 00:13:08 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 00:13:08 executing program 0: r0 = fsopen(&(0x7f0000000140)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000000c0)='@--@}:(.\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) 00:13:08 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'], 0x4) 00:13:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2d, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:08 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x1, &(0x7f0000000c80)=@raw=[@alu], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x4aff}, 0x10}, 0x90) 00:13:08 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001700)="104b29", 0x3}}, 0x0) 00:13:08 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xc1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0x40}}, 0x0) 00:13:08 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xc, r0, 0x0, &(0x7f0000000180)=""/149) [ 788.227542][T30689] ieee802154 phy0 wpan0: encryption failed: -22 00:13:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) 00:13:08 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[], [{@flag='async'}]}) 00:13:08 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a00eb0d"], 0x13c4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 00:13:08 executing program 3: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80202) 00:13:08 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"4bcad1c61bde364c112f4d1ccb8a15d9"}}}}, 0xa0) 00:13:08 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @remote}}}, 0x90) 00:13:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000900), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) 00:13:08 executing program 0: r0 = io_uring_setup(0x7a9, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 00:13:08 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x2, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 00:13:08 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 00:13:08 executing program 4: socketpair(0x3d, 0x0, 0x0, &(0x7f0000000180)) 00:13:08 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) 00:13:08 executing program 3: r0 = openat$cuse(0xffffff9c, &(0x7f0000000880), 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000002900)={0x18}, 0x18) 00:13:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xe0, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) 00:13:08 executing program 4: r0 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x109002, 0x0) write$vga_arbiter(r0, &(0x7f00000001c0)=@target={'target ', {'PCI:', '18', ':', '6', ':', '1a', '.', '2'}}, 0x15) 00:13:08 executing program 3: r0 = fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000300)='..(\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff) [ 788.556360][ T27] audit: type=1326 audit(788.530:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30720 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9de5cd68 code=0x0 00:13:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}}, 0x0) 00:13:08 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x10801) 00:13:08 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 00:13:08 executing program 0: r0 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/block/loop0', 0x0, 0x0) connect$can_j1939(r0, 0x0, 0x0) 00:13:08 executing program 3: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 00:13:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:08 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private0}}}, 0x30) 00:13:08 executing program 4: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000840)) 00:13:08 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:13:08 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='>') 00:13:08 executing program 4: syz_open_dev$media(&(0x7f0000000500), 0x0, 0x20482) 00:13:08 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010}, 0x14) 00:13:08 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000004c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) 00:13:08 executing program 4: syz_io_uring_setup(0x25eb, &(0x7f0000000000), &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) 00:13:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:08 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) 00:13:08 executing program 4: getresgid(&(0x7f0000004080), 0x0, 0x0) 00:13:08 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x10) 00:13:08 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x30) 00:13:09 executing program 4: openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/block/loop0', 0x10400, 0x0) 00:13:09 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f00000063c0)={0x18, 0x0, r1}, 0x18) 00:13:09 executing program 3: pipe2(&(0x7f0000006880)={0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0x0) 00:13:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:09 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) 00:13:09 executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}}, r1, 0x8}}, 0x48) 00:13:09 executing program 0: r0 = openat$fuse(0xffffff9c, &(0x7f0000006580), 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 00:13:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000900), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x8000}) 00:13:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000180)) 00:13:09 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_io_uring_setup(0xdd5, &(0x7f0000000780)={0x0, 0x0, 0x80, 0x0, 0x180}, &(0x7f0000000800), &(0x7f0000000840)) 00:13:09 executing program 1: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x4400}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000180), 0x0) 00:13:09 executing program 3: getresgid(&(0x7f0000004080), &(0x7f00000040c0), &(0x7f0000004100)) 00:13:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{}, {}, {0x20}, {0x100}]}) 00:13:09 executing program 4: openat$drirender128(0xffffff9c, 0x0, 0xc74991a420e76fd3, 0x0) 00:13:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) 00:13:09 executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) 00:13:09 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 00:13:09 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 00:13:09 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000380)={0xf, 0x8}, 0x10) 00:13:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000440)) 00:13:09 executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"b4776845f9844f66f8e18aa58a1c347e"}}}}, 0xa0) 00:13:09 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @private0}}}, 0x48) 00:13:09 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 00:13:09 executing program 0: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000006240), 0xffffffffffffffff) 00:13:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000000)={0x10000}) 00:13:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000240)) 00:13:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:09 executing program 1: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f00000001c0)) clock_getres(0x3, &(0x7f0000000000)) 00:13:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000001c0)) 00:13:09 executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8}, 0x10) 00:13:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000540)={0x4, 0x8}, 0x10) syz_io_uring_setup(0xdd5, &(0x7f0000000780)={0x0, 0x0, 0x80, 0x0, 0x180}, &(0x7f0000000800), &(0x7f0000000840)) 00:13:09 executing program 3: r0 = memfd_secret(0x0) recvmsg$kcm(r0, 0x0, 0x0) 00:13:09 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001380)=@generic={&(0x7f0000001340)='./file0\x00'}, 0x14) 00:13:09 executing program 4: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x1c) 00:13:09 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private0}, r1}}, 0x38) 00:13:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 00:13:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:09 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 00:13:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000900), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000ec0)={0x0, 0x0}) 00:13:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, 0x0) 00:13:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000006200), r0) syz_genetlink_get_family_id$tipc(&(0x7f0000006240), 0xffffffffffffffff) 00:13:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}}, 0x0) 00:13:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000cc0)={&(0x7f0000000b80), 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) 00:13:09 executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x4, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 00:13:09 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) 00:13:09 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x0, {0xa, 