{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r7, r8}, {r9}, {r14}, {0x0, r16}], 0x5, "62227dd8c7d339"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) 20:45:20 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 99) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:20 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x7a00}) 20:45:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xaaaab700}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000ec0000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 651.239948][T23184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x4, 0xdfa5, 0x10000, 0x1, 0x5, "0f9196d97a321deb0282505052446057687160"}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x200041, 0x115) r4 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) 20:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070009ce000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb4090000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 651.282492][T23189] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:21 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0xdd04}) [ 651.392996][T23199] FAULT_INJECTION: forcing a failure. [ 651.392996][T23199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.430138][T23199] CPU: 0 PID: 23199 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0 [ 651.440686][T23199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.450760][T23199] Call Trace: [ 651.454053][T23199] [ 651.456998][T23199] dump_stack_lvl+0xcd/0x134 [ 651.461629][T23199] should_fail.cold+0x5/0xa [ 651.466169][T23199] _copy_from_user+0x2a/0x170 [ 651.470875][T23199] __get_compat_msghdr+0x93/0x470 [ 651.475926][T23199] ? __do_compat_sys_socketcall+0x660/0x660 [ 651.481863][T23199] get_compat_msghdr+0x87/0x120 [ 651.486737][T23199] ? __get_compat_msghdr+0x470/0x470 [ 651.492046][T23199] ? kfree+0x1ed/0x4d0 [ 651.496152][T23199] ___sys_recvmsg+0x1ea/0x200 [ 651.500865][T23199] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 651.506537][T23199] ? lock_downgrade+0x6e0/0x6e0 [ 651.511419][T23199] ? lock_chain_count+0x20/0x20 [ 651.516306][T23199] ? __fget_files+0x286/0x470 [ 651.517259][T23203] Failed to get privilege flags for destination (handle=0x0:0x0) [ 651.521028][T23199] do_recvmmsg+0x53e/0x6d0 [ 651.521079][T23199] ? ___sys_recvmsg+0x200/0x200 [ 651.538017][T23199] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 651.544043][T23199] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 651.550056][T23199] ? find_held_lock+0x2d/0x110 [ 651.554827][T23199] ? __context_tracking_exit+0xb8/0xe0 [ 651.560289][T23199] __sys_recvmmsg+0x23e/0x250 [ 651.565161][T23199] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 651.570198][T23199] __ia32_compat_sys_recvmmsg_time32+0xc2/0x160 [ 651.576461][T23199] ? lockdep_hardirqs_on+0x79/0x100 [ 651.581672][T23199] __do_fast_syscall_32+0x65/0xf0 [ 651.586733][T23199] do_fast_syscall_32+0x2f/0x70 [ 651.591884][T23199] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 651.598248][T23199] RIP: 0023:0xf7fbd549 [ 651.602314][T23199] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 651.621916][T23199] RSP: 002b:00000000f7f975cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 651.630426][T23199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 651.638412][T23199] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 651.646397][T23199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 651.654365][T23199] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 651.662342][T23199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 651.670498][T23199] 20:45:21 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000f0000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf0ffffff}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:21 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0xff00}) [ 651.811160][T23211] Failed to get privilege flags for destination (handle=0x0:0x0) [ 651.876811][T23214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.922034][T14838] Bluetooth: hci0: command 0x041b tx timeout 20:45:21 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 100) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffff000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000040030007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:21 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0xe0ffff}) 20:45:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x4, 0xdfa5, 0x10000, 0x1, 0x5, "0f9196d97a321deb0282505052446057687160"}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x200041, 0x115) r4 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x4, 0xdfa5, 0x10000, 0x1, 0x5, "0f9196d97a321deb0282505052446057687160"}) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) openat(r3, &(0x7f0000000080)='./file0\x00', 0x200041, 0x115) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) (async) 20:45:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffff7f}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:21 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) (async) 20:45:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000003400007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 652.207492][T23219] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:21 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x1000000}) [ 652.304328][T23226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffff9e}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700fffff00007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 652.345639][T23230] FAULT_INJECTION: forcing a failure. [ 652.345639][T23230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.370832][T23234] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffff0}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 652.399155][T23230] CPU: 0 PID: 23230 Comm: syz-executor.2 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0 [ 652.405507][T23233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.409700][T23230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.409720][T23230] Call Trace: [ 652.409730][T23230] [ 652.409742][T23230] dump_stack_lvl+0xcd/0x134 [ 652.409786][T23230] should_fail.cold+0x5/0xa [ 652.409820][T23230] _copy_from_user+0x2a/0x170 [ 652.409852][T23230] __get_compat_msghdr+0x93/0x470 [ 652.409884][T23230] ? __do_compat_sys_socketcall+0x660/0x660 [ 652.409930][T23230] get_compat_msghdr+0x87/0x120 [ 652.409966][T23230] ? __get_compat_msghdr+0x470/0x470 [ 652.409998][T23230] ? kfree+0x1ed/0x4d0 [ 652.410033][T23230] ___sys_recvmsg+0x1ea/0x200 [ 652.410066][T23230] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 652.410106][T23230] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 652.410142][T23230] ? lockdep_hardirqs_on+0x79/0x100 [ 652.410171][T23230] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 652.441867][T23238] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 652.449986][T23230] ? do_recvmmsg+0x43d/0x6d0 [ 652.450042][T23230] do_recvmmsg+0x53e/0x6d0 [ 652.450076][T23230] ? ___sys_recvmsg+0x200/0x200 [ 652.450105][T23230] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 652.450142][T23230] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 652.450174][T23230] ? find_held_lock+0x2d/0x110 [ 652.450220][T23230] ? __context_tracking_exit+0xb8/0xe0 [ 652.450257][T23230] __sys_recvmmsg+0x23e/0x250 [ 652.450290][T23230] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 652.450329][T23230] __ia32_compat_sys_recvmmsg_time32+0xc2/0x160 [ 652.561650][T23230] ? lockdep_hardirqs_on+0x79/0x100 [ 652.566882][T23230] __do_fast_syscall_32+0x65/0xf0 [ 652.571918][T23230] do_fast_syscall_32+0x2f/0x70 [ 652.576776][T23230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 652.583107][T23230] RIP: 0023:0xf7fbd549 [ 652.587173][T23230] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 652.606779][T23230] RSP: 002b:00000000f7f975cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 652.615193][T23230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 652.623159][T23230] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 652.631124][T23230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 652.639090][T23230] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 652.647054][T23230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 652.655039][T23230] 20:45:22 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x4, 0xdfa5, 0x10000, 0x1, 0x5, "0f9196d97a321deb0282505052446057687160"}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) openat(r3, &(0x7f0000000080)='./file0\x00', 0x200041, 0x115) (async) r4 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) 20:45:22 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x2000000}) 20:45:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000107000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:22 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff", @ANYRES64, @ANYRES64], 0x2c) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@ba={{}, {0x80}, @broadcast, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x3, {0x8, 0x18a}, "323d9abc36622059"}, {0x0, 0x8, {0xb, 0x9}, "2d9c6377309a4793"}], {0x0, 0x2, {0x4, 0x8}, "d845cca64f39b5a0"}}}, 0x36) 20:45:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40030000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 653.164871][T23256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.180075][T23258] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000207000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:22 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x3000000}) [ 653.207770][T23263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000307000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf0ffffffffffff}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 653.322461][T23271] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:23 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x4000000}) [ 653.474004][T23279] Failed to get privilege flags for destination (handle=0x0:0x0) [ 653.999786][T14838] Bluetooth: hci0: command 0x040f tx timeout 20:45:23 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x2, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:23 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x5000000}) 20:45:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000407000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:23 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff", @ANYRES64, @ANYRES64], 0x2c) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@ba={{}, {0x80}, @broadcast, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x3, {0x8, 0x18a}, "323d9abc36622059"}, {0x0, 0x8, {0xb, 0x9}, "2d9c6377309a4793"}], {0x0, 0x2, {0x4, 0x8}, "d845cca64f39b5a0"}}}, 0x36) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff", @ANYRES64, @ANYRES64], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@ba={{}, {0x80}, @broadcast, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x3, {0x8, 0x18a}, "323d9abc36622059"}, {0x0, 0x8, {0xb, 0x9}, "2d9c6377309a4793"}], {0x0, 0x2, {0x4, 0x8}, "d845cca64f39b5a0"}}}, 0x36) (async) 20:45:23 executing program 0: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x4, 0x7, 0x9}, {{0x0, 0x2710}, 0x1f, 0x878f, 0xc5f}, {{r0, r1/1000+10000}, 0x16, 0x100, 0x401}, {{r2, r3/1000+10000}, 0x4, 0x2, 0x1}, {{r4, r5/1000+60000}, 0x15, 0x401, 0x2}], 0x50) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x10000, 0x0) mq_timedsend(r7, &(0x7f0000000180)="fc0b3a1722504fdb1de0ad48f2ae9646b8d868782c529a8ec48b46061602f07d46f48c4ecd645dc2b628009330", 0x2d, 0x8a0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r9 = syz_open_pts(r6, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000200)=0x2) 20:45:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 654.254233][T23282] Failed to get privilege flags for destination (handle=0x0:0x0) [ 654.262066][T23287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000807000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:24 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x6000000}) [ 654.318702][T23287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x300000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 654.362534][T23294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000e07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 654.422999][T23301] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:24 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000f07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:24 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x7000000}) 20:45:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x500000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:24 executing program 3: syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff", @ANYRES64, @ANYRES64], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@ba={{}, {0x80}, @broadcast, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x3, {0x8, 0x18a}, "323d9abc36622059"}, {0x0, 0x8, {0xb, 0x9}, "2d9c6377309a4793"}], {0x0, 0x2, {0x4, 0x8}, "d845cca64f39b5a0"}}}, 0x36) 20:45:24 executing program 0: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x4, 0x7, 0x9}, {{0x0, 0x2710}, 0x1f, 0x878f, 0xc5f}, {{r0, r1/1000+10000}, 0x16, 0x100, 0x401}, {{r2, r3/1000+10000}, 0x4, 0x2, 0x1}, {{r4, r5/1000+60000}, 0x15, 0x401, 0x2}], 0x50) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x10000, 0x0) mq_timedsend(r7, &(0x7f0000000180)="fc0b3a1722504fdb1de0ad48f2ae9646b8d868782c529a8ec48b46061602f07d46f48c4ecd645dc2b628009330", 0x2d, 0x8a0, 0x0) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r9 = syz_open_pts(r6, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000200)=0x2) [ 655.160971][T23314] Failed to get privilege flags for destination (handle=0x0:0x0) [ 655.197152][T23315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x600000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000003f07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:24 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x10000000}) [ 655.204512][T23320] ptm ptm0: ldisc open failed (-12), clearing slot 0 20:45:24 executing program 0: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x4, 0x7, 0x9}, {{0x0, 0x2710}, 0x1f, 0x878f, 0xc5f}, {{r0, r1/1000+10000}, 0x16, 0x100, 0x401}, {{r2, r3/1000+10000}, 0x4, 0x2, 0x1}, {{r4, r5/1000+60000}, 0x15, 0x401, 0x2}], 0x50) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x10000, 0x0) mq_timedsend(r7, &(0x7f0000000180)="fc0b3a1722504fdb1de0ad48f2ae9646b8d868782c529a8ec48b46061602f07d46f48c4ecd645dc2b628009330", 0x2d, 0x8a0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r9 = syz_open_pts(r6, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000200)=0x2) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{}, 0x4, 0x7, 0x9}, {{0x0, 0x2710}, 0x1f, 0x878f, 0xc5f}, {{r0, r1/1000+10000}, 0x16, 0x100, 0x401}, {{r2, r3/1000+10000}, 0x4, 0x2, 0x1}, {{r4, r5/1000+60000}, 0x15, 0x401, 0x2}], 0x50) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r7, 0x0, r8, 0x0, 0x10000, 0x0) (async) mq_timedsend(r7, &(0x7f0000000180)="fc0b3a1722504fdb1de0ad48f2ae9646b8d868782c529a8ec48b46061602f07d46f48c4ecd645dc2b628009330", 0x2d, 0x8a0, 0x0) (async) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(r6, 0x0) (async) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000200)=0x2) (async) 20:45:25 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x1f000000}) [ 655.346857][T23334] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x700000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 655.447614][T23345] Failed to get privilege flags for destination (handle=0x0:0x0) [ 656.190700][ T11] device hsr_slave_0 left promiscuous mode [ 656.197374][ T11] device hsr_slave_1 left promiscuous mode [ 656.205479][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.214583][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.232487][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.250231][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.268136][ T11] device bridge_slave_1 left promiscuous mode [ 656.274655][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.292007][ T11] device bridge_slave_0 left promiscuous mode [ 656.298450][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.321275][ T11] device veth1_macvtap left promiscuous mode [ 656.327632][ T11] device veth0_macvtap left promiscuous mode [ 656.334617][ T11] device veth1_vlan left promiscuous mode [ 656.340670][ T11] device veth0_vlan left promiscuous mode 20:45:26 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000006007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) write(r2, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(r2, 0x407, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) r5 = syz_open_pts(r4, 0x50c0c0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) 20:45:26 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x20000000}) [ 656.654420][T23353] Failed to get privilege flags for destination (handle=0x0:0x0) [ 656.704781][ T11] team0 (unregistering): Port device team_slave_1 removed [ 656.729485][ T11] team0 (unregistering): Port device team_slave_0 removed [ 656.746077][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.764187][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.849473][ T11] bond0 (unregistering): Released all slaves [ 660.879825][ T3640] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 663.303605][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 663.313268][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 663.321348][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 663.329669][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 663.337173][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 663.344494][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 663.428691][T23365] chnl_net:caif_netlink_parms(): no params data found [ 663.474601][T23365] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.481935][T23365] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.490515][T23365] device bridge_slave_0 entered promiscuous mode [ 663.498854][T23365] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.506271][T23365] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.514175][T23365] device bridge_slave_1 entered promiscuous mode [ 663.537392][T23365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.548564][T23365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.577434][T23365] team0: Port device team_slave_0 added [ 663.585107][T23365] team0: Port device team_slave_1 added [ 663.605562][T23365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.613454][T23365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.639455][T23365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.651418][T23365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.658372][T23365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.685288][T23365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.718037][T23365] device hsr_slave_0 entered promiscuous mode [ 663.725156][T23365] device hsr_slave_1 entered promiscuous mode [ 663.798158][T23365] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.805320][T23365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.812726][T23365] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.819863][T23365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.870737][T23365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.885538][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 663.895182][ T3685] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.903674][ T3685] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.913038][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 663.927844][T23365] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.943153][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 663.951591][T18772] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.958644][T18772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.971374][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 663.980164][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.987241][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.012475][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 