0x4e24, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x122f}}}, 0x38) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000340)={0x0, 0x2, 0x8000}) syz_io_uring_setup(0xdd5, &(0x7f0000000780)={0x0, 0xb7ec, 0x80, 0x0, 0x180}, &(0x7f0000000800), &(0x7f0000000840)) 00:13:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1526}, 0x48) 00:13:10 executing program 0: ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000000c0)={r0, 0x0, 0x3, 0xfff, 0x3, [], [0x3f800000, 0x400, 0x80, 0x5], [0x6, 0x2f, 0x3, 0x8ba], [0x7, 0x80000001, 0x7ff, 0x5]}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x90041) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f0000000240)={r2, 0x7, 0x0, 0x4, 0x1, [0x0, 0x0, 0x0], [0x9, 0x2, 0x800], [0x2, 0x8, 0x10000, 0x1], [0x7ff, 0x4, 0x7, 0x6]}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000480)={&(0x7f00000003c0)=[r4, 0x0, r5, r6, r7], &(0x7f0000000400)=[0xc3, 0x81, 0x6, 0x1ff, 0x0, 0xffffffff, 0x4, 0x100, 0x3], 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000500)={&(0x7f00000004c0)=[r7, r7, r7], 0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000540)={0x3, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40106435, &(0x7f0000000580)={0x0, r8}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f0000000680)={0x9, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000740)={r3}) userfaultfd(0x80801) 00:13:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:10 executing program 3: r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0xfff}}, 0x10) 00:13:10 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x3, @in={0x2, 0x0, @dev}}}, 0xa0) 00:13:10 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 00:13:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000900), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) 00:13:10 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000700)) userfaultfd(0x80801) 00:13:10 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 00:13:10 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x16, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 00:13:10 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r1}, 0x18) 00:13:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) 00:13:10 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"0c2ec0d3ca8203a4b5420e64bb3a8062"}}}}, 0x118) 00:13:10 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) 00:13:10 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, 0x0) 00:13:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:10 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "ae6f20c18761f67886ccf4812d27ce64bb9c1851d513ff6993e9ee9d7d4cf7d2"}) 00:13:10 executing program 1: getitimer(0x2, &(0x7f0000000180)) 00:13:10 executing program 3: r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 00:13:10 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000740)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, r1}}, 0x128) 00:13:10 executing program 1: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 00:13:10 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) syz_io_uring_setup(0xdd5, &(0x7f0000000780)={0x0, 0xb7ec, 0x80, 0x0, 0x180}, &(0x7f0000000800), &(0x7f0000000840)) 00:13:10 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000001140)) 00:13:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f00000001c0)) 00:13:10 executing program 3: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x245, &(0x7f0000000000)={[{@prjquota}, {@swalloc}, {@grpquota}, {@norecovery}, {@grpquota}]}, 0x0, 0x97bd, &(0x7f0000012e00)="$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") 00:13:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000900), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000ec0)={0x0, 0x0}) 00:13:10 executing program 4: r0 = fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) fsmount(r0, 0x0, 0x0) 00:13:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x3af4701e) sendfile(r5, r3, 0x0, 0x10000a007) 00:13:10 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) 00:13:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000400)={@remote, 0x0, 0x2}, &(0x7f0000000440)=0x20) 00:13:10 executing program 4: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {0x0, 0x0}}, 0x20) 00:13:10 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b40)={0x4, 0x8}, 0x10) 00:13:10 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}}, 0x90) 00:13:10 executing program 4: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000840)) 00:13:10 executing program 1: syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000800)) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/241, 0xf1) socket$xdp(0x2c, 0x3, 0x0) 00:13:10 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000018c0)='G', 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002e40)="d7", 0x1}], 0x1}, 0x4040101) 00:13:10 executing program 4: openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/block/ram11', 0x0, 0x0) 00:13:10 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @dev}}}, 0xa0) 00:13:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007) 00:13:10 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 00:13:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b36, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:13:10 executing program 4: r0 = socket(0x2, 0x2, 0x1) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x4811) 00:13:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380013"], 0x100}}, 0x0) 00:13:10 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000180), 0x8) 00:13:10 executing program 4: r0 = socket(0xa, 0x2, 0x3a) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="a007"], 0xa0}}, 0x0) 00:13:10 executing program 0: r0 = socket(0x2, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:10 executing program 1: r0 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) 00:13:10 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$ndb(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) [ 791.033648][T30913] loop3: detected capacity change from 0 to 32768 00:13:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007) 00:13:11 executing program 1: r0 = socket(0x2, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 00:13:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380004"], 0x100}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) [ 791.110038][T30913] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. 00:13:11 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$rfkill(r2, 0x0, 0x0) 00:13:11 executing program 1: r0 = socket(0xa, 0x2, 0x3a) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0xa0, 0x453, 0x0, 0x0, 0x0, "4371ed1271cb1461e5c9bfdfb3ad4aba74dedd5602f07bf26113b837ed6746aaaef862106ed6091e6d0bec21d0ccd50deaf08b3ec26173b3fd864b7e632deb81cc7cbddeac69d39a97dfc62c10d702f4979e1af2bb979458b1566a7f492ffd362481f281dcadf47093d877c27f6ccd9b2671606fed1a0e5bc3f44fb05a4b9793251161fc938271f12b68de5600"}, 0xa0}}, 0x0) 00:13:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x201, 0x0, 0x0, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) [ 791.176158][T30913] XFS (loop3): Quotacheck needed: Please wait. [ 791.203548][ T242] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xd2c, inode 0x2444 dinode [ 791.206031][ T242] XFS (loop3): Unmount and run xfs_repair [ 791.207159][ T242] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 791.208708][ T242] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. 00:13:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380008"], 0x100}}, 0x0) [ 791.239035][ T242] 00000010: 00 00 00 01 00 00 00 4c 06 00 00 00 00 00 00 00 .......L........ 00:13:11 executing program 4: r0 = socket(0x2a, 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 791.242608][ T242] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 791.245053][ T242] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 04 1a 4.Xh...=........ [ 791.246945][ T242] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 791.248776][ T242] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 16 72 6f a4 .............ro. [ 791.255276][ T242] 00000060: ff ff ff ff b2 47 c7 b6 00 00 00 00 00 00 00 05 .....G.......... [ 791.260989][T30989] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 791.263219][ T242] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 791.321478][T30913] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. 