664.021941][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 664.030905][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 664.042629][T23365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.054266][T23365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 664.067798][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 664.075869][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 664.097642][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 664.105161][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 664.119956][T23365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.136837][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 664.158471][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 664.166670][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 664.174892][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 664.184954][T23365] device veth0_vlan entered promiscuous mode [ 664.200229][T23365] device veth1_vlan entered promiscuous mode [ 664.221272][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 664.229275][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 664.237776][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 664.249691][T23365] device veth0_macvtap entered promiscuous mode [ 664.258707][T23365] device veth1_macvtap entered promiscuous mode [ 664.278497][T23365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 664.289921][T23365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.299827][T23365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 664.310372][T23365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.320486][T23365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 664.331107][T23365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.341273][T23365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 664.351759][T23365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.361705][T23365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 664.372245][T23365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.386788][T23365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.396969][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 664.407575][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 664.418773][T23365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 664.429378][T23365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.440801][T23365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 664.451449][T23365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.461414][T23365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 664.472365][T23365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.482939][T23365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 664.496346][T23365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.506399][T23365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 664.517117][T23365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.531363][T23365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.540462][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 664.548976][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 664.613959][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.622367][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.645219][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 664.665414][ T9488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.673636][ T9488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.684558][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 664.735504][T23371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.740530][T23372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:34 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x48000000}) 20:45:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700ffffff9e07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:34 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x5, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) write(r2, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(r2, 0x407, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) r5 = syz_open_pts(r4, 0x50c0c0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) pipe(&(0x7f0000000080)) (async) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) (async) write(r2, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(r2, 0x407, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) (async) syz_open_pts(r4, 0x50c0c0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) (async) 20:45:34 executing program 3: r0 = openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x10000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000980)={{}, "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"}) r1 = syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x125e, 0xffffffffffffffff) r2 = getpid() r3 = getpid() r4 = syz_clone(0x230800, &(0x7f0000000380)="2998a8ddfc38bab94ff1056ff74f2c9eb6ce40d98cebec9ddaee2975ccdb7afe2652684e8693cfca1957c781bd17e1be4592ff80c125bc6fa776a878b8c6bc3af1c53daec65a56ed77e09f303d89161730921d9d80edad530beb3a", 0x5b, &(0x7f0000000300), &(0x7f0000000400), &(0x7f0000000440)="c68344be9815b21b6dc498aff7") r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001380)='cmdline\x00') bind$pptp(r5, 0x0, 0x0) r6 = syz_clone(0x20000000, &(0x7f00000009c0)="5599e152aef1cb1b0a914d2d938dd5b4012da16f41c1c313b6230498b2d8ad11f2fe59385be5d45c4d23c242b0134dee76cbd3040c537ad848f07561e44f630fa50d1bb4fa54c32c96af0556f69a5bec046578946a8ca9980754359d614b23cf58949437d58193256bec7783ded9", 0x6e, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="2e09f87f0ccf3d3777118ebad1ca79b41ad01bd62cc1cbb0960bb46fa34550d6a4a21d33653b707c41679f95bc1fb69cc27da050bb973989ffac31e7415e48765349c5ae52167b4e5fba37ae5d07d0b9c82059f2b465d204845e851094c78ec2bb07ed741eaaf2eca4a9edefcf35e585b6c45180861fbe22dbdff984ca88c9a23cce315ffb50f5c4626a6c1f94dfbbf8dcc49e869372503cd89f55c756b424a6716656eb57fafce09d09c273544575b7951c1de677a0a0") fstat(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, r8, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000cc0)={0x0, 0x0}) fstat(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_clone(0x50260000, &(0x7f0000000d80)="a271b3ee4b7b3305f62f3302924a0f16c00693d7cdf3ef684fb077ebecb83b8c4bf6470c8834ff463483169222a0a7eb08805cae2714ce7dfb1cfce780ddb1438a86daef86326bf1cbc66c8539eb46490fc91e676d3af3e4695d2ba8a2259fb67c67e1a8a8c991d0ffd910949cebfe604304d3d9bfe74315f80b1c7d87c0bf095d564f1792271864be5e63d8c0ba2789ea089bc5052ad23a8f6c3c4aef1f958d923d1ab9f3cc1c839bcb5dc3ccef80f8b9ab499e5c0e4a0750b1b976edd60f72723fde7dc29ed28ce248750ed381f216a0c1466cac", 0xd5, &(0x7f00000001c0), &(0x7f0000000ec0), &(0x7f0000000f00)="b3da104708d20eefd1a9575fec514f30c1e92e2de6ffd3a8d671f01b528e776a6b18390a7c4ba047dc899b1d9d141c5fcb471d20132abb41f71330067c158517aab0001103273cca835289cd2e8d1a0a") sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0xc, &(0x7f0000000980)=[{&(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="8447a112fb20dc0c00128008000a0099eb65543f98e77ec39817b496a421d1405d50000bb2db19f91827bbe73ce2d4319c68fa1cfa5520ca98b2d3f05ffd57b9eb8a4e", @ANYRES32=r2, @ANYBLOB="0c004f80add60bb304004a007de8e60769222c70a3a49886fc79ccffc8f23370ce06f3378ccd86a6a96c8e08ca3e5c32736dc664a5f2a0e695126ece674cba436def21a2b63f8522713f25d53a872223862a6799602238970e073c4a2b8ac98897fd89184f5269eb3e1bccaabe7a4cdb27d84973511f3d"], 0x2a4}, {&(0x7f0000000480)={0x374, 0x2f, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1e5, 0x22, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x18, 0x0, 0x0, @pid=r3}, @generic="db16d4b801ca3f3677c9b737c71b4c6601681710b5d873b314f4b5a45d8c50fd63544b0fd053cddc587bad5555b35634380cb7459081d3f17e64c20a5b933a50cb77b9aff1a0f10739a43ceb4fa137d50288daa52feacba722da121e70f66a5e38204f5e19cf532521cf06657972a2a2d1780b55696bc1cbc92eec9db1d5d199eefd1bdd600b021bc7dc5bd11adabb268d70834cbba19aa4f993bf5a5a33ddb713844571c44b8e15ca1a8b3c9306552389637c9846e181f8c24cd0b7a4cf58f99417dc227d836e04a422b7829ef32717fc584da7aa6f0e2980d02722a35c0cd650e25048cd76f92e23918aa1a0b20c30efc75a", @generic="ffda35ca90250ce12d7150ffc7512c598a5ac097de77c64bd458e683e84d66eb92f0b80658540fae6466e47bf2819e6b4902352042eacb194a39e9c8cf7ee29e0f3db9063e47bcd939435616fdd72a50e48774d7b4728e2892adc3f6f631956574c1ebf1745c89d872569e2f7ae6adb3316db91dfbef7696df10022eef1c51bb0550917f3247cda8019b52b00b63089b1daf6969c4f51315408e201c65daabeb0faff2d28fe3a2d8616df7b6d46d2cf136523ababe1a9b2b9e5aa0f98baf94f1bb31b962a088b560061e15bdd34a9e3a180dc549f27a2432d72238f1494f"]}, @typed={0x8, 0x65, 0x0, 0x0, @pid=r4}, @nested={0x170, 0x5e, 0x0, 0x1, [@generic="206745616fc1597cc79343644e3ebf6f1f975dcc3ed587fa24dd3aa809f59ce4db8d9b132b731f884e660c06dacb567b9df248542fbedf84daae63f5d25c0457f898582d4cd82f100689d77bef57a47ee716dd01c0c81afa5802d79721133db55f05e23cb2e7a350f5ccc61f53cfa95a9260aeef52162327503350ffe603585c31700a5829604ccc3f8045cba3e4ca22014adb74dd97bd9efd00869b375195d38767ba9bfd565a9e99d22103c8bf5871977a71fe3180c4458f6683ec1c72", @typed={0x8, 0x36, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="a7db5747db917749dfb622b1f55cbf9f0b7353a63d3c734a0ed1ec75a53745c4eacd5e62bc84e4ea0b02f0ace515e28dc654f1e2f738e9dc3c24efb237de9c08239c66a45a8d72c7007d0b33cc205d7f5d51630b86916134683351a5e120ecc9630273c89e02471bfb2a03fc0b61bcef5fdd3ac88b47b7f6304d9370b809b789655276283c4fc5f0168c056a0ca9608338a85d330896c3fcf45587a2841bd9d20f6f", @typed={0x4, 0x6b}]}, @typed={0x4, 0x29}]}, 0x374}, {&(0x7f0000000800)={0x140, 0x12, 0x800, 0x70bd2b, 0x25dfdbff, "", [@generic="038d787a8d75bb0b124c184f9d59ab71b6067e15d1071fc93a88d70990d79a1444daa243b32153b5840ee22ba9", @nested={0xfe, 0x57, 0x0, 0x1, [@generic="6f72a3faccb6ee381109757e15ff36fa6ec763cfad12a064cb84b424d36a7ddbcc0904ad96a0a5a7133775f7b9ab01f8939728e05754cee0d65769973c3922576a82146c519b087369939da42ee22115875d911bb0f98fe7473161b4b46388c0c2b2f3063758dbe9806304021df76af003d3a0762a1fcfc7c23782b81659337bda44297cc8f8e105e632bb02bba0379d5f7d3e69f7666e239abf", @typed={0x8, 0x27, 0x0, 0x0, @fd=r5}, @generic="618d5d8adc23508a1bfa86262e232f5ef3046d29c8beaba70981a19fda1d54a5", @typed={0xc, 0x3c, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x3c, 0x0, 0x0, @fd}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x140}, {&(0x7f0000000940)=ANY=[@ANYBLOB='\x00'/16], 0x10}], 0x4, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, 0xee00}}}], 0xa0, 0x4000000}, 0x40) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001c80)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="25000000000000006af508703a1d93f8fe197b3aaeb8abf342649f72d6f831a3d52773279e2f007465f9c123810692a0b208c67ff4ddd4c260d3938c60311204d3d741fb0097ec7cfbf796b9a8a610e96feb352908113fa025139c7da7a31ee585d5ccacc8a5ad63cb4d7dbafa1c1aab7a076122bf5528b35aec3244a00c0418dfffc0c045c9420d5aaebc1c3a32b0083cb9c5b883f2047650d7da42f9b298b3251702e13189cd165cb8cea8c59c6e5b25c3"]) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:45:34 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x4c000000}) [ 665.106598][T23381] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x900000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000000ec007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 665.205069][T23388] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe00000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:34 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x5d100000}) 20:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000009ce07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) (async) write(r2, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(r2, 0x407, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) (async) r5 = syz_open_pts(r4, 0x50c0c0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) [ 665.293347][T23384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf00000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700fffffff007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 665.370414][ T3685] Bluetooth: hci0: command 0x0409 tx timeout [ 665.386986][T23401] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:35 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x6, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:35 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x60000000}) 20:45:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/158}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:45:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f00000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000f0ffff07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:35 executing program 3: r0 = openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x10000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000980)={{}, "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"}) (async) r1 = syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x125e, 0xffffffffffffffff) (async) r2 = getpid() (async) r3 = getpid() r4 = syz_clone(0x230800, &(0x7f0000000380)="2998a8ddfc38bab94ff1056ff74f2c9eb6ce40d98cebec9ddaee2975ccdb7afe2652684e8693cfca1957c781bd17e1be4592ff80c125bc6fa776a878b8c6bc3af1c53daec65a56ed77e09f303d89161730921d9d80edad530beb3a", 0x5b, &(0x7f0000000300), &(0x7f0000000400), &(0x7f0000000440)="c68344be9815b21b6dc498aff7") (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001380)='cmdline\x00') bind$pptp(r5, 0x0, 0x0) r6 = syz_clone(0x20000000, &(0x7f00000009c0)="5599e152aef1cb1b0a914d2d938dd5b4012da16f41c1c313b6230498b2d8ad11f2fe59385be5d45c4d23c242b0134dee76cbd3040c537ad848f07561e44f630fa50d1bb4fa54c32c96af0556f69a5bec046578946a8ca9980754359d614b23cf58949437d58193256bec7783ded9", 0x6e, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="2e09f87f0ccf3d3777118ebad1ca79b41ad01bd62cc1cbb0960bb46fa34550d6a4a21d33653b707c41679f95bc1fb69cc27da050bb973989ffac31e7415e48765349c5ae52167b4e5fba37ae5d07d0b9c82059f2b465d204845e851094c78ec2bb07ed741eaaf2eca4a9edefcf35e585b6c45180861fbe22dbdff984ca88c9a23cce315ffb50f5c4626a6c1f94dfbbf8dcc49e869372503cd89f55c756b424a6716656eb57fafce09d09c273544575b7951c1de677a0a0") (async) fstat(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, r8, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000cc0)={0x0, 0x0}) fstat(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r11 = syz_clone(0x50260000, &(0x7f0000000d80)="a271b3ee4b7b3305f62f3302924a0f16c00693d7cdf3ef684fb077ebecb83b8c4bf6470c8834ff463483169222a0a7eb08805cae2714ce7dfb1cfce780ddb1438a86daef86326bf1cbc66c8539eb46490fc91e676d3af3e4695d2ba8a2259fb67c67e1a8a8c991d0ffd910949cebfe604304d3d9bfe74315f80b1c7d87c0bf095d564f1792271864be5e63d8c0ba2789ea089bc5052ad23a8f6c3c4aef1f958d923d1ab9f3cc1c839bcb5dc3ccef80f8b9ab499e5c0e4a0750b1b976edd60f72723fde7dc29ed28ce248750ed381f216a0c1466cac", 0xd5, &(0x7f00000001c0), &(0x7f0000000ec0), &(0x7f0000000f00)="b3da104708d20eefd1a9575fec514f30c1e92e2de6ffd3a8d671f01b528e776a6b18390a7c4ba047dc899b1d9d141c5fcb471d20132abb41f71330067c158517aab0001103273cca835289cd2e8d1a0a") sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0xc, &(0x7f0000000980)=[{&(0x7f0000001980)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="8447a112fb20dc0c00128008000a0099eb65543f98e77ec39817b496a421d1405d50000bb2db19f91827bbe73ce2d4319c68fa1cfa5520ca98b2d3f05ffd57b9eb8a4e", @ANYRES32=r2, @ANYBLOB="0c004f80add60bb304004a007de8e60769222c70a3a49886fc79ccffc8f23370ce06f3378ccd86a6a96c8e08ca3e5c32736dc664a5f2a0e695126ece674cba436def21a2b63f8522713f25d53a872223862a6799602238970e073c4a2b8ac98897fd89184f5269eb3e1bccaabe7a4cdb27d84973511f3d"], 0x2a4}, {&(0x7f0000000480)={0x374, 0x2f, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1e5, 0x22, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x18, 0x0, 0x0, @pid=r3}, @generic="db16d4b801ca3f3677c9b737c71b4c6601681710b5d873b314f4b5a45d8c50fd63544b0fd053cddc587bad5555b35634380cb7459081d3f17e64c20a5b933a50cb77b9aff1a0f10739a43ceb4fa137d50288daa52feacba722da121e70f66a5e38204f5e19cf532521cf06657972a2a2d1780b55696bc1cbc92eec9db1d5d199eefd1bdd600b021bc7dc5bd11adabb268d70834cbba19aa4f993bf5a5a33ddb713844571c44b8e15ca1a8b3c9306552389637c9846e181f8c24cd0b7a4cf58f99417dc227d836e04a422b7829ef32717fc584da7aa6f0e2980d02722a35c0cd650e25048cd76f92e23918aa1a0b20c30efc75a", @generic="ffda35ca90250ce12d7150ffc7512c598a5ac097de77c64bd458e683e84d66eb92f0b80658540fae6466e47bf2819e6b4902352042eacb194a39e9c8cf7ee29e0f3db9063e47bcd939435616fdd72a50e48774d7b4728e2892adc3f6f631956574c1ebf1745c89d872569e2f7ae6adb3316db91dfbef7696df10022eef1c51bb0550917f3247cda8019b52b00b63089b1daf6969c4f51315408e201c65daabeb0faff2d28fe3a2d8616df7b6d46d2cf136523ababe1a9b2b9e5aa0f98baf94f1bb31b962a088b560061e15bdd34a9e3a180dc549f27a2432d72238f1494f"]}, @typed={0x8, 0x65, 0x0, 0x0, @pid=r4}, @nested={0x170, 0x5e, 0x0, 0x1, [@generic="206745616fc1597cc79343644e3ebf6f1f975dcc3ed587fa24dd3aa809f59ce4db8d9b132b731f884e660c06dacb567b9df248542fbedf84daae63f5d25c0457f898582d4cd82f100689d77bef57a47ee716dd01c0c81afa5802d79721133db55f05e23cb2e7a350f5ccc61f53cfa95a9260aeef52162327503350ffe603585c31700a5829604ccc3f8045cba3e4ca22014adb74dd97bd9efd00869b375195d38767ba9bfd565a9e99d22103c8bf5871977a71fe3180c4458f6683ec1c72", @typed={0x8, 0x36, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="a7db5747db917749dfb622b1f55cbf9f0b7353a63d3c734a0ed1ec75a53745c4eacd5e62bc84e4ea0b02f0ace515e28dc654f1e2f738e9dc3c24efb237de9c08239c66a45a8d72c7007d0b33cc205d7f5d51630b86916134683351a5e120ecc9630273c89e02471bfb2a03fc0b61bcef5fdd3ac88b47b7f6304d9370b809b789655276283c4fc5f0168c056a0ca9608338a85d330896c3fcf45587a2841bd9d20f6f", @typed={0x4, 0x6b}]}, @typed={0x4, 0x29}]}, 0x374}, {&(0x7f0000000800)={0x140, 0x12, 0x800, 0x70bd2b, 0x25dfdbff, "", [@generic="038d787a8d75bb0b124c184f9d59ab71b6067e15d1071fc93a88d70990d79a1444daa243b32153b5840ee22ba9", @nested={0xfe, 0x57, 0x0, 0x1, [@generic="6f72a3faccb6ee381109757e15ff36fa6ec763cfad12a064cb84b424d36a7ddbcc0904ad96a0a5a7133775f7b9ab01f8939728e05754cee0d65769973c3922576a82146c519b087369939da42ee22115875d911bb0f98fe7473161b4b46388c0c2b2f3063758dbe9806304021df76af003d3a0762a1fcfc7c23782b81659337bda44297cc8f8e105e632bb02bba0379d5f7d3e69f7666e239abf", @typed={0x8, 0x27, 0x0, 0x0, @fd=r5}, @generic="618d5d8adc23508a1bfa86262e232f5ef3046d29c8beaba70981a19fda1d54a5", @typed={0xc, 0x3c, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x3c, 0x0, 0x0, @fd}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x140}, {&(0x7f0000000940)=ANY=[@ANYBLOB='\x00'/16], 0x10}], 0x4, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, 0xee00}}}], 0xa0, 0x4000000}, 0x40) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001c80)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="25000000000000006af508703a1d93f8fe197b3aaeb8abf342649f72d6f831a3d52773279e2f007465f9c123810692a0b208c67ff4ddd4c260d3938c60311204d3d741fb0097ec7cfbf796b9a8a610e96feb352908113fa025139c7da7a31ee585d5ccacc8a5ad63cb4d7dbafa1c1aab7a076122bf5528b35aec3244a00c0418dfffc0c045c9420d5aaebc1c3a32b0083cb9c5b883f2047650d7da42f9b298b3251702e13189cd165cb8cea8c59c6e5b25c3"]) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:45:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6000000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107007fffffff07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/158}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 666.003432][T23421] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:35 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x68000000}) [ 666.050517][T23424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9effffff00000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/158}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 666.177419][T23437] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:36 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x7, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107009effffff07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xaaaab70000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:36 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x6c000000}) 