00:13:11 executing program 3: r0 = socket(0x15, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x41, 0x0, 0x0) 00:13:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007) 00:13:11 executing program 1: timer_create(0x0, &(0x7f00000004c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mq_open(&(0x7f0000000040)='+&\'[$\x00', 0x0, 0x0, 0x0) 00:13:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf250900000038000b"], 0x100}}, 0x0) [ 791.347532][ T4259] XFS (loop3): Unmounting Filesystem 00:13:11 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000180), 0x8) read$rfkill(r0, &(0x7f0000000080), 0x8) 00:13:11 executing program 4: r0 = socket(0xa, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0x3) 00:13:11 executing program 4: r0 = socket(0x15, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:13:11 executing program 4: r0 = socket(0x2a, 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) 00:13:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a007) 00:13:11 executing program 4: r0 = socket(0x29, 0x5, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0x10}}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x90) 00:13:11 executing program 4: r0 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 00:13:11 executing program 4: r0 = socket(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 00:13:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r1) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 00:13:11 executing program 0: r0 = socket(0x1d, 0x3, 0x1) recvfrom$ax25(r0, 0x0, 0x0, 0x40004060, 0x0, 0x0) 00:13:11 executing program 4: r0 = socket(0xa, 0x2, 0x3a) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) 00:13:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a007) 00:13:11 executing program 3: r0 = socket(0x2b, 0x1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc4}}, 0x20000000) sendmsg$AUDIT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40048d0) 00:13:11 executing program 0: r0 = socket(0x2, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x40012060, 0x0, 0x0) 00:13:11 executing program 4: r0 = socket(0x29, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4044094) 00:13:11 executing program 0: r0 = socket(0xa, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:13:12 executing program 3: r0 = socket(0x15, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x15021, 0x0, 0x0) 00:13:12 executing program 4: r0 = socket(0xa, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="8fa5ee3c0cff323a", 0x8}, {&(0x7f0000000000)="8d3761bc2856", 0x6}, {&(0x7f0000000180)="770a9fa01e06acdf850e9dd51c2df9b346a250fb328bbb8a53acaf73ad60ea7d83f727fa4ed252b01de97e0cfd18006c1a1fd343cab538729984471f96ca626732ac72317e1ccf59784da1670d49a64bbaf2c75584eace722c82c594fc947b4f7f45ed3a2879d6da1b874eb4789f55fad130494712430532c5eea625a6d34b3041f91719ed05f81f1639ac9fb03895d9711181e44f6b742b452d45bb051c84c97724c1a47490a0590513aa6781301b90a1a0edcedb527f243860e4bb857e56332f6d16de0969ca63a96c9e84119d7e35461d41db4c4fd5c23c918841", 0xdc}], 0xd, 0x0, 0x0, 0x843}, 0x24008080) 00:13:12 executing program 0: r0 = socket(0x29, 0x5, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xeffdffff}}, 0x0) 00:13:12 executing program 3: r0 = socket(0x15, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0x85) 00:13:12 executing program 4: r0 = socket(0x2, 0x2, 0x1) ioctl$CEC_RECEIVE(r0, 0xc0386106, 0x0) 00:13:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x103, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 00:13:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000a007) 00:13:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2900000000000800000018"], 0x2c}}, 0x0) 00:13:12 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f00000011c0)={&(0x7f0000000000)=@id, 0x10, 0x0}, 0x0) 00:13:12 executing program 0: r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)=ANY=[], 0x1374}}, 0x80) [ 792.309180][T31050] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. 00:13:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r1) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}]}, 0x24}}, 0x0) 00:13:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect(r0, &(0x7f00000005c0)=@un=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x205) 00:13:12 executing program 4: syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000080)='./file2\x00', 0x2818040, &(0x7f00000000c0)=ANY=[], 0x1, 0x14fe, &(0x7f00000027c0)="$eJzs3Au4TtX2MPAx5pyLTeJNcl9jjsWbXCZJkkuSXJIkCck9IUmSJElscktCEnLdSS7bDskt7bTd75fck3aOJElCQpL5PbvL538653zOOV//v/P89/g9z3z2HHutMd453/Hs/a61nmfvb3qMrNW0dvVGzAz/Dv37BH/9kggACQAwBAByAUAAAOVzl8+dcTybxsR/60XEf5PGyVd6BeJKkv5nbtL/zE36n7lJ/zM36X/mJv3P3KT/mZv0X4hMLaXANTIy75Dn/5mZfP5nCviPDkj//7fR/9LZ0v/MTfqfuUn/Mzfpf+Ym/c/cpP+Zm/RfiEztT3+mvOHclX6mLeNfGEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxP+Ac/4SAwC/z6/0uoQQQgghhBBCCPHn8e9e6RUIIYQQQgghhBDivx+CAg0GAsgCWSEBskF2uApywNWQE3JBDK6B3HAt5IHrIC/kg/xQAApCISgMIRBYYIigCBT9pVIxuAGKQwkoCaXAQWkoAzdCWbgJysHNUB5ugQpwK1SESlAZqsBtUBVuh2pwB1SHO6EG1IRaUBvugjpwN9SFe6Ae3Av14T5oAPdDQ3gAGkFjaAIPQlN4CJpBc2gBLaEVtIY2l8lPyvX38p+H3vAC9IG+kAj9oD+8CANgIAyCwTAEXoKh8DIMg1dgOIyAkfAqjILXYDS8DmNgLIyDN2A8TICJMAkmwxRIgjdhKrwF0+BtmA4zYCbMgmSYDSnwDsyBuTAP3oX58B4sgKRsi2AxLIH3YSl8AKnwISyDjyANlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA0+hu2wA3bCLtgNe2AvfAL74FPYD59BOnz+L+af/UN+TwQEVKjQoMEsmAUTMAGzY3bMgTkwJ+bEGMYwN+bGPJgH82JezI/5sSAWxMJYGAkJGRmLYBGMYxyLYTEsjsWxJJZEhw7LYBksizdhOSyH5bE8VsAKWBErYSWsglWwKlbFalgNq2N1rIE1sBbWwrvwLrwb62JdrIf1sD7WxwbYABtiQ2yEjbAJNsGm2BSbYTNsgS2wFbbCNtgG22JbbIftsAN2wI7YETthJ+yMnbELdsGu2BW7YTfsjt2xB/bAnvgcPofP4/P4Ar6AfbGG6of9sT8OwAE4CAfjYHwJh+LL+DK+gsNxBI7EV/FVfA1H4xkcg2NxHI7DqmoCTsRJyGoKJmESZoWpOA2n4XScgTNwFibjbEzBFJyDc3Euvovz8T18DxfiQlyMS3AJLsUPMBVTcRmexTRcjitwJa7C1bgK1+I6XIsbcCNuwM24GbfiVvwYP8YduAN34S7cg3vwE/wEP8VPcTimYzoewAN4EA/iITyEh/EwHsEjeBSP4jE8hsfxOJ7Ak3gKT+JpPI1n8Cyew3N4Hs/jBbyAF/Fixg+/ymCUUVlUFpWgElR2lV3lUDlUTpVTxVRM5Va5VR6VR+VVeVV+lV8VVAVVYVVYkSLFKlJFVBEVV3FVTBVTxVVxVVKVVE45VUaVUWVVWVVOlVPl1S2qgrpVVVSVVHtXRVVRVVUHV03doaqr6qqGqqlqqdqqtqqj6qi6qq6qp+qp+qq+aqDuVw1VPxyEjVVGZ5qqEdhMjcQWqqVqpVqr1/Bh1VaNxnaqveqgHlVjcQx2Um1dZ/WE6qImYlf1lJqET6vuagr2UM+qnuo51Us9r3qrdq6P6qumYz/VX83CAWqgGqQGqzlYU2V0rJZ6RQ1XI9RI9apajK+p0ep1NUaNVePUG2q8mqAmqklqspqiktSbaqp6S01Tb6vpaoaaqWapZDVbpah31Bw1V81T76r56j21QC1Ui9RitUS9r5aqD1Sq+lAtUx+pNLVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZbVFb1Tb1sdqudqidapfarfaoveoTtU99qvarz1S6+lwdUH9RB9UX6pD6Uh1WX6kj6mt1VH2jjqlv1XH1nTqhTqpT6nt1Wv2gzqiz6pz6UZ1XP6kL6md1UXkFGrXSWhsd6Cw6q07Q2XR2fZXOoa/WOXUuHdPX6Nz6Wp1HX6fz6nw6vymgC+pCurAONWmrWUe6iC6q4/p6XUzfoIvrErqkLqWdLq3L6Bt1WX2TLqdv1uX1LbqCvlVX1JV0ZQ/6Nl1V366r6Tt0dX2nrqFr6lq6tr5L19F367r6Hl1P36vr6/t0A32/bqgf0I10Y91EP6ib6od0M91ct9AtdSvdWrfRD+u2+hHdTrfXHfSjuqN+THfSj+vO+gndRT+pu+qndDf9tO6un9E99LO6p35O99I/64va6z66r07U/XR//aIeoAfqQXqwHqJf0kP1y3qYfkUP1yP0SP2qHqVf06P163qMHqvH6Tf0eD1BT9ST9GQ9RSfpN/VU/Zaept/W0/UMPVPP0sl6th70W6V5/0T+W38nf9gvr75Vb9Mf6+16h96pd+ndeo/eq/fqfXqf3q/363Sdrg/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6R/29Pq1/0Gf0WX1W/6jP6/P6wm/vARg0ymhjTGCymKwmwWQz2c1VJoe52uQ0uUzMXGNym2tNHnOdyWvymfymgCloCpnCJjRkrGETmSKmqImb600xc4MpbkqYkqaUcaa0KWNu/P/Ov9z62pg2pq1pa9qZdqaD6WA6mo6mk+lkOpvOpovpYrqarqab6Wa6m+6mh+lhepqeppfpZXqb3qaP6WMSTaLpb140A8xAM8gMNkPMS2aoGWqGmWFmuBluRpqRZpQZZUab0WaMGWPGmXFmvBlvJpqJZrKZbJJ8LjPVTDXTzDQz3Uw3M4fkMskm2aSYFDPHzDHzzDwz38w3C8wCs8gsMkvMErPULDWpJtUsM8tMmllulpuVZqVZbVabtWatWW/Wm41mo9lsNps0s81sM9vNdrPT7DS7zW6z1+w1+8w+s9/sN+km3RwwB8xBc9AcMofMYXPYHDFHzFFz1Bwzx8xxc9ycMCfMKXPKnDanzRlzxpwz58x5c95cMBfMRXMx47IvUIEKTGCCLEGWICFICLIH2YMcQY4gZ5AziAWxIHeQO8gTXBfkDfIF+YMCQcGgUFA4CAMKbMBBFBQJigbx4PqgmPrtkjIoFbigdFAmuDEoG9wUlAtuDsoHtwQVgluDikGloHJQJbgtqBrcHlQL7giqB3cGNYKaQa2gdnBXUCe4O6gb3BPUC+4N6gf3BQ2C+4OGwQNBo6Bx0CR4MGgaPBQ0C5oHLYKWQaugddDmT63v/Zl8j7g+Yd8wMewX9g9fDAeEA8NB4eBwSPhSODR8ORwWvhIOD0eEI8NXw1Hha+Ho8PVwTDg2HBe+EY4PJ4QTw0nh5HBKmBS+GU4N3wqnhW+H08MZ4cxgVpgczg5TwnfCOeHccF74bjg/fC9cEC4MF4WLcyL++talhh+Gy8KPwrRwebgiXBmuCleHa8K14bpwfbgh3BhuCjeXH/rrqeH2cEe4M9wV7g73hHvDT8J94afh/vCzMD38PDwQ/iU8GH4RHgq/DA+HX4VHwq/Do+E34bHw2/B4+F14IjwZngq/D0+HP4RnwrPhufDH8Hz4U3gh/Dm8GPqMi/uMj3cyZCgLZaEESqDslJ1yUA7KSTkpRjHKTbkpD+WhvJSX8lN+KkgFqTAVpgxMTEWoCMUpTsWoGBWn4lSSSpIjR2WoDJWlslSOylF5Kk8VqAJVpIpUmSrTbXQb3U630x10B91Jd1JNqkm1qTbVoTpUl+pSPapH9ak+NaAG1JAaUiNqRE2oCTWlptSMmlELakGtqBW1oTbUltpSO2pHHagDdaSO1Ik6UWfqTF2oC3WlrtSNulF36k49qAf1pJ7Ui3pRb+pNfagPJVIi9af+NIAG0CAaRENoCA2loTSMhtFwGk4jaSSNolE0mkbTGBpL4+gNGk8TaCJNosk0hZIoiabSVJpG02g6TaeZNJOSKZlSKIXm0ByaR/NoPs2nBbSAFtEiWkJLaCktpVRKpWW0jNIojVbQClpFq2gNraF1tI420AbaRJtoC22hbbSNttN22kk7aTftpr20l/bRPtpP+ymd0ukAHaCDdJAO0SE6TIfpCB2ho3SUjtExOk7H6QSdoFN0ik7TaTpDZ+gcnaPz9BNdoJ/pInlKsNlsdnuVzWGvtjltLvvHOL8tYAvaQrawDW1em++vYrLWFrclbElbyjpb2paxN/5NXNFWspVtFXubrWpvt9VsRZsN/mtcx95t69p7bD17r61t7/qruL69zzawD9mGtrltZFvaJra1bWofss1sc9vCtrStbGvb0T5mO9nHbWf7hO1in/ybeKn9wK6z6+0Gu9Hus5/ac/ZHe9R+Y8/bn2wf29cOsS/ZofZlO8y+YofbEX8dA9hx9g073k6wE+0kO9lO+Zt4pp1lk+1sm2LfsXPs3L+Jl9j37XybahfYhXaRXfxLnLGmVPuhXWY/sml2uV1hV9pVdrVdY9f+37WutJvtFrvV7rWf2O12h91pd9ndds8vccY+9tvPbLr93B6xX9uD9gt7yB6zh+1Xv8QZ+ztmv7XH7Xf2hD1pT9nv7Wn7gz1jz/6y/4y9f29/thett8DIijUbDjgLZ+UEzsbZ+SrOwVdzTs7FMb6Gc/O1nIev47ycj/NzAS7Ihbgwh0xsmTniIlyU43w9F+MbuDiX4JJcih2X5jJ8I5flm7gc38zl+RauwLdyRa7ElbkK38ZV+Xauxndwdb6Ta3BNrsW1+S6uw3dzXb6H6/G9XJ/v4wZ8PzfkB7gRN+Ym/CA35Ye4GTfnFtySW3FrbsMPc1t+hNtxe+7Aj3JHfow78ePcmZ/gLvwkd+WnuBs/zd35Ge7Bz3JPfo578fPcm1/gPtyXE7kf9+cXeQAP5EE8mIfwSzyUX+Zh/AoP5xE8kl/lUfwaj+bXeQyP5XH8Bo/nCTyRJ/FknsJJ/CZP5bd4Gr/N03kGz+RZnMyzOYXf4Tk8l+fxuzyf3+MFvJAX8WJewu/zUv6AU/lDXsYfcRov5xW8klfxal7Da3kdr+cNvJE38Wbewlt5G3/M23kH7+RdvJv38F7+hPfxp7yfP+N0/pwP8F/4IH/Bh/hLPsxf8RH+mo/yN3yMv+Xj/B2f4JN8ir/n0/wDn+GzfI5/5PP8E1/gn/kie4YIIxXpyERBlCXKGiVE2aLs0VVRjujqKGeUK4pF10S5o2ujPNF1Ud4oX5Q/KhAVjApFhaMwoshGHEVRkahoFI+uj4pFN0TFoxJRyahU5KLSUZnoxqhsdFNULro5Kh/dElWIbo0qRpWiylGV6LaoanR7VC26I6oe3RnViGpGtaLa0V1RnejuqG50T1QvujcqF90XNYjujxpGD0SNosZRk+jBqGn0UNQsah61iFpGraLWUZvo4aht9EjULmofdYgejTpGj0WdosejztETUZfoyUvHSwS/fpr+4Xhi1C/Sv13O3KMXxRfHl8Tfjy+NfxBPjX8YXxb/KJ4WXx5fEV8ZXxVfHV8TXxtfF18f3xDfGN8U3xzfEt+axfvaWcFhxo0wGBe4LC6rS3DZXHZ3lcvhrnY5XS4Xc9e43O5al8dd5/K6fC6/K+AKukKusAsdOevYRa6IK+ri7npXzN3girsSrqQr5Zwr7cq41q6Na+PaukdcO9fedXCPukfdY+4x97h73D3hurgnXVf3lOvmnnbd3TPuGfes6+mec73c8663e8H1cX1dokt0/V1/N8ANcIPcIDfEDXFD3VA3zA1zw91wN9KNdKPcKDfajXZj3Bg3zo1z4914N9FNdJPdZJfkktxUN9VNc9PcdDfdzXQzXbJLdikuxc1xc9w8N8/Nd/PdArfALXKL3BK3xC11S12qS3XL3DKX5tLcCrfCrXKr3Bq3xq1z69wGt8FtcpvcFrfFbXPb3Ha33e10O91ut9vtdXvdPrfP7Xf7XbpLdwfcAXfQHXSH3JfusPvKHXFfu6PuG3fMfeuOu+/cCXfSnXLfu9PuB3fGnXXn3I/uvPvJXXA/u4vOu6TYm7Gpsbdi02Jvx6bHZsRmxmbFkmOzYymxd2JzYnNj82LvxubH3ostiC2MLYotji2JvR9bGvsglhr7MLYs9lEsLbY8tiK2MrYqtjrmfaHtkS/ii/q4v94X8zf44r6EL+lLeedL+zL+Rl/W3+TL+Zt9eX+Lr+Bv9RV9JV/ZN/ctfEvfyrf2bfzDvq1/xLfz7X0H/6jv6B/znfzjvrN/wnfxT/qu/infzT/tu/tnfA//rO/pn/O9/PO+t3/B9/F9faLv5/v7F/0AP9AP8oP9EP+SH+pf9sP8K364H+FH+lf9KP+aH+1f92P8WD/Ov+HH+wl+op/kJ/spPsm/6af6t/w0/7af7mf4mX6WT/azfYp/x8/xc/08/66f79/zC/xCv8gv9kv8+36p/8Cn+g/9Mv+RT/PL/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1W/zH/vtfoff6Xf53X6P3+s/8fv8p36//8yn+8/9Af8Xf9B/4Q/5L/1h/5U/4r/2R/03/pj/1h/33/kT/qQ/5b/3p/0P/ow/68/5H/15/5O/4H/2F+Vv1oQQQggh/in6Msf7/Z3vqd9Ghv4AcPWOAof/WHNT3l/nA9W+LjEAeKJvj8a/j8aNExMTfzs3TUNQdCEAxC7lZ4FL8XLoAI9BZ2gPZf/u+gaqysiXqR+/BSA7QLbfcxLgl/gP9W/6B/Wbv3/Z+gsBihe9lJPxQr/Hl+qX+wf193S8TP1sXyQBtPsvOTngUnypfhl4BJ6Ezn91phBCCCGEEEII8auB6nzPy93fZtyfFzSXcrLCpfhy9+eXUe3P2IMQQgghhBBCCCH+355+rtfjD3fu3L7b/+ZJ1v+MZfwHTBAA/gOWIZP//MmV/s0khBBCCCGE+LNduui/0isRQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCEyr3//P4Spf/rkK71HIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ4kr7PwEAAP//6YRaRA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x145842, 0x0) write(r0, &(0x7f0000004200)="1c", 0x1) 00:13:12 executing program 3: r0 = socket(0x15, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0x2) [ 792.481196][T31065] loop4: detected capacity change from 0 to 256 [ 792.510032][T31065] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1dee4a7b, utbl_chksum : 0xe619d30d) 00:13:12 executing program 1: r0 = socket(0xa, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) 00:13:12 executing program 3: r0 = socket(0x2, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x10022, 0x0, 0x0) 00:13:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x0) 00:13:12 executing program 4: r0 = socket(0x2, 0x2, 0x73) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:13:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x7ff}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}]}]}, 0x48}}, 0x0) 00:13:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380008"], 0x100}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 00:13:12 executing program 4: r0 = socket(0x15, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0x7) 00:13:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 00:13:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r1) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) 00:13:12 executing program 4: r0 = socket(0xa, 0x2, 0x3a) recvfrom$ax25(r0, 0x0, 0x0, 0x4101, 0x0, 0x0) 00:13:12 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 00:13:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nfc\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0) 00:13:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380006"], 0x100}}, 0x0) 00:13:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x0) 00:13:12 executing program 4: r0 = socket(0x2, 0x2, 0x73) recvfrom$ax25(r0, 0x0, 0x0, 0x40012060, 0x0, 0x0) 00:13:12 executing program 1: r0 = socket(0x2, 0x2, 0x73) sendmsg$tipc(r0, &(0x7f00000011c0)={&(0x7f0000000000)=@id, 0x10, 0x0}, 0x0) 00:13:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r1) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x4}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x2c}}, 0x0) 00:13:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x103, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5}, @NFC_ATTR_LLC_PARAM_RW={0x5}]}, 0x2c}}, 0x0) 00:13:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf250900000038000e"], 0x100}}, 0x0) 00:13:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r1) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {0x3}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 00:13:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x100}, 0x18}, 0x0) 00:13:13 executing program 0: r0 = socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) 00:13:13 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x80041, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x3, 0x3}, 0x8) 00:13:13 executing program 1: r0 = socket(0xa, 0x2, 0x3a) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) 00:13:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r1) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {0x11}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0) 00:13:13 executing program 0: r0 = socket(0xa, 0x2, 0x73) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 00:13:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0xfffffffffffffffe, r0) 00:13:13 executing program 4: r0 = socket(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) 00:13:13 executing program 1: r0 = socket(0xf, 0x3, 0x2) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 00:13:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "13d8d4bf4cc9e90dc0f641c65e4a2d18a4e6da7b7efc7f70dc735d31ae65010546a861952a11e7ab77db"}]}, 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r3, 0x0, 0x0) 00:13:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380006"], 0x100}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) 00:13:13 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:13:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x100}, 0x300}, 0x0) 00:13:13 executing program 3: r0 = socket(0x29, 0x2, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:13:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000400)={@remote}, &(0x7f0000000440)=0x20) 00:13:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380010"], 0x100}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) 00:13:13 executing program 1: r0 = socket(0xa, 0x2, 0x73) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40081) 00:13:13 executing program 0: r0 = socket(0x29, 0x5, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xeffdffff}}, 0x0) 00:13:13 executing program 3: r0 = socket(0x2, 0x2, 0x1) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) 00:13:13 executing program 0: r0 = socket(0x2, 0x2, 0x73) recvfrom$ax25(r0, 0x0, 0x0, 0x21, 0x0, 0x0) 00:13:13 executing program 1: r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10}, 0x10}}, 0x4000091) 00:13:13 executing program 2: r0 = socket(0x2c, 0x3, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:13 executing program 3: r0 = socket(0x15, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0x3) 00:13:13 executing program 0: r0 = socket(0x15, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@id={0xa}, 0x10, 0x0}, 0x0) 00:13:13 executing program 3: r0 = socket(0x15, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0x1d) 00:13:13 executing program 3: r0 = socket(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 00:13:13 executing program 0: r0 = socket(0x2, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:13:13 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0x10}}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xeffdffff}}, 0x0) 00:13:13 executing program 2: r0 = socket(0xa, 0x2, 0x3a) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:13:13 executing program 0: r0 = socket(0x2, 0x2, 0x1) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:13 executing program 3: r0 = socket(0x2c, 0x3, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) 00:13:13 executing program 2: r0 = socket(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0) 00:13:13 executing program 3: r0 = socket(0x29, 0x5, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 