20:45:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000140)) pwritev(r2, &(0x7f0000001580)=[{}, {&(0x7f0000000100)="9916695f4a1d65d68b69599733ade9d6e793f72126669f226276ce6dae550590271b6799918d4d1e882207d5fa098b5767c124a7f49f3d7aea5771fe6627f64e3df8b4abb294b9c5f2fe6b9ca3f44388f6df30bac446fabef2accee89094992271de8db7c9ffb0129eaf585df776221a6a511c7bc0e3521a405d3201ace62a87df0e9a0dabb0374213493e40e114ea29feabf8f27d20d79a16ff103ead92c31743445b190abf44439171ae1a1bed67a987753c6b", 0xb4}, {&(0x7f0000000280)="5dd186b84d17f26f4812266d04775ea81aba8b186f9d8a1f7f1c29b77207a54c6c853eb3de7616b0ea0506533bcbf77d0db966c5994d84e54033796f60364e9d2fc8e6587064087d080c1a198e310b3b19aded09582faf1632b445ffbf9cc4de58bdfb9fba6899c357cfcaaffb6a58ed356cac423f5a51b79a2e76fa6131cce87086a7aa4b3a5da7e92596acfd33894d53419b86fb193f70387360a58db8c65199f6e8e2a722af3f4490d3c9083daf9bc59dd9328a2f4bda4e65321b42ebbfdcc7938ec5ca07bbe6c25c59a8d4a692650f0167", 0xd3}, {&(0x7f0000000040)="ec7f8e103b7f5f3fc110dfe69329fd33e720615fe6", 0x15}, {&(0x7f0000000080)="fad800ff9555754b089763e53758a275126c73c36cb9659d9542a2599f53ac09b40677c1fcec44ba219c35ac9d0ed0bf", 0x30}, {&(0x7f0000000380)="dde64327243586515d978435b8ee27fb9db584962eae7aa0bb0b39ccc46d1fc756837fe58647cb5b7a190958e4de129baa2201814d41f99a84d7090dd2d9b48c6b275818", 0x44}, {&(0x7f0000000400)="572e4b22b8019181ca8ec688a1dbb2c5d7608e522e26dc0fe55606d4fd7c21b71e7d3b86367f5aac0f1cc176ee74da70f3edb45dea940b1bc00084a13e3c86f30a4fddbfefaa1e9cdc034f8015550c8626d887f5f06fdcd2fe3c6c46e1e035dc0269cdcbadcf39dd65ea9a64bfd392124e8481009d73e40d50677265c5b00b3bbd86c5e631f4f98602de522fccf1776f164090a0485a2bb9cbacce7ee509e52b094172ee21a126250a221bcab0dcc0afacf4761a148f5bcf47d5f3fd992ae4a87b4347aaba80f75f378d1c27253c0e5f84fc5589025590893efbadf43128f1c6bde51725438b08b0b038059e9ad3edf053d1b785c93cb8", 0xf7}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="6de2ad8a368c64f652a2f3604dec64d94f56b6a80bde7eed1ccd579f98d590e18939a1ca1cc4d1a544659a0aeb8d9a8533f88db227234813a0d27b9cfb5e20b634560e2375230e1610299318b1540cc63db8a56ac59186ab8df27fec", 0x5c}], 0x9, 0x7f, 0x0) 20:45:36 executing program 3: r0 = openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x10000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000980)={{}, "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"}) (async) r1 = syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x125e, 0xffffffffffffffff) (async) r2 = getpid() (async) r3 = getpid() r4 = syz_clone(0x230800, &(0x7f0000000380)="2998a8ddfc38bab94ff1056ff74f2c9eb6ce40d98cebec9ddaee2975ccdb7afe2652684e8693cfca1957c781bd17e1be4592ff80c125bc6fa776a878b8c6bc3af1c53daec65a56ed77e09f303d89161730921d9d80edad530beb3a", 0x5b, &(0x7f0000000300), &(0x7f0000000400), &(0x7f0000000440)="c68344be9815b21b6dc498aff7") (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001380)='cmdline\x00') bind$pptp(r5, 0x0, 0x0) r6 = syz_clone(0x20000000, &(0x7f00000009c0)="5599e152aef1cb1b0a914d2d938dd5b4012da16f41c1c313b6230498b2d8ad11f2fe59385be5d45c4d23c242b0134dee76cbd3040c537ad848f07561e44f630fa50d1bb4fa54c32c96af0556f69a5bec046578946a8ca9980754359d614b23cf58949437d58193256bec7783ded9", 0x6e, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)="2e09f87f0ccf3d3777118ebad1ca79b41ad01bd62cc1cbb0960bb46fa34550d6a4a21d33653b707c41679f95bc1fb69cc27da050bb973989ffac31e7415e48765349c5ae52167b4e5fba37ae5d07d0b9c82059f2b465d204845e851094c78ec2bb07ed741eaaf2eca4a9edefcf35e585b6c45180861fbe22dbdff984ca88c9a23cce315ffb50f5c4626a6c1f94dfbbf8dcc49e869372503cd89f55c756b424a6716656eb57fafce09d09c273544575b7951c1de677a0a0") (async) fstat(r1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, r8, 0x0) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000cc0)={0x0, 0x0}) (async) fstat(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r11 = syz_clone(0x50260000, &(0x7f0000000d80)="a271b3ee4b7b3305f62f3302924a0f16c00693d7cdf3ef684fb077ebecb83b8c4bf6470c8834ff463483169222a0a7eb08805cae2714ce7dfb1cfce780ddb1438a86daef86326bf1cbc66c8539eb46490fc91e676d3af3e4695d2ba8a2259fb67c67e1a8a8c991d0ffd910949cebfe604304d3d9bfe74315f80b1c7d87c0bf095d564f1792271864be5e63d8c0ba2789ea089bc5052ad23a8f6c3c4aef1f958d923d1ab9f3cc1c839bcb5dc3ccef80f8b9ab499e5c0e4a0750b1b976edd60f72723fde7dc29ed28ce248750ed381f216a0c1466cac", 0xd5, &(0x7f00000001c0), &(0x7f0000000ec0), &(0x7f0000000f00)="b3da104708d20eefd1a9575fec514f30c1e92e2de6ffd3a8d671f01b528e776a6b18390a7c4ba047dc899b1d9d141c5fcb471d20132abb41f71330067c158517aab0001103273cca835289cd2e8d1a0a") sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0xc, &(0x7f0000000980)=[{&(0x7f0000001980)=ANY=[@ANYBLOB="a40200003e0000022dbd7000fddbdf253e587c4734e24d5d6c1882a87c1d9f88420718695bb24ebd600d12694ddb6c98a9e057a8bdabd38bab3ff667cc9375d0087a0bf439dc3735ec075edba92b1ed6778d1172d9119724080f376f14fecd5e4e31bdf8aa972c0ca225001800e5018b6dc6a68dce62823e6b6d1b723c86d059f8524a72c6d29a8654e91c67e9a30000009001078008000c0002000000fabc4c970a2a83c4351ebaf25134184a95ef7bd1bc68807c913b79222d7ddb16fd427ffd7f484c8c93f29f26dba3618d825359c1a3fad47ef7fcaedd2f494ee2c3cc6b2fcc53a3a93caff8d87aada7190185da39227e40f8f373ee05a9130666fe2921bfcc75236ac58ac4ec60ba328088e1237c34f766e09b1a66187bd60a7dca00eb718d227c5d459b298ccda26678116531f8b12c62cdf37629d5d1b01922f89cbbd791a21f170a2b650ae633dc812dc30071000837917734aa8257dd7fd438c29d913d49be4fa0c563ad30b96804fcf74ee63f37f1cebe4a846eaafc7e4eb8913c2dea5861d5a25b96bb31d19744107f368ec199d6c214ff930eae4a371d642160653c21fabda0f3d254d515cf9bcf2fb94e42b73d0436cddd8b9651b7c7e28d5791a94b5d54376b27f503b5e1a7e0673135f3a7d179ade9c7b0828e8e9cd8e6491a7d7a896a8eb5718f810c4d3427bbbee8eb647b32d2cebc6fddadc29a678486ec21def020e5bf63b3835950b084ccff730008009500", @ANYRES32=r1, @ANYBLOB="8447a112fb20dc0c00128008000a0099eb65543f98e77ec39817b496a421d1405d50000bb2db19f91827bbe73ce2d4319c68fa1cfa5520ca98b2d3f05ffd57b9eb8a4e", @ANYRES32=r2, @ANYBLOB="0c004f80add60bb304004a007de8e60769222c70a3a49886fc79ccffc8f23370ce06f3378ccd86a6a96c8e08ca3e5c32736dc664a5f2a0e695126ece674cba436def21a2b63f8522713f25d53a872223862a6799602238970e073c4a2b8ac98897fd89184f5269eb3e1bccaabe7a4cdb27d84973511f3d"], 0x2a4}, {&(0x7f0000000480)={0x374, 0x2f, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1e5, 0x22, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x18, 0x0, 0x0, @pid=r3}, @generic="db16d4b801ca3f3677c9b737c71b4c6601681710b5d873b314f4b5a45d8c50fd63544b0fd053cddc587bad5555b35634380cb7459081d3f17e64c20a5b933a50cb77b9aff1a0f10739a43ceb4fa137d50288daa52feacba722da121e70f66a5e38204f5e19cf532521cf06657972a2a2d1780b55696bc1cbc92eec9db1d5d199eefd1bdd600b021bc7dc5bd11adabb268d70834cbba19aa4f993bf5a5a33ddb713844571c44b8e15ca1a8b3c9306552389637c9846e181f8c24cd0b7a4cf58f99417dc227d836e04a422b7829ef32717fc584da7aa6f0e2980d02722a35c0cd650e25048cd76f92e23918aa1a0b20c30efc75a", @generic="ffda35ca90250ce12d7150ffc7512c598a5ac097de77c64bd458e683e84d66eb92f0b80658540fae6466e47bf2819e6b4902352042eacb194a39e9c8cf7ee29e0f3db9063e47bcd939435616fdd72a50e48774d7b4728e2892adc3f6f631956574c1ebf1745c89d872569e2f7ae6adb3316db91dfbef7696df10022eef1c51bb0550917f3247cda8019b52b00b63089b1daf6969c4f51315408e201c65daabeb0faff2d28fe3a2d8616df7b6d46d2cf136523ababe1a9b2b9e5aa0f98baf94f1bb31b962a088b560061e15bdd34a9e3a180dc549f27a2432d72238f1494f"]}, @typed={0x8, 0x65, 0x0, 0x0, @pid=r4}, @nested={0x170, 0x5e, 0x0, 0x1, [@generic="206745616fc1597cc79343644e3ebf6f1f975dcc3ed587fa24dd3aa809f59ce4db8d9b132b731f884e660c06dacb567b9df248542fbedf84daae63f5d25c0457f898582d4cd82f100689d77bef57a47ee716dd01c0c81afa5802d79721133db55f05e23cb2e7a350f5ccc61f53cfa95a9260aeef52162327503350ffe603585c31700a5829604ccc3f8045cba3e4ca22014adb74dd97bd9efd00869b375195d38767ba9bfd565a9e99d22103c8bf5871977a71fe3180c4458f6683ec1c72", @typed={0x8, 0x36, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="a7db5747db917749dfb622b1f55cbf9f0b7353a63d3c734a0ed1ec75a53745c4eacd5e62bc84e4ea0b02f0ace515e28dc654f1e2f738e9dc3c24efb237de9c08239c66a45a8d72c7007d0b33cc205d7f5d51630b86916134683351a5e120ecc9630273c89e02471bfb2a03fc0b61bcef5fdd3ac88b47b7f6304d9370b809b789655276283c4fc5f0168c056a0ca9608338a85d330896c3fcf45587a2841bd9d20f6f", @typed={0x4, 0x6b}]}, @typed={0x4, 0x29}]}, 0x374}, {&(0x7f0000000800)={0x140, 0x12, 0x800, 0x70bd2b, 0x25dfdbff, "", [@generic="038d787a8d75bb0b124c184f9d59ab71b6067e15d1071fc93a88d70990d79a1444daa243b32153b5840ee22ba9", @nested={0xfe, 0x57, 0x0, 0x1, [@generic="6f72a3faccb6ee381109757e15ff36fa6ec763cfad12a064cb84b424d36a7ddbcc0904ad96a0a5a7133775f7b9ab01f8939728e05754cee0d65769973c3922576a82146c519b087369939da42ee22115875d911bb0f98fe7473161b4b46388c0c2b2f3063758dbe9806304021df76af003d3a0762a1fcfc7c23782b81659337bda44297cc8f8e105e632bb02bba0379d5f7d3e69f7666e239abf", @typed={0x8, 0x27, 0x0, 0x0, @fd=r5}, @generic="618d5d8adc23508a1bfa86262e232f5ef3046d29c8beaba70981a19fda1d54a5", @typed={0xc, 0x3c, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x3c, 0x0, 0x0, @fd}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x140}, {&(0x7f0000000940)=ANY=[@ANYBLOB='\x00'/16], 0x10}], 0x4, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, 0xee00}}}], 0xa0, 0x4000000}, 0x40) (async) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001c80)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="25000000000000006af508703a1d93f8fe197b3aaeb8abf342649f72d6f831a3d52773279e2f007465f9c123810692a0b208c67ff4ddd4c260d3938c60311204d3d741fb0097ec7cfbf796b9a8a610e96feb352908113fa025139c7da7a31ee585d5ccacc8a5ad63cb4d7dbafa1c1aab7a076122bf5528b35aec3244a00c0418dfffc0c045c9420d5aaebc1c3a32b0083cb9c5b883f2047650d7da42f9b298b3251702e13189cd165cb8cea8c59c6e5b25c3"]) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:45:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb409000000000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) pwritev(r2, &(0x7f0000001580)=[{}, {&(0x7f0000000100)="9916695f4a1d65d68b69599733ade9d6e793f72126669f226276ce6dae550590271b6799918d4d1e882207d5fa098b5767c124a7f49f3d7aea5771fe6627f64e3df8b4abb294b9c5f2fe6b9ca3f44388f6df30bac446fabef2accee89094992271de8db7c9ffb0129eaf585df776221a6a511c7bc0e3521a405d3201ace62a87df0e9a0dabb0374213493e40e114ea29feabf8f27d20d79a16ff103ead92c31743445b190abf44439171ae1a1bed67a987753c6b", 