00:13:13 executing program 2: r0 = socket(0x15, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:13 executing program 3: r0 = socket(0x2b, 0x1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x200000d9) getpeername$tipc(r0, 0x0, 0x0) 00:13:13 executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @a={0x0, 0x0, 0x0, 0x3f, {0x0, 0x6, "07bdf33267c2"}, 0x2}}, 0x12) [ 794.021756][T11365] nci: nci_add_new_protocol: the target found does not have the desired protocol 00:13:14 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 00:13:14 executing program 4: r0 = socket(0x2, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) 00:13:14 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x80041, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x1}, 0x8) 00:13:14 executing program 1: r0 = socket(0x29, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000040)="c2", 0x1}], 0x1}, 0x0) 00:13:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="ffdb"], 0x100}, 0x18}, 0x0) 00:13:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf250900000038000d"], 0x100}}, 0x0) 00:13:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2502000000080004000100000008000100", @ANYRES32], 0x4c}}, 0x0) 00:13:14 executing program 2: r0 = socket(0xa, 0x2, 0x3a) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xa0, 0x453, 0x0, 0x0, 0x0, "4371ed1271cb1461e5c9bfdfb3ad4aba74dedd5602f07bf26113b837ed6746aaaef862106ed6091e6d0bec21d0ccd50deaf08b3ec26173b3fd864b7e632deb81cc7cbddeac69d39a97dfc62c10d702f4979e1af2bb979458b1566a7f492ffd362481f281dcadf47093d877c27f6ccd9b2671606fed1a0e5bc3f44fb05a4b9793251161fc938271f12b68de5600"}, 0xa0}}, 0x0) 00:13:14 executing program 2: r0 = socket(0x2, 0x2, 0x73) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={0x0}}, 0x0) 00:13:14 executing program 1: r0 = socket(0x2a, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380010"], 0x100}}, 0x0) 00:13:14 executing program 2: r0 = socket(0x2, 0x2, 0x1) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 00:13:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x103, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5}]}, 0x24}}, 0x0) 00:13:14 executing program 1: r0 = socket(0x2, 0x2, 0x1) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 00:13:14 executing program 2: r0 = socket(0x15, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0xa) 00:13:14 executing program 1: r0 = socket(0x2c, 0x3, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x11b, 0x81, 0x0, 0x0) 00:13:14 executing program 0: r0 = socket(0x15, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0x6) 00:13:14 executing program 2: r0 = socket(0xa, 0x2, 0x3a) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="8fa5ee3c0cff323a", 0x8}, {&(0x7f0000000000)="8d3761bc2856", 0x6}, {&(0x7f0000000180)="770a9fa01e06acdf850e9dd51c2df9b346a250fb328bbb8a53acaf73ad60ea7d83f727fa4ed252b01de97e0cfd18006c1a1fd343cab538729984471f96ca626732ac72317e1ccf59784da1670d49a64bbaf2c75584eace722c82c594fc947b4f7f45ed3a2879d6da1b874eb4789f55fad130494712430532c5eea625a6d34b3041f91719ed05f81f1639ac9fb03895d9711181e44f6b742b452d45bb051c84c97724c1a47490a0590513aa6781301b90a1a0edcedb527f243860e4bb857e56332f6d16de0969ca63a96c9e84119d7e35461d41db4c4fd5c23c918841", 0xdc}], 0xd, 0x0, 0x0, 0x843}, 0x24008080) 00:13:15 executing program 1: r0 = socket(0x29, 0x5, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) 00:13:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2505000000080004000100000008000100", @ANYRES32], 0x4c}}, 0x0) 00:13:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380007"], 0x100}}, 0x0) [ 795.083578][T31252] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 00:13:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x4}]}, 0x28}}, 0x0) [ 795.120600][T31256] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. 00:13:15 executing program 0: r0 = socket(0xa, 0x2, 0x3a) recvfrom$ax25(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 00:13:15 executing program 2: r0 = socket(0x2, 0x2, 0x73) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:15 executing program 0: r0 = socket(0xa, 0x2, 0x3a) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) 00:13:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:15 executing program 0: r0 = socket(0x29, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x10}, 0x10}}, 0x20040890) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:13:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:15 executing program 0: socket(0x2, 0x2, 0x88) 00:13:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380008"], 0x100}}, 0x0) [ 801.779755][ T2052] ieee802154 phy0 wpan0: encryption failed: -22 [ 801.781161][ T2052] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.923276][T13480] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 806.938054][T13480] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 806.940007][T13480] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw 00:13:43 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:43 executing program 0: r0 = socket(0x22, 0x3, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) 00:13:43 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x3f) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 00:13:44 executing program 4: r0 = socket(0x26, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0x2) 00:13:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)) 00:13:44 executing program 2: r0 = socket(0x15, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@id={0x2, 0x3, 0x0, {0x4}}, 0x10, 0x0}, 0x0) 00:13:44 executing program 0: r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) 00:13:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)) 00:13:44 executing program 2: r0 = socket(0x15, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x15021, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 00:13:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)) 00:13:44 executing program 2: r0 = socket(0xa, 0x2, 0x3a) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) 00:13:44 executing program 1: syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)) 00:13:44 executing program 2: r0 = socket(0x29, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x119, 0x5) 00:13:45 executing program 2: r0 = socket(0xa, 0x2, 0x73) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 00:13:45 executing program 1: syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 0: r0 = socket(0x2, 0x2, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4811) 00:13:45 executing program 1: syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001540)={0x420}, 0x420}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:13:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r2, 0x601, 0x0, 0x0, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0x10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6}]}, 0x2c}}, 0x0) 00:13:45 executing program 2: r0 = socket(0x29, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0x5) 00:13:45 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, r1}, 0x14}}, 0x0) 00:13:45 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380004"], 0x100}}, 0x0) 00:13:45 executing program 0: r0 = socket(0x15, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0x5) 00:13:45 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="2c140000000000002e2f66696c653000faad00544638b142bbd07008bba9912e8cd008a4b18208366a61bf02a4beba4517c65fa7a895865d21cc843f95a5cf5494d59dff2e006cda47a0097a5b39de2bdee1bc775501602752767980c624a22f6180f3"]) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000082c0)=[{&(0x7f0000000b40)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="0c000080080000007f0000"], 0x30}, {&(0x7f00000031c0)=ANY=[@ANYBLOB="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"], 0x10}, {&(0x7f0000006440)=ANY=[@ANYBLOB="900300fb1b0008002dbd7000fedbdf25ac016780140000000000008fe70583805213815b0f0008002300", @ANYRES32, @ANYBLOB="0800440064010102a9001e0097eb75c9a67375efe67b0a647061aab687c146302db2853021c19c277b6cdf1d60befae843de39348c7de6357ca7d9371c0de6ab3ef9bd8ec66ea4edbbe269086288054a51a70560e2842f10621c079bf0b576449ec73dd4930d72122cfc5621507e6f79c02f1ed2df8ce096ee908c0a7a5fe79dee96bfc2150654f6bc3d24a11fa72f806bb2b12fd2eb2faf557dda455fc1ec6aaf90e6d8335caf148742f8da7fbfe8ec2e000000390a4854a4a7c1d4820679f3ec58392770bc5e5a9aea7c1873ff259d1e95", @ANYRES32=0x0, @ANYBLOB="1800698008005f00", @ANYRES32=0x0, @ANYBLOB="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"], 0x390}, {&(0x7f0000003780)=ANY=[@ANYBLOB="a00307003c00000225bd7000fcdbdf253d2438efe135db0586b3c6ae806a9557cea4726183a4e117c5c4f3f03eb6237ce17e73294b1ea9d95d9b651d0211e4e377714c804d8ce66c22d67032c69995a78bfa4839bc6697f6f46c9226df8a1c1f8b59f0f539f861ed7eb19d3ae3ecdfe180ed1d3dc699652eb82be1ac635f314cfe2b28d5ea02f460364f0346c81ab3cead7acfae719153c37eef2ee734143d8da4a61fdd07dc29f1e4b473601a4a10c5f071c89428d46cbcbc21ae23a7d8fbb8a68b2aaeaa82e01022e1cb75ca8ad72d2e7309fc53e887123a6c8785f5cc319e5ebfdb8cd7e0fb161a2e31028a3d4f2c9641c0af48b002379665e4c032340d62f6af1af124603dfbbafac52012fec0822b713c90031c8328bfe1ce116853fee76fcab3f5bfc86028252871a46465000000806a030121e8de714bc082e9e5c51dfad27a91290d74175fa1c63bfcac1f426baad19910856924da77fe56080071000300005562afb4810b3ed85ee4146668e7f650b1032ed15467ce2139bf0148264937c8e186db48445c49844dfa7af34a51a092b7fde92b7971d63f141800110ae631ab2f08ed5303f98c85dc7a982012d14d4b60ccdd68bdd367d4059598d0c3b3830e141346e500af047b35486a1a12179d7e9e68cf491d9cee2de8f226b459517733e2b3f9d5081a805713c5660ef768ba081ee76e2d275ca258ef7195d34596418a65a4ca4263e7bb81aace9cf712d5dc20d1b4bb0e68977c5941def058f1f6e5cffde571c0ee3c090000", @ANYBLOB="afba46cdc51ff83d1ab70c03ad3e1021eeadcf51954c22efab0d30b160a470a3e5c44c1597410192274a6d03bdd153fcadc2d024c6abf4140000002001000000000000000000000000000100007c8a9346d50eb463ea33434382b446b50f76308bccb8f4c89f5a4e1c32fa0b36a54513303229a434606857167e43c00b2b930b20e33d368b24f727d185c7972264cb9582848e67a17db8779346adbfdeed28168973e777a14f685406a239f44e9f70ad110cec49e9371b69899f99061cee389bead0b76121cf0238868c", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'], 0x3a0}, {&(0x7f0000000780)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="e12d0a2d9876f9a3b413c8e0b79b2e5b48028c716053f507e0e08540beb3dfc97e3935c9bc6c24898f8d677f1ea3060b04775f964fb4b39c3d5fd892c77e424cfcd7fa564bbf3044050c035921bb20ada88aa21c4762c02c62de46bb15ecc8ac51b9e9c722fbee2048d6d7113975cbf681cf21e878d8e2b85dbaa1e36f1ed600e6f18d44920c0587c4556218bbf550c49bb5dfa828d61e18da625c030b3d1ec79aa5c6e549d293cbfb28f4c15aea12acf7ff2af75217"], 0x18}, {&(0x7f0000003400)={0x1a8, 0x32, 0x200, 0x0, 0x25dfdbfb, "", [@typed={0x8, 0xa9, 0x0, 0x0, @uid}, @generic="abc6b20b5c91091002674d0b2c1ef5647d44e1dc7607d36d949081db9b76de5ec949e5fa9bb56c0c9f5047ab0f9cfa7df6177292501f35ed47ccc3d73ca54ecd1c65436a002b4d111184d3b3e91929aac1e9d1a992b76e7c0dcf8715e2c330d88359d348fb64ad583a1fe79178c7568e0ce08ad6c9a822", @typed={0x4, 0x4c}, @generic="a194e2ad2fa7622055665a8ab47c5ae30a75656662265a3f410e5fbb3ddfced5ca4d24facf6c", @generic="09a8b881a5eca5e7f681f2728025e3e1a904a5c066ec7424f032e43d21fd4abac4252d6dafc964908e6230e458e7e483d2d6a3392c63c213dbd7afc4c5751500f53360e9b9de38c56c1f6d4cc81ad117713fda6a9310bc7fca5090b05d1dbc0e7f904d20ed9851205c95af6a70562fed5ef14a7d20fc1c05ae88d39183baa0f7f83f972646ebcc21a4b3f2b97db4bc15af384ceb030a1d1aa4ef8e091185f401f1866a5718675b2944774da5d57f78a4714fdbb58145d2408a43ddf45e34e6fedb2d33061eea3c17a6a48eef5e599213f6b4fed6c2e48070b56b783fa4d9fa554b293324782516fdc13225035fd053"]}, 0x1a8}], 0x6}, 0x800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000003780)=ANY=[], 0x50}], 0x1}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x109001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000002180), 0x4) sendto$inet(r4, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r4, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) r5 = getpid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000000c0)=r5) r6 = getpgid(r5) r7 = socket$key(0xf, 0x3, 0x2) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000003740), 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="6fd14b5d036705c2bd00f349e9a426fb4f935b4f251215481c87b90ac6dd5116d16adbfd1d1235aa4d2d18a04a47873dd91474de69aafaa9d25ad694caa17cba9245902c058003cc6c0f50f5396391737912acb540a46eeeacb2a0c6d98de870909813f47b6d3e73816330ea12c63a705000daf2334d74b55f48592406a95b3e5da9287894e1541d4c145c53ba82af4288b91dbe5576b2684b185ddad9a37e915b563ef9a04ccb73ab0df9441a514496b491a2026a926fcd11ac086d422226475e956993eb6849536189f1cfecbf428346a427e951831bc1fa91c2439a5d50", 0xdf}, {&(0x7f0000000140)="b4122bdc972e029561e9e30d8712e41abeea300a7d8b98c1f2", 0x19}], 0x2, &(0x7f0000003680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000180000000000000001000000", @ANYRES32, @ANYRES32], 0xb8, 0x4040081}}, {{&(0x7f0000000440)=@file={0x1, './bus/file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000002100)="771d0defacef11b43dd99be98b2162a4130599ce4d6cb56c0f67c77d18eef4e5963118c176f014061a1653617e27524961a56a151ebac6b2e72228", 0x3b}, {&(0x7f0000000540)="4d9264f7a529a959f8109a69c2c19084fb3be0e6d28a632b55cadf467acb382a5ffef920727df80bdc689d4c4c292af3739659ad8ad4074477decc6373a1a8b829b50fa7b005", 0x46}, {&(0x7f00000005c0)="f50c2fb2caca1ed26e0047d0f84ed384713ee48307a339c2a3a4bcb58589a1223d7aeb8029625b554c713915bc82796dae09750edc9511db1976bdc8566419885cf79d9ae82cfe648cf8e82c9f1e36cf058e92d3b919d876fde376847b6ead6c1f62be421d4ede8a48de7c51a1394deace99dd0c4fbd14c19dffc827804868ac08f41bf9aa3d3b21aaa21d350fc79215c4e4a6c6699e1a7df82de3a6bc367d06f3acd97980281cb21019d8c0dbdeb0da", 0xb0}, {&(0x7f0000000680)="2a58f44e31261c2ae255dd78b56a9eb42e881219c26585aa69adc6ca3d9efa20c6415e3d511a0a1c5d6021313de25c8128e0c9b3b6f6f739cf0b643440aeaece1701a6add7009d170eeff751a6b1f9210ed12a372b476f30ae2a6042daa1e7", 0x5f}, {&(0x7f0000000700)="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", 0xfe}], 0x5, &(0x7f0000000880)=[@rights={{0x20, 0x1, 0x1, [r7, r8, r1, 0xffffffffffffffff]}}], 0x20, 0x4c080}}, {{&(0x7f00000008c0)=@file={0x0, './bus/file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000940)="e2111e367fc3534a2b6b3a167cadfda92e76fb1adbfd31028420d28e87e81346c354f00dc26aeb2ac01b4159356893a3f1f3c176afd31eaebec786c198c0d1f02b99d298ed84dca9d8320762c27d991c65dac6036e87d462b885ac9e09089785a29243931fb6abaf4cceadb23156443bdf4bb884d93b62f6a47727683eca828f27b4a12f4fecfddfb60aa6541464f0d4c92938b53309b3068865846ec7bdbcf00395dd995990cf331102f2516d5ede346869e6bf253bfd53888ec75997239b739924594e9e91bd839785006417", 0xcd}, {&(0x7f0000000a40)="ebbcc0c387278e24e1dbdd4f39a8c11f22c1f74e95d1ea4534d33a2b1411c1e989ea131f1429d7e102cfc8f3a3cc339c35558efb5cfa3486d660d4c1dc2692751f88c217588e957d8256b2a9472ad75dec0917e24141fc56e99bed60cb7b6aef3f770e6b5ad9585d2731f7f7143d719688e289a72dad697f3a2a329e6a5e5e6a3095b5224a8ff61e2ee006045ab0045e217386126aa6ee22c545c5c4b801", 0x9e}, {&(0x7f0000000b00)="02000000", 0x4}, {0x0}, {&(0x7f0000000b80)="a614bfdb0f0b79259ed430f5d5d27cac7badb3b62c162f63b354cea30f5c96ccaf423ed5fa25a169c2d5262e8660662e28802e0822c08af00428e3e0bec41a3b90bdcd8a84de04ce01ea31", 0x4b}, {&(0x7f0000000c00)="3aedfd65462e953afcc032068cebd13dd4a35704ceacd3d0cc5073d2fdad8565fd63194239d674c1b52ac86f40585df34e12fc24dc9c36d59c3f94b298418e", 0x3f}], 0x6, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff}}}], 0xa8, 0x7c60c9c9566d109}}], 0x3, 0x11) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000)='timers\x00') r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff00000002000000008e3dea6325ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff501000000100001000908100000000068a3000000", 0x58}], 0x1) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002200)={0x6, 0x11, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x3, 0x1, 0x3, 0x3, 0xb, 0x80, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000001100)='syzkaller\x00', 0xdc8, 0x1000, &(0x7f0000001140)=""/4096, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002140)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002180)={0x4, 0x7, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000021c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f00000000c0)="c9e521cbd9ecdc33dd17220d7e2d5a5969241b0bda9b9f9f20a6b359cc66639575dfe33f6c2d2e4e00b3e1d59bae4fe60b5a5b2ff13cb471b2d8", 0x3a}, {&(0x7f0000000240)="1e3d1703647da19d5a5763fefe21b563a35fe46f08e7940fd83c2435df8766987470dfebea26103cb4b512da30dfc47a1963d42547e35467f2ae4f8d2a140f555db2ff60ec7ad6f52222a1f33592cd814880be2728211cd788ea746a4ac17430a5625819a297b08f87e9f9be3440290c44d8d9d5dfcecda6458dd274db8656d90c952ddf3a0c5d93ad68363905789e766d84cabd7d7acc635d0413be3eac3972de2ccb657a6ba1f2659b07ca415ebf3535bf79b06ac1156e78050092b18174e40091dc66816832b4341b71048a14667bc0580aaed54ab5a6", 0xd8}, {&(0x7f0000000340)="d63aed05a4b248b63b56d3e1ad92437d6c81eed25bb8d169e67eab26c71479d5e2c71505a43ffe7910a9404c7ef8672727511bbdbfcc8bff63de9bb60ddddb002051eb18aab415222016a82c05fbec59cafb3e4936cef89cf06ef964f8225bd25f1611b244c37a570c5656075107d56bd90ff1b3d0eae40539dd0cf98911d22897a69315dbf136f965fda564ac27725401d0c23f58584268", 0x98}, {&(0x7f0000000400)="19c13cfd97254c54d0564cfd2e6457e995594feef355a97a06204baf120be08a625578bccc31e605cce5af1fc7858ded82870cef329f8e4651eaf4e76236c6396d45b11fe01e91a10568cbbb1d9b7dee01aa14485a95674e80a2e56d6b23078be28ded13474fe6468cbb7c217f5d244fcb7cca5f39f9572e24c2c53d92cadf4f9780da7ad602ed9f81f9a6e03cdc42a8307775cc25cf06ca64b9d9cccd31b8a044ec3d2f8d77544b9663db0755e585a974a3ea10b818425e6945050e7e463b2283c8a49b0dff7e550bb099646d7cd4ae669227715b8641ecad6193a986b167864744", 