0xb4}, {&(0x7f0000000280)="5dd186b84d17f26f4812266d04775ea81aba8b186f9d8a1f7f1c29b77207a54c6c853eb3de7616b0ea0506533bcbf77d0db966c5994d84e54033796f60364e9d2fc8e6587064087d080c1a198e310b3b19aded09582faf1632b445ffbf9cc4de58bdfb9fba6899c357cfcaaffb6a58ed356cac423f5a51b79a2e76fa6131cce87086a7aa4b3a5da7e92596acfd33894d53419b86fb193f70387360a58db8c65199f6e8e2a722af3f4490d3c9083daf9bc59dd9328a2f4bda4e65321b42ebbfdcc7938ec5ca07bbe6c25c59a8d4a692650f0167", 0xd3}, {&(0x7f0000000040)="ec7f8e103b7f5f3fc110dfe69329fd33e720615fe6", 0x15}, {&(0x7f0000000080)="fad800ff9555754b089763e53758a275126c73c36cb9659d9542a2599f53ac09b40677c1fcec44ba219c35ac9d0ed0bf", 0x30}, {&(0x7f0000000380)="dde64327243586515d978435b8ee27fb9db584962eae7aa0bb0b39ccc46d1fc756837fe58647cb5b7a190958e4de129baa2201814d41f99a84d7090dd2d9b48c6b275818", 0x44}, {&(0x7f0000000400)="572e4b22b8019181ca8ec688a1dbb2c5d7608e522e26dc0fe55606d4fd7c21b71e7d3b86367f5aac0f1cc176ee74da70f3edb45dea940b1bc00084a13e3c86f30a4fddbfefaa1e9cdc034f8015550c8626d887f5f06fdcd2fe3c6c46e1e035dc0269cdcbadcf39dd65ea9a64bfd392124e8481009d73e40d50677265c5b00b3bbd86c5e631f4f98602de522fccf1776f164090a0485a2bb9cbacce7ee509e52b094172ee21a126250a221bcab0dcc0afacf4761a148f5bcf47d5f3fd992ae4a87b4347aaba80f75f378d1c27253c0e5f84fc5589025590893efbadf43128f1c6bde51725438b08b0b038059e9ad3edf053d1b785c93cb8", 0xf7}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="6de2ad8a368c64f652a2f3604dec64d94f56b6a80bde7eed1ccd579f98d590e18939a1ca1cc4d1a544659a0aeb8d9a8533f88db227234813a0d27b9cfb5e20b634560e2375230e1610299318b1540cc63db8a56ac59186ab8df27fec", 0x5c}], 0x9, 0x7f, 0x0) 20:45:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700f0ffffff07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:36 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYRES32], 0x2c) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@ack={{}, {0x1}}, 0xa) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @from_mac=@broadcast, @broadcast}, 0x10) 20:45:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) pwritev(r2, &(0x7f0000001580)=[{}, {&(0x7f0000000100)="9916695f4a1d65d68b69599733ade9d6e793f72126669f226276ce6dae550590271b6799918d4d1e882207d5fa098b5767c124a7f49f3d7aea5771fe6627f64e3df8b4abb294b9c5f2fe6b9ca3f44388f6df30bac446fabef2accee89094992271de8db7c9ffb0129eaf585df776221a6a511c7bc0e3521a405d3201ace62a87df0e9a0dabb0374213493e40e114ea29feabf8f27d20d79a16ff103ead92c31743445b190abf44439171ae1a1bed67a987753c6b", 0xb4}, {&(0x7f0000000280)="5dd186b84d17f26f4812266d04775ea81aba8b186f9d8a1f7f1c29b77207a54c6c853eb3de7616b0ea0506533bcbf77d0db966c5994d84e54033796f60364e9d2fc8e6587064087d080c1a198e310b3b19aded09582faf1632b445ffbf9cc4de58bdfb9fba6899c357cfcaaffb6a58ed356cac423f5a51b79a2e76fa6131cce87086a7aa4b3a5da7e92596acfd33894d53419b86fb193f70387360a58db8c65199f6e8e2a722af3f4490d3c9083daf9bc59dd9328a2f4bda4e65321b42ebbfdcc7938ec5ca07bbe6c25c59a8d4a692650f0167", 0xd3}, {&(0x7f0000000040)="ec7f8e103b7f5f3fc110dfe69329fd33e720615fe6", 0x15}, {&(0x7f0000000080)="fad800ff9555754b089763e53758a275126c73c36cb9659d9542a2599f53ac09b40677c1fcec44ba219c35ac9d0ed0bf", 0x30}, {&(0x7f0000000380)="dde64327243586515d978435b8ee27fb9db584962eae7aa0bb0b39ccc46d1fc756837fe58647cb5b7a190958e4de129baa2201814d41f99a84d7090dd2d9b48c6b275818", 0x44}, {&(0x7f0000000400)="572e4b22b8019181ca8ec688a1dbb2c5d7608e522e26dc0fe55606d4fd7c21b71e7d3b86367f5aac0f1cc176ee74da70f3edb45dea940b1bc00084a13e3c86f30a4fddbfefaa1e9cdc034f8015550c8626d887f5f06fdcd2fe3c6c46e1e035dc0269cdcbadcf39dd65ea9a64bfd392124e8481009d73e40d50677265c5b00b3bbd86c5e631f4f98602de522fccf1776f164090a0485a2bb9cbacce7ee509e52b094172ee21a126250a221bcab0dcc0afacf4761a148f5bcf47d5f3fd992ae4a87b4347aaba80f75f378d1c27253c0e5f84fc5589025590893efbadf43128f1c6bde51725438b08b0b038059e9ad3edf053d1b785c93cb8", 0xf7}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="6de2ad8a368c64f652a2f3604dec64d94f56b6a80bde7eed1ccd579f98d590e18939a1ca1cc4d1a544659a0aeb8d9a8533f88db227234813a0d27b9cfb5e20b634560e2375230e1610299318b1540cc63db8a56ac59186ab8df27fec", 0x5c}], 0x9, 0x7f, 0x0) [ 666.967495][T23456] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:36 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x74000000}) [ 667.135106][T23473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.140257][T23474] Failed to get privilege flags for destination (handle=0x0:0x0) [ 667.189254][T23477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.206467][T23473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.449858][ T3685] Bluetooth: hci0: command 0x041b tx timeout 20:45:37 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x8, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf0ffffff00000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000001000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x5, 0x8005, 0x26, 0x5, 0x92, "80000009d6ddc1517605c8ff32ff00"}) r2 = syz_open_pts(r0, 0x0) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080), 0x121000, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) 20:45:37 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x7a000000}) 20:45:37 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYRES32], 0x2c) (async) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@ack={{}, {0x1}}, 0xa) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @from_mac=@broadcast, @broadcast}, 0x10) (rerun: 64) 20:45:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffff7f00000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x5, 0x8005, 0x26, 0x5, 0x92, "80000009d6ddc1517605c8ff32ff00"}) (async) r2 = syz_open_pts(r0, 0x0) (async) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080), 0x121000, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) 20:45:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000002000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 667.857816][T23485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.881391][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.893637][T23489] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:37 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0xdd040000}) 20:45:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 667.975809][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x5, 0x8005, 0x26, 0x5, 0x92, "80000009d6ddc1517605c8ff32ff00"}) r2 = syz_open_pts(r0, 0x0) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080), 0x121000, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x5, 0x8005, 0x26, 0x5, 0x92, "80000009d6ddc1517605c8ff32ff00"}) (async) syz_open_pts(r0, 0x0) (async) openat$dlm_plock(0xffffff9c, &(0x7f0000000080), 0x121000, 0x0) (async) ioctl$TCFLSH(r3, 0x540b, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) (async) [ 668.028917][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.059816][T23505] Failed to get privilege flags for destination (handle=0x0:0x0) [ 668.074988][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.134421][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.142404][T23508] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 668.152284][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.174703][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.195838][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.208548][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.209476][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.220566][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.240406][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.249134][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.261855][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.269045][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.274013][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.291044][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.294814][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.309081][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.314617][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.335253][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.346780][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.347835][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.358465][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.375673][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.380295][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.402779][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.406486][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.415996][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.431585][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.434168][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.453657][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.454307][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.465097][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.482597][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.488925][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.504901][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.508746][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.516371][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.534194][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.535819][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.554883][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.555353][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.575275][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.580063][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.586930][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.607107][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.627129][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.627246][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.638772][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.657517][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.659489][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.675339][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.681796][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:38 