0xe2}, {&(0x7f0000000500)="43fb84cad20d02e76ab67ea954e075d026b85bf6b83bd6a6024d92b53ce94ca83388365ab4c9382e5295ed1ece774ed7c70511cee9ba21237548ac5187079f7c1e69b9d063d34a0ffe85b77f84771ab002c3b38715666d46efa7aac50b71815a7d600376f64d4c0005cd76c9f52faade155ebaad4a41a491fc6a4a954638e7bd351cbe278d3812", 0x87}, {&(0x7f00000005c0)="641e90f6244c4cc885bdf94046dffcd7f0b22880de1d77a590a003ee90a20c358042fc1be1451860add5b6b81f90a7", 0x2f}, {&(0x7f0000000600)="a97d755ed6507aaf644bb5334f99eb547908ae33178cba", 0x17}, {&(0x7f0000000640)="e5b52b2f3b5031ad82e7f30648021c8ebb4ad4191dcf150c22078fee50b0c381034aec27fa757b0bfd53239c4790ec5f0dba2ff2b4043fac2da0d95eb944965e0d66c6056c8c872fe1952211d106abce5df6bdaa7998b1294217a472d26c29ac65289d4cfae640294aaeeed9b8559264112d79cb50fd585c73798b101d89ba48d983ec0b7f4091579fb15695d88e794c60d344950c57ec7ec5822a3fa05bcf39b5bcdde7e63805f2c6d02a692f11fa486f09e9e6ffa4e5352b3c66", 0xbb}, {&(0x7f0000000700)="723c4a1e2c2f91b9974cc2553251946a6c1807cc6ce95a78be18b37dacbef67b94ea51c66946a3c6f31bfc00d6b96616a072d6bb0e969f022bf1d70bc524d11d95d2b6d93ada7c78428c4ffe1a5d187642793a43da7afab71b91e77b3e212b0ac85920852924b19daa90e224f52f6f4a56a3bee08d945872ea4731cc5aee000169b92d3f72d037a0416f39a5f524f51c1f9db4f2eb707a107797e8fad8807b160bba4ca432df2d423c4c374295f97d82068d19e1fd4bb28c0db184d0f0da8619e93ceac39500139403d1e4b67410daef97bc3043396bb5d4210628c66ab2", 0xde}, {&(0x7f0000000800)="4ff26220d64a48403926f90b609a542508670751cb06b5af54ca8dd53b3818cb1c6be551953787ab85b249a61f8186b2bc4c49a4e3af1631b2fdc518e5d9a9d1d95ef77417af66e9407330deaf35edc8e1ea5794df0f98f59ef9115e9167b0574504d326582ce63b12ae0d27834c5e56a71e5c099ff90c6f66d99bc69f1b12b68958371bcb2d2338f9af5f21cfc12ef958fc2cbaaa66adb98cd6fb85a30426037634667fe5ab01f060a6071cd59d644c1fec7cd85d24b0a8f0a25031afeb4cd80453df2127c1abbef9", 0xc9}], 0xa, 0x0, 0x0, 0xc000}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000009c0)="54c630e6aa410409d80509f8c02e980b05a76c376b7278f6f619b54a0453403171be152e54704ea423f748a6f83c03029c4ad83bb9385f2745b00c996efb718250cb6bddcdc4008b3104534cb146defa03b9678d91ca7cdd49e5b0a1938fe4", 0x5f}], 0x1, &(0x7f00000022c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r10, r11, r12]}}], 0x138, 0x44800}}], 0x2, 0x40804) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2001b) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 00:13:45 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="ffdb"], 0x100}, 0x300}, 0x0) [ 825.636784][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 825.638634][T31376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:13:45 executing program 0: syz_genetlink_get_family_id$nfc(0xfffffffffffffffe, 0xffffffffffffffff) 00:13:45 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) [ 825.679096][T31376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 00:13:45 executing program 0: r0 = socket(0x2, 0x2, 0x73) getpeername$tipc(r0, 0x0, 0x0) 00:13:45 executing program 1: r0 = syz_open_dev$vim2m(0x0, 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 0: r0 = socket(0x29, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 00:13:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 00:13:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 0: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001e80)) 00:13:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf250900000038000e"], 0x100}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) 00:13:45 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1, 0x0, 0x0) 00:13:45 executing program 1: syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 1: syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b36, 0x0) getuid() 00:13:45 executing program 1: syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 0: r0 = socket(0x2, 0x2, 0x73) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0xe8b01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:13:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:45 executing program 0: r0 = socket(0x15, 0x5, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000001) 00:13:45 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 0: r0 = socket(0x15, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x114, 0x8) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 0: r0 = socket(0x15, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@id={0x2}, 0x10, 0x0}, 0x0) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000140)) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 0: r0 = socket(0x29, 0x5, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2040040) 00:13:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0xa8, r2, 0x501, 0x0, 0x0, {}, [@NFC_ATTR_FIRMWARE_NAME={0x94, 0x14, '\xb3\xc3\xe1\xde\x7f\xb7\'.\x13\b7!\xae\x88\x8bj\x1d\xcf\x90\xd3\xd8\x13\xac\xcc\x1f\x0eG\xbbB\xd20\x9e<\xa6%\x04\x96n\xda|\xbe\xc5drc\xec\x1e\xe3F\xdd\xac\xf0:\xee\x86t\x9e2\xb8K\xfb<\xc4\xe2\xc2\xc6\xbd\xde\xc9jq\x7fP\xb5T\xa8~h\x06\x94\xd6\x97\'\x89\xd0$\x9f\x89f\x9f\xb9+1\xf0\x12:\xdfi\xfbR\b\xc5JMv\x8b\xe3\\P\xf4\xe3\xbaR\x0fZ\x1bN\xb8\x9f}\xe6K\xffH\xf6y\x8d\xca\xdb<\xf3\x99\xccb\xf2\xab\xf3\x9f\xa5\xed\x96\xec\xeb\xe9'}]}, 0xa8}}, 0x0) 00:13:46 executing program 0: r0 = socket(0x15, 0x5, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x0, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x0, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 0: socket(0xa, 0x2, 0x3a) 00:13:46 executing program 2: r0 = socket(0x29, 0x5, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10}, 0x10}}, 0x0) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x0, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 0: r0 = socket(0xa, 0x2, 0x3a) recvfrom$ax25(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 00:13:46 executing program 2: r0 = socket(0xa, 0x2, 0x3a) sendmsg$tipc(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="8fa5ee3c0cff323a", 0x8}], 0x1}, 0x0) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 2: r0 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 00:13:46 executing program 0: r0 = socket(0x15, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0) 00:13:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000700)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380006"], 0x100}}, 0x0) 00:13:46 executing program 0: r0 = socket(0x2, 0x2, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 00:13:46 executing program 0: r0 = socket(0xa, 0x3, 0x3a) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24000001) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/39, 0x5a}], 0x1}, 0x1042) 00:13:46 executing program 2: r0 = socket(0x15, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@id, 0x10, 0x0}, 0x0) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r1, @ANYBLOB="ffdbdf2509000000380006"], 0x100}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 00:13:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0202"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x4, "4004385e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) [ 826.881669][T31495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.883758][T31495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:13:46 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r2, 0xc01, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x38}}, 0x0) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 0: r0 = socket(0x15, 0x5, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x50) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x80041, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x8) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)) 00:13:46 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)) 00:13:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)) 00:13:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)) 00:13:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0x0) 00:13:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0x0) 00:13:47 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000300)={0x6, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0x0) 00:13:47 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000200), 0x9, 0x0) 00:13:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0202"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:13:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x64}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x52}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}}, 0x0) 00:13:47 executing program 2: syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001880), 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000800)) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) 00:14:16 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8001}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0x38}}, 0x0) 00:14:17 executing program 1: openat$ppp(0xffffff9c, 0x0, 0x0, 0x0) 00:14:17 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000200), 0x9, 0x200100) [ 863.219498][ T2052] ieee802154 phy0 wpan0: encryption failed: -22 [ 863.220892][ T2052] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.367860][T13480] usb 1-1: no suitable firmware found! [ 868.369192][T13480] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 868.370635][ T7331] usb 1-1: ath9k_htc: USB layer deinitialized [ 924.660759][ T2052] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.662142][ T2052] ieee802154 phy1 wpan1: encryption failed: -22 [ 956.659171][ T28] INFO: task kworker/1:5:4305 blocked for more than 143 seconds. [ 956.660870][ T28] Not tainted 6.1.77-syzkaller #0 [ 956.662012][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 956.663848][ T28] task:kworker/1:5 state:D stack:0 pid:4305 ppid:2 flags:0x00000008 [ 956.665689][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 956.667053][ T28] Call trace: [ 956.667703][ T28] __switch_to+0x320/0x754 [ 956.668667][ T28] __schedule+0xee4/0x1c98 [ 956.670708][ T28] schedule+0xc4/0x170 [ 956.671698][ T28] schedule_preempt_disabled+0x18/0x2c [ 956.672897][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 956.673971][ T28] mutex_lock_nested+0x38/0x44 [ 956.674951][ T28] rfkill_global_led_trigger_worker+0x30/0xe4 [ 956.676186][ T28] process_one_work+0x7ac/0x1404 [ 956.677201][ T28] worker_thread+0x8e4/0xfec [ 956.678146][ T28] kthread+0x250/0x2d8 [ 956.679192][ T28] ret_from_fork+0x10/0x20 [ 956.680174][ T28] INFO: task syz-executor.3:31180 blocked for more than 143 seconds. [ 956.681891][ T28] Not tainted 6.1.77-syzkaller #0 [ 956.683078][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 956.684766][ T28] task:syz-executor.3 state:D stack:0 pid:31180 ppid:4259 flags:0x0000000d [ 956.686609][ T28] Call trace: [ 956.687316][ T28] __switch_to+0x320/0x754 [ 956.688284][ T28] __schedule+0xee4/0x1c98 [ 956.689208][ T28] schedule+0xc4/0x170 [ 956.690083][ T28] schedule_preempt_disabled+0x18/0x2c [ 956.691260][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 956.692318][ T28] mutex_lock_nested+0x38/0x44 [ 956.693267][ T28] rfkill_unregister+0xb8/0x210 [ 956.694248][ T28] nfc_unregister_device+0x98/0x290 [ 956.695273][ T28] nci_unregister_device+0x1dc/0x21c [ 956.696340][ T28] virtual_ncidev_close+0x70/0xb0 [ 956.697342][ T28] __fput+0x30c/0x7bc [ 956.698143][ T28] ____fput+0x20/0x30 [ 956.699168][ T28] task_work_run+0x240/0x2f0 [ 956.700264][ T28] do_notify_resume+0x2148/0x3474 [ 956.701289][ T28] el0_svc+0x9c/0x168 [ 956.702106][ T28] el0t_64_sync_handler+0x84/0xf0 [ 956.703105][ T28] el0t_64_sync+0x18c/0x190 [ 956.703975][ T28] INFO: task syz-executor.4:31191 blocked for more than 143 seconds. [ 956.705621][ T28] Not tainted 6.1.77-syzkaller #0 [ 956.706782][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 956.708476][ T28] task:syz-executor.4 state:D stack:0 pid:31191 ppid:4257 flags:0x0000000d [ 956.710551][ T28] Call trace: [ 956.711212][ T28] __switch_to+0x320/0x754 [ 956.712099][ T28] __schedule+0xee4/0x1c98 [ 956.713083][ T28] schedule+0xc4/0x170 [ 956.713871][ T28] schedule_preempt_disabled+0x18/0x2c [ 956.715037][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 956.716076][ T28] mutex_lock_nested+0x38/0x44 [ 956.717109][ T28] nfc_rfkill_set_block+0x50/0x2d0 [ 956.718128][ T28] rfkill_set_block+0x18c/0x37c [ 956.719424][ T28] rfkill_fop_write+0x578/0x734 [ 956.720419][ T28] vfs_write+0x2a4/0x914 [ 956.721262][ T28] ksys_write+0x15c/0x26c [ 956.722131][ T28] __arm64_sys_write+0x7c/0x90 [ 956.723052][ T28] invoke_syscall+0x98/0x2c0 [ 956.724047][ T28] el0_svc_common+0x138/0x258 [ 956.725056][ T28] do_el0_svc+0x64/0x218 [ 956.725866][ T28] el0_svc+0x58/0x168 [ 956.726709][ T28] el0t_64_sync_handler+0x84/0xf0 [ 956.727794][ T28] el0t_64_sync+0x18c/0x190 [ 956.728786][ T28] [ 956.728786][ T28] Showing all locks held in the system: [ 956.730437][ T28] 1 lock held by rcu_tasks_kthre/12: [ 956.731520][ T28] #0: ffff800015a14ef0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 956.733827][ T28] 1 lock held by rcu_tasks_trace/13: [ 956.735069][ T28] #0: ffff800015a156f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 956.737393][ T28] 1 lock held by khungtaskd/28: [ 956.738341][ T28] #0: ffff800015a14d20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 956.740442][ T28] 2 locks held by getty/3992: [ 956.741440][ T28] #0: ffff0000d60db098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 956.743394][ T28] #1: ffff80001bcc02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 956.745606][ T28] 3 locks held by kworker/1:5/4305: [ 956.746631][ T28] #0: ffff0000c0020d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 956.748722][ T28] #1: ffff80001eb27c20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 956.751530][ T28] #2: ffff8000180bd928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x30/0xe4 [ 956.754010][ T28] 2 locks held by syz-executor.3/31180: [ 956.755168][ T28] #0: ffff0000dcd14100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x6c/0x290 [ 956.757125][ T28] #1: ffff8000180bd928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x210 [ 956.759265][ T28] 2 locks held by syz-executor.4/31191: [ 956.760458][ T28] #0: ffff8000180bd928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x234/0x734 [ 956.762659][ T28] #1: ffff0000dcd14100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x2d0 [ 956.764741][ T28] 2 locks held by syz-executor.3/31443: [ 956.765840][ T28] #0: ffff0000dd241118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x44/0x6d0 [ 956.768019][ T28] #1: ffff8000180bd928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x7a4 [ 956.770321][ T28] 2 locks held by syz-executor.4/31453: [ 956.771630][ T28] #0: ffff0000cf954918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x44/0x6d0 [ 956.773981][ T28] #1: ffff8000180bd928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x7a4 [ 956.776147][ T28] 2 locks held by syz-executor.0/31509: [ 956.777383][ T28] #0: ffff800016c34368 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 [ 956.780328][ T28] #1: ffff8000180bd928 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x12c/0x5c8 [ 956.782427][ T28] 1 lock held by syz-executor.1/31528: [ 956.783362][ T28] #0: ffff800016c34368 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 [ 956.784857][ T28] 1 lock held by syz-executor.2/31532: [ 956.785832][ T28] #0: ffff800016c34368 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 [ 956.787624][ T28] 1 lock held by syz-executor.0/31540: [ 956.788776][ T28] #0: ffff800016c34368 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 [ 956.790693][ T28] 1 lock held by syz-executor.1/31542: [ 956.791849][ T28] #0: ffff800016c34368 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 [ 956.793764][ T28] 1 lock held by syz-executor.2/31544: [ 956.794913][ T28] #0: ffff800016c34368 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 [ 956.796730][ T28] 1 lock held by syz-executor.3/31548: [ 956.797849][ T28] #0: ffff800016c34368 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 [ 956.799855][ T28] 1 lock held by syz-executor.4/31550: [ 956.801005][ T28] #0: ffff800016c34368 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 [ 956.802799][ T28] 1 lock held by syz-executor.0/31552: [ 956.803943][ T28] #0: ffff800016c34368 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 [ 956.805881][ T28] 1 lock held by syz-executor.1/31554: [ 956.806913][ T28] #0: ffff800016c34368 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 [ 956.809113][ T28] 1 lock held by syz-executor.2/31556: [ 956.810285][ T28] #0: ffff800016c34368 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x6c/0x368 [ 956.812131][ T28] [ 956.812626][ T28] ============================================= [ 956.812626][ T28] [ 956.814357][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 956.815846][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.77-syzkaller #0 [ 956.817634][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 956.819783][ T28] Call trace: [ 956.820481][ T28] dump_backtrace+0x1c8/0x1f4 [ 956.821491][ T28] show_stack+0x2c/0x3c [ 956.822377][ T28] dump_stack_lvl+0x108/0x170 [ 956.823403][ T28] dump_stack+0x1c/0x58 [ 956.824302][ T28] panic+0x300/0x7fc [ 956.825270][ T28] hung_task_panic+0x0/0x2c [ 956.826231][ T28] kthread+0x250/0x2d8 [ 956.827165][ T28] ret_from_fork+0x10/0x20 [ 956.828081][ T28] SMP: stopping secondary CPUs [ 956.829165][ T28] Kernel Offset: disabled [ 956.830119][ T28] CPU features: 0x00000,02070084,26017203 [ 956.831326][ T28] Memory Limit: none [ 957.947788][ T28] Rebooting in 86400 seconds..