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x9, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000003000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff000}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:45:38 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0xfdfdffff}) 20:45:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x408800) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 668.699021][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.700242][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.710564][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.730119][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.742346][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.754301][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.776819][T23522] Failed to get privilege flags for destination (handle=0x0:0x0) [ 668.809459][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.856043][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.893958][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.908171][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.926764][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.928737][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.940366][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:38 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYRES32], 0x2c) (async) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@ack={{}, {0x1}}, 0xa) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @from_mac=@broadcast, @broadcast}, 0x10) 20:45:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0x3}]}]}, 0x30}}, 0x0) 20:45:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000004000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x408800) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:45:38 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0xff000000}) [ 668.955594][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.957591][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.975141][T23487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.980757][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.996511][T23486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x408800) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(r0, 0x408800) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) 20:45:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0x14}]}]}, 0x30}}, 0x0) [ 669.040961][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 669.055807][T23535] Failed to get privilege flags for destination (handle=0x0:0x0) [ 669.136508][T23538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.147343][T23539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.179109][T23544] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 669.198483][T23540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.519955][T14838] Bluetooth: hci0: command 0x040f tx timeout 20:45:39 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xa, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000008000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:39 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0xffffe000}) 20:45:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0x18}]}]}, 0x30}}, 0x0) 20:45:39 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x1, 0x77, 0x80, 0x0, 0xfe, "00000000000000000000000000ddc1557600"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000000), 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r4, 0x10e, 0x0, 0x0, &(0x7f0000000140)) splice(r4, 0x0, r3, 0x0, 0x10000, 0x0) r5 = syz_open_pts(r1, 0x80202) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) 20:45:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000000)=ANY=[], 0x2c) 20:45:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000e000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x2}]}]}, 0x30}}, 0x0) [ 669.761920][T23551] Failed to get privilege flags for destination (handle=0x0:0x0) [ 669.766837][T23553] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 669.801375][T23557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:39 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x1, 0x77, 0x80, 0x0, 0xfe, "00000000000000000000000000ddc1557600"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000000), 0x2, 0x0) (async) r3 = socket$pptp(0x18, 0x1, 0x2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r4, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) splice(r4, 0x0, r3, 0x0, 0x10000, 0x0) r5 = syz_open_pts(r1, 0x80202) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) 20:45:39 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0xfffffdfd}) 20:45:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000f000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x5}]}]}, 0x30}}, 0x0) [ 669.914438][T23564] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 669.931791][T23566] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:40 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xb, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000060000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:40 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = signalfd(r0, &(0x7f00000000c0)={[0x21]}, 0x8) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@my=0x0}, 0x1, 0x9b005b04989d20eb, 0x6}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000001c0)={&(0x7f0000000780)=[0x2, 0x1, 0xffffff0f, 0x5f8a, 0xff, 0x6, 0x5, 0x1, 0x7, 0x5, 0x200, 0xc000, 0x81a, 0xffffa48a, 0x1ff, 0x85, 0x101, 0x3, 0x4, 0x1, 0x1000000, 0xb76f, 0x80, 0x0, 0x5, 0x1, 0x4, 0x20, 0x401, 0x8, 0x5, 0xd1, 0x8, 0x8000, 0x1, 0xd9ce, 0xfffffffb, 0x9, 0x200, 0x172, 0x101, 0x400, 0xbca, 0xd98b, 0x5, 0xb56, 0x4, 0x2, 0x1, 0x4, 0xffffffff, 0x80, 0x4f9, 0x1, 0x4f, 0x80000000, 0x8001, 0x20, 0x8001, 0xffffd647, 0x1, 0x1, 0x3, 0xd48, 0x7fffffff, 0x9, 0x1, 0xb73, 0x6, 0x5, 0x9, 0x9, 0x2, 0x6, 0x7fff, 0x400, 0x7, 0x37, 0x4, 0x3, 0x0, 0x7, 0x7fffffff, 0x0, 0x2, 0x5, 0x9, 0x102e5587, 0x7, 0x4, 0x10001, 0x8, 0x6, 0x4, 0x1, 0x35ef, 0x5, 0x2, 0x80000000, 0x3, 0x5, 0x4, 0x7, 0x5, 0x9, 0x30dac804, 0x81, 0x2, 0xfffffff9, 0x0, 0xff, 0x3, 0x4, 0x5a8, 0x2, 0x6, 0x9, 0x800, 0x40, 0xcbd2, 0x53, 0x1, 0x3, 0x7, 0x0, 0x2, 0x800, 0x2, 0x9, 0x8001, 0x3f, 0x5, 0x7, 0x3, 0x4, 0x0, 0xb9, 0x6, 0xffffff13, 0xf80f, 0x8, 0x1000, 0x885, 0xffff0b58, 0x8001, 0x9, 0x101, 0x0, 0x5, 0x401, 0x5, 0x100, 0x2, 0x3f, 0x4, 0xc1, 0x401, 0xf0, 0x574, 0x80, 0x1, 0x3ff, 0x8000, 0x2, 0x1f, 0x2, 0x1, 0x80000001, 0xdaf, 0x6, 0x100, 0x10000, 0x200, 0x317, 0x0, 0x0, 0x9, 0x20, 0x1000, 0x6, 0x2, 0x1, 0x6, 0x400, 0x8, 0xfffffffe, 0x7, 0x3, 0xb3, 0x2, 0x8001, 0x3, 0xffff7fff, 0x40, 0x0, 0x30eb, 0xfff, 0x0, 0x4, 0x3, 0xfff, 0x0, 0x56e, 0x64, 0x800, 0x5, 0x7, 0x131, 0x5, 0x20, 0x2777cc65, 0x7ff, 0x4, 0x1, 0x3, 0x81, 0x401, 0x1, 0x8, 0xffffffe1, 0x2, 0x90c9, 0x8, 0xffff7fff, 0x9, 0x4, 0x6, 0x1, 0x9a, 0x9, 0x7, 0x3, 0x3, 0xc3, 0xe7, 0x5, 0x2, 0x1000000, 0x3ff, 0x0, 0xfffffff7, 0x8001, 0x0, 0x800, 0xd783, 0x40, 0x1000, 0x5, 0xffffff00, 0x0, 0x0, 0x3, 0x9, 0x5, 0x3, 0x1, 0x2, 0x9, 0x5, 0x8, 0x7, 0x6, 0x200, 0xbf, 0x80000000, 0x7fffffff, 0x200, 0x2, 0x800, 0xcf, 0xff, 0x4, 0x4, 0x3f, 0x7f, 0x4, 0x80000000, 0x9, 0x8, 0x8000, 0x43, 0x3, 0xba0, 0xac09, 0x5, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x5, 0x7ff, 0x0, 0x6, 0x10000, 0xffff, 0x6aa9c1b7, 0x9, 0x3, 0xa8d9, 0x0, 0x7, 0x20000000, 0x1, 0x101, 0x80000000, 0x8, 0x1, 0x4, 0x69, 0x3, 0x200, 0xfa1, 0xd6b, 0x1, 0x7, 0x3, 0x89, 0x55, 0xfff, 0x400, 0x951e, 0xac6, 0xd60a, 0xfff, 0x3, 0x2, 0x7, 0x7f, 0x1, 0x8000, 0x3, 0x401, 0xfffffffd, 0x195a, 0xc0000000, 0x66e, 0xfffffff7, 0x20, 0xfffffffb, 0xa, 0x800, 0x1f, 0x40, 0x1, 0x83, 0x7f, 0x7fff, 0x33, 0x800, 0x7f, 0x80000001, 0x101, 0x0, 0x80000001, 0x100, 0x4, 0x12c14a0f, 0x0, 0x6, 0x3f, 0x1f, 0x8001, 0x8, 0x9f4, 0xfffffffc, 0x8, 0x80, 0x7fff, 0x7, 0x7f, 0xd2, 0x30, 0x10001, 0x8, 0x1, 0x8, 0x80000001, 0x8, 0x7, 0x0, 0x0, 0xad, 0x5810f2ad, 0x3, 0x80000000, 0xab5, 0xfffffff7, 0x7ff, 0x1, 0x4, 0x8, 0xffffffff, 0x0, 0xbd, 0x9, 0x10001, 0xfdb, 0x4, 0x5, 0x20, 0x7, 0x9, 0x101, 0x7, 0x20, 0xa785fef5, 0x1, 0x400, 0x1ff, 0x4, 0x7, 0x1, 0x7, 0x10001, 0x2c, 0x5, 0x1, 0x5, 0x401, 0x7, 0x4, 0x3, 0x1ff, 0x400, 0x4, 0x7, 0x20, 0xec9, 0x1, 0x2, 0x9, 0x800, 0x0, 0x7, 0x3, 0x1000, 0x5, 0x3, 0x4, 0x1, 0x68, 0x1, 0x7, 0x4, 0x3, 0x3, 0x1ff, 0x6, 0x200, 0xa2, 0x7fff, 0x9, 0x3f, 0x5c, 0xfffffff7, 0x10001, 0x80, 0x0, 0x9, 0x0, 0xfffffffd, 0xff, 0x3f, 0x8, 0x1, 0x6b3b, 0x7fffffff, 0x6, 0x5, 0xfe000000, 0x1, 0x8, 0x4, 0x2d8ec693, 0x100, 0x7884, 0x2, 0x5, 0x3, 0xe2f0, 0x6, 0x8, 0x80000000, 0x7, 0x81, 0x80000001, 0x6, 0x7f, 0x3, 0x9, 0x80000000, 0x7, 0x3f, 0x35, 0x0, 0x0, 0x8001, 0x2, 0x7, 0x0, 0xb9ae, 0xfffffee6, 0x3, 0x3, 0x80000000, 0x1, 0x6, 0x157a, 0x80000001, 0x4, 0x8, 0x5, 0x40, 0x8, 0x1000, 0x0, 0x83, 0x5, 0x401, 0x9, 0x1, 0x8, 0xfffffff8, 0x7fffffff, 0x7136, 0x2, 0x9, 0x1ff, 0xffffffff, 0xee, 0x678, 0x0, 0x200, 0x7, 0x2, 0x7ff, 0x7, 0x4, 0x8, 0x5, 0x8001, 0x400, 0x6, 0xfffffffe, 0x5, 0x69, 0x9, 0xb3, 0x4, 0x0, 0x1, 0x9, 0x9, 0xffffffd7, 0x1000, 0xa1, 0x3, 0x57a9, 0x2, 0x3, 0x6, 0xffff, 0xfffff2d2, 0x80000001, 0x1, 0x80, 0x2ccd, 0x8, 0x6, 0xe9, 0x2, 0x3ff, 0x0, 0xfffff605, 0x8, 0x8001, 0x6, 0x800, 0x2, 0xa1e3, 0x4, 0x7, 0x3, 0x2, 0xcc2a, 0x8, 0x3, 0x7, 0x40, 0x6, 0x8000, 0xfffeffff, 0x0, 0x8, 0x3be, 0x1ff, 0x8, 0x769e, 0x40, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0x8, 0x5, 0xffffffff, 0x3ff, 0x1a2, 0x1, 0x7, 0x81, 0x6, 0x101, 0x1, 0x4, 0x80000001, 0x8, 0x3ff, 0x2, 0x35, 0x6, 0x2, 0x8000, 0x93, 0x9, 0x401, 0x0, 0x80, 0x7ff, 0x7f, 0xdd4, 0x1, 0x3, 0x1, 0xae, 0x2, 0x7, 0xbc7, 0x6, 0xe0000000, 0xff, 0x8, 0x10000, 0x4, 0xfffffff8, 0x37c0, 0xa3, 0x8, 0x8, 0x5, 0x3, 0x2, 0x80000000, 0xffffff26, 0x8, 0x2, 0x80000000, 0x6ff, 0x10000, 0x80, 0x80000001, 0xffffffff, 0x5, 0xffff7fff, 0x8, 0x34, 0x7ff, 0x9, 0x8001, 0x4, 0xd4, 0x5, 0x6, 0x3, 0xa4, 0x3f, 0x1ff, 0x8, 0x7c, 0x9, 0x1, 0x1, 0x31a, 0x80, 0x10001, 0x6, 0x0, 0x1, 0xca3, 0x80, 0x9, 0x0, 0x7, 0x8, 0x9, 0x60000, 0xff, 0xfffffffb, 0x1, 0x4, 0x2, 0x3, 0x3, 0x80, 0x8000, 0x22ca, 0x8, 0x7, 0xcd2, 0x1, 0x1, 0x3, 0x4, 0x5, 0x40, 0x4, 0x2, 0xc0, 0x8001, 0xfff, 0x8, 0xe601, 0x1, 0x7, 0x400, 0x9, 0x0, 0x1f, 0x401, 0x4, 0x9, 0x3, 0x0, 0x8, 0x40, 0xad72, 0x4, 0x423d, 0xef, 0x7, 0x6, 0xffff, 0x416e, 0x8001, 0x3, 0x7, 0x4, 0x5, 0x7f, 0xfffffffb, 0x9, 0x2, 0x7, 0x3, 0x0, 0x1fc, 0x3, 0x1000, 0x0, 0x4, 0x5, 0x4, 0x8, 0x0, 0x3f, 0xfda, 0x1, 0x8, 0xee, 0xcc, 0x0, 0x3, 0x5, 0x200, 0x0, 0xfff, 0x1000, 0x2, 0x1608, 0x6, 0x1, 0x7fffffff, 0x1000, 0x8000, 0x5f7, 0x101, 0x7f, 0x80, 0x5958, 0x9, 0x0, 0x7fffffff, 0x80000, 0x8000, 0x7, 0x100, 0x1, 0x10000, 0x2b1, 0x1, 0xfffffffd, 0x9, 0xbd9d, 0x3786, 0x0, 0x6, 0x200, 0x80, 0xfffffff9, 0xfffffffa, 0x8, 0x4, 0x101, 0xc1, 0x1, 0x6, 0x7ff, 0x61fe, 0xdd6, 0xffffff81, 0x1, 0x1f, 0xff, 0x3f, 0x9, 0x8001, 0x80000000, 0x1, 0xfffffffc, 0x2, 0x10001, 0x6, 0x9, 0x8c03, 0x10001, 0x1, 0x800, 0x4, 0x6, 0x1, 0x14b, 0xfffffffd, 0x1, 0x3, 0x0, 0x7, 0x1, 0xf7, 0x4, 0x3ff, 0x77b9, 0xc1e, 0xdf4, 0xf75, 0x4, 0x7ff, 0x8, 0x800, 0x735e5edf, 0x6, 0x578, 0x2, 0x1, 0x0, 0xab, 0x3ff, 0x1f, 0x3, 0x6, 0x10000, 0x4, 0x7fff, 0x3, 0x3f, 0x4, 0x8001, 0x1000, 0x1, 0x8, 0xffff, 0x9, 0x6, 0x7a8f, 0x3, 0x80000000, 0x4, 0xfff, 0x3, 0xfff, 0x1f, 0x5, 0x1, 0x3, 0x8, 0x8, 0x8, 0x0, 0x1000, 0x6, 0x1, 0x3e, 0x1, 0xa4f6, 0x17, 0x96, 0x10001, 0x0, 0x5, 0x2, 0x2, 0x40, 0x8f, 0x0, 0x5, 0x0, 0x8, 0x3ff, 0xb9ea, 0x7ff, 0xfffffffe, 0x7, 0xdc7, 0x7ff, 0x2, 0x2, 0xffffa108, 0x0, 0x7, 0xffffffff, 0x79, 0x7ff, 0xfffffff8, 0x3, 0x1, 0x0, 0xb6e1, 0x7c, 0x10000, 0x4, 0x3, 0x538, 0x8, 0x81, 0x10000, 0x401, 0x4, 0x5, 0x2, 0x3, 0x6, 0xe7d, 0xff, 0x101, 0x1, 0xeb, 0x0, 0x7, 0x6, 0x8, 0x7f, 0x2, 0x55, 0xb1a, 0x4, 0x7, 0x7f, 0x7f, 0xfffffff8, 0x3ff, 0xfffffffe, 0x1, 0x3f, 0xd, 0x1, 0xcb, 0x80000001, 0x5, 0x7, 0x3, 0xfffffffc, 0xfffffffe, 0x99df, 0x1, 0xe29b0, 0x9, 0x1, 0xfff, 0x4, 0x8, 0x93, 0xe50, 0x4, 0x8, 0x6, 0x4, 0x8001, 0x0, 0x4, 0x1, 0x0, 0x101, 0x7, 0x20, 0x5, 0x1, 0x3, 0x7, 0x2, 0x874, 0x8, 0xe9, 0x200, 0x0, 0x40, 0x2, 0x9, 0x4, 0x1ff, 0xff, 0x8, 0x3f], 0x5, 0x400, 0x2e}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@local}) r3 = signalfd(r1, &(0x7f0000000140)={[0xff2b, 0x7f]}, 0x8) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000180)=0x80000) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = signalfd4(r2, &(0x7f0000000240)={[0xd3, 0x1]}, 0x8, 0x800) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000280)={{@local, 0x4}, @hyper, 0x0, 0x1, 0xfffffffffffffffb, 0x7, 0x9fe3, 0x6, 0x3ff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, &(0x7f0000000140)) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x95bf9c41db2c09ee, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:45:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000000)=ANY=[], 0x2c) 20:45:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x14}]}]}, 0x30}}, 0x0) 20:45:40 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x1, 0x77, 0x80, 0x0, 0xfe, "00000000000000000000000000ddc1557600"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000000), 0x2, 0x0) (async) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r4, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) splice(r4, 0x0, r3, 0x0, 0x10000, 0x0) (async) r5 = syz_open_pts(r1, 0x80202) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) 20:45:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000f0000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x18}]}]}, 0x30}}, 0x0) [ 670.727794][T23586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x4aa200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:45:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000030007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x2001}]}]}, 0x30}}, 0x0) 20:45:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000ce090007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:41 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = signalfd(r0, &(0x7f00000000c0)={[0x21]}, 0x8) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@my=0x0}, 0x1, 0x9b005b04989d20eb, 0x6}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000001c0)={&(0x7f0000000780)=[0x2, 0x1, 0xffffff0f, 0x5f8a, 0xff, 0x6, 0x5, 0x1, 0x7, 0x5, 0x200, 0xc000, 0x81a, 0xffffa48a, 0x1ff, 0x85, 0x101, 0x3, 0x4, 0x1, 0x1000000, 0xb76f, 0x80, 0x0, 0x5, 0x1, 0x4, 0x20, 0x401, 0x8, 0x5, 0xd1, 0x8, 0x8000, 0x1, 0xd9ce, 0xfffffffb, 0x9, 0x200, 0x172, 0x101, 0x400, 0xbca, 0xd98b, 0x5, 0xb56, 0x4, 0x2, 0x1, 0x4, 0xffffffff, 0x80, 0x4f9, 0x1, 0x4f, 0x80000000, 0x8001, 0x20, 0x8001, 0xffffd647, 0x1, 0x1, 0x3, 0xd48, 0x7fffffff, 0x9, 0x1, 0xb73, 0x6, 0x5, 0x9, 0x9, 0x2, 0x6, 0x7fff, 0x400, 0x7, 0x37, 0x4, 0x3, 0x0, 0x7, 0x7fffffff, 0x0, 0x2, 0x5, 0x9, 0x102e5587, 0x7, 0x4, 0x10001, 0x8, 0x6, 0x4, 0x1, 0x35ef, 0x5, 0x2, 0x80000000, 0x3, 0x5, 0x4, 0x7, 0x5, 0x9, 0x30dac804, 0x81, 0x2, 0xfffffff9, 0x0, 0xff, 0x3, 0x4, 0x5a8, 0x2, 0x6, 0x9, 0x800, 0x40, 0xcbd2, 0x53, 0x1, 0x3, 0x7, 0x0, 0x2, 0x800, 0x2, 0x9, 0x8001, 0x3f, 0x5, 0x7, 0x3, 0x4, 0x0, 0xb9, 0x6, 0xffffff13, 0xf80f, 0x8, 0x1000, 0x885, 0xffff0b58, 0x8001, 0x9, 0x101, 0x0, 0x5, 0x401, 0x5, 0x100, 0x2, 0x3f, 0x4, 0xc1, 0x401, 0xf0, 0x574, 0x80, 0x1, 0x3ff, 0x8000, 0x2, 0x1f, 0x2, 0x1, 0x80000001, 0xdaf, 0x6, 0x100, 0x10000, 0x200, 0x317, 0x0, 0x0, 0x9, 0x20, 0x1000, 0x6, 0x2, 0x1, 0x6, 0x400, 0x8, 0xfffffffe, 0x7, 0x3, 0xb3, 0x2, 0x8001, 0x3, 0xffff7fff, 0x40, 0x0, 0x30eb, 0xfff, 0x0, 0x4, 0x3, 0xfff, 0x0, 0x56e, 0x64, 0x800, 0x5, 0x7, 0x131, 0x5, 0x20, 0x2777cc65, 0x7ff, 0x4, 0x1, 0x3, 0x81, 0x401, 0x1, 0x8, 0xffffffe1, 0x2, 0x90c9, 0x8, 0xffff7fff, 0x9, 0x4, 0x6, 0x1, 0x9a, 0x9, 0x7, 0x3, 0x3, 0xc3, 0xe7, 0x5, 0x2, 0x1000000, 0x3ff, 0x0, 0xfffffff7, 0x8001, 0x0, 0x800, 0xd783, 0x40, 0x1000, 0x5, 0xffffff00, 0x0, 0x0, 0x3, 0x9, 0x5, 0x3, 0x1, 0x2, 0x9, 0x5, 0x8, 0x7, 0x6, 0x200, 0xbf, 0x80000000, 0x7fffffff, 0x200, 0x2, 0x800, 0xcf, 0xff, 0x4, 0x4, 0x3f, 0x7f, 0x4, 0x80000000, 0x9, 0x8, 0x8000, 0x43, 0x3, 0xba0, 0xac09, 0x5, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x5, 0x7ff, 0x0, 0x6, 0x10000, 0xffff, 0x6aa9c1b7, 0x9, 0x3, 0xa8d9, 0x0, 0x7, 0x20000000, 0x1, 0x101, 0x80000000, 0x8, 0x1, 0x4, 0x69, 0x3, 0x200, 0xfa1, 0xd6b, 0x1, 0x7, 0x3, 0x89, 0x55, 0xfff, 0x400, 0x951e, 0xac6, 0xd60a, 0xfff, 0x3, 0x2, 0x7, 0x7f, 0x1, 0x8000, 0x3, 0x401, 0xfffffffd, 0x195a, 0xc0000000, 0x66e, 0xfffffff7, 0x20, 0xfffffffb, 0xa, 0x800, 0x1f, 0x40, 0x1, 0x83, 0x7f, 0x7fff, 0x33, 0x800, 0x7f, 0x80000001, 0x101, 0x0, 0x80000001, 0x100, 0x4, 0x12c14a0f, 0x0, 0x6, 0x3f, 0x1f, 0x8001, 0x8, 0x9f4, 0xfffffffc, 0x8, 0x80, 0x7fff, 0x7, 0x7f, 0xd2, 0x30, 0x10001, 0x8, 0x1, 0x8, 0x80000001, 0x8, 0x7, 0x0, 0x0, 0xad, 0x5810f2ad, 0x3, 0x80000000, 0xab5, 0xfffffff7, 0x7ff, 0x1, 0x4, 0x8, 0xffffffff, 0x0, 0xbd, 0x9, 0x10001, 0xfdb, 0x4, 0x5, 0x20, 0x7, 0x9, 0x101, 0x7, 0x20, 0xa785fef5, 0x1, 0x400, 0x1ff, 0x4, 0x7, 0x1, 0x7, 0x10001, 0x2c, 0x5, 0x1, 0x5, 0x401, 0x7, 0x4, 0x3, 0x1ff, 0x400, 0x4, 0x7, 0x20, 0xec9, 0x1, 0x2, 0x9, 0x800, 0x0, 0x7, 0x3, 0x1000, 0x5, 0x3, 0x4, 0x1, 0x68, 0x1, 0x7, 0x4, 0x3, 0x3, 0x1ff, 0x6, 0x200, 0xa2, 0x7fff, 0x9, 0x3f, 0x5c, 0xfffffff7, 0x10001, 0x80, 0x0, 0x9, 0x0, 0xfffffffd, 0xff, 0x3f, 0x8, 0x1, 0x6b3b, 0x7fffffff, 0x6, 0x5, 0xfe000000, 0x1, 0x8, 0x4, 0x2d8ec693, 0x100, 0x7884, 0x2, 0x5, 0x3, 0xe2f0, 0x6, 0x8, 0x80000000, 0x7, 0x81, 0x80000001, 0x6, 0x7f, 0x3, 0x9, 0x80000000, 0x7, 0x3f, 0x35, 0x0, 0x0, 0x8001, 0x2, 0x7, 0x0, 0xb9ae, 0xfffffee6, 0x3, 0x3, 0x80000000, 0x1, 0x6, 0x157a, 0x80000001, 0x4, 0x8, 0x5, 0x40, 0x8, 0x1000, 0x0, 0x83, 0x5, 0x401, 0x9, 0x1, 0x8, 0xfffffff8, 0x7fffffff, 0x7136, 0x2, 0x9, 0x1ff, 0xffffffff, 0xee, 0x678, 0x0, 0x200, 0x7, 0x2, 0x7ff, 0x7, 0x4, 0x8, 0x5, 0x8001, 0x400, 0x6, 0xfffffffe, 0x5, 0x69, 0x9, 0xb3, 0x4, 0x0, 0x1, 0x9, 0x9, 0xffffffd7, 0x1000, 0xa1, 0x3, 0x57a9, 0x2, 0x3, 0x6, 0xffff, 0xfffff2d2, 0x80000001, 0x1, 0x80, 0x2ccd, 0x8, 0x6, 0xe9, 0x2, 0x3ff, 0x0, 0xfffff605, 0x8, 0x8001, 0x6, 0x800, 0x2, 0xa1e3, 0x4, 0x7, 0x3, 0x2, 0xcc2a, 0x8, 0x3, 0x7, 0x40, 0x6, 0x8000, 0xfffeffff, 0x0, 0x8, 0x3be, 0x1ff, 0x8, 0x769e, 0x40, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0x8, 0x5, 0xffffffff, 0x3ff, 0x1a2, 0x1, 0x7, 0x81, 0x6, 0x101, 0x1, 0x4, 0x80000001, 0x8, 0x3ff, 0x2, 0x35, 0x6, 0x2, 0x8000, 0x93, 0x9, 0x401, 0x0, 0x80, 0x7ff, 0x7f, 0xdd4, 0x1, 0x3, 0x1, 0xae, 0x2, 0x7, 0xbc7, 0x6, 0xe0000000, 0xff, 0x8, 0x10000, 0x4, 0xfffffff8, 0x37c0, 0xa3, 0x8, 0x8, 0x5, 0x3, 0x2, 0x80000000, 0xffffff26, 0x8, 0x2, 0x80000000, 0x6ff, 0x10000, 0x80, 0x80000001, 0xffffffff, 0x5, 0xffff7fff, 0x8, 0x34, 0x7ff, 0x9, 0x8001, 0x4, 0xd4, 0x5, 0x6, 0x3, 0xa4, 0x3f, 0x1ff, 0x8, 0x7c, 0x9, 0x1, 0x1, 0x31a, 0x80, 0x10001, 0x6, 0x0, 0x1, 0xca3, 0x80, 0x9, 0x0, 0x7, 0x8, 0x9, 0x60000, 0xff, 0xfffffffb, 0x1, 0x4, 0x2, 0x3, 0x3, 0x80, 0x8000, 0x22ca, 0x8, 0x7, 0xcd2, 0x1, 0x1, 0x3, 0x4, 0x5, 0x40, 0x4, 0x2, 0xc0, 0x8001, 0xfff, 0x8, 0xe601, 0x1, 0x7, 0x400, 0x9, 0x0, 0x1f, 0x401, 0x4, 0x9, 0x3, 0x0, 0x8, 0x40, 0xad72, 0x4, 0x423d, 0xef, 0x7, 0x6, 0xffff, 0x416e, 0x8001, 0x3, 0x7, 0x4, 0x5, 0x7f, 0xfffffffb, 0x9, 0x2, 0x7, 0x3, 0x0, 0x1fc, 0x3, 0x1000, 0x0, 0x4, 0x5, 0x4, 0x8, 0x0, 0x3f, 0xfda, 0x1, 0x8, 0xee, 0xcc, 0x0, 0x3, 0x5, 0x200, 0x0, 0xfff, 0x1000, 0x2, 0x1608, 0x6, 0x1, 0x7fffffff, 0x1000, 0x8000, 0x5f7, 0x101, 0x7f, 0x80, 0x5958, 0x9, 0x0, 0x7fffffff, 0x80000, 0x8000, 0x7, 0x100, 0x1, 0x10000, 0x2b1, 0x1, 0xfffffffd, 0x9, 0xbd9d, 0x3786, 0x0, 0x6, 0x200, 0x80, 0xfffffff9, 0xfffffffa, 0x8, 0x4, 0x101, 0xc1, 0x1, 0x6, 0x7ff, 0x61fe, 0xdd6, 0xffffff81, 0x1, 0x1f, 0xff, 0x3f, 0x9, 0x8001, 0x80000000, 0x1, 0xfffffffc, 0x2, 0x10001, 0x6, 0x9, 0x8c03, 0x10001, 0x1, 0x800, 0x4, 0x6, 0x1, 0x14b, 0xfffffffd, 0x1, 0x3, 0x0, 0x7, 0x1, 0xf7, 0x4, 0x3ff, 0x77b9, 0xc1e, 0xdf4, 0xf75, 0x4, 0x7ff, 0x8, 0x800, 0x735e5edf, 0x6, 0x578, 0x2, 0x1, 0x0, 0xab, 0x3ff, 0x1f, 0x3, 0x6, 0x10000, 0x4, 0x7fff, 0x3, 0x3f, 0x4, 0x8001, 0x1000, 0x1, 0x8, 0xffff, 0x9, 0x6, 0x7a8f, 0x3, 0x80000000, 0x4, 0xfff, 0x3, 0xfff, 0x1f, 0x5, 0x1, 0x3, 0x8, 0x8, 0x8, 0x0, 0x1000, 0x6, 0x1, 0x3e, 0x1, 0xa4f6, 0x17, 0x96, 0x10001, 0x0, 0x5, 0x2, 0x2, 0x40, 0x8f, 0x0, 0x5, 0x0, 0x8, 0x3ff, 0xb9ea, 0x7ff, 0xfffffffe, 0x7, 0xdc7, 0x7ff, 0x2, 0x2, 0xffffa108, 0x0, 0x7, 0xffffffff, 0x79, 0x7ff, 0xfffffff8, 0x3, 0x1, 0x0, 0xb6e1, 0x7c, 0x10000, 0x4, 0x3, 0x538, 0x8, 0x81, 0x10000, 0x401, 0x4, 0x5, 0x2, 0x3, 0x6, 0xe7d, 0xff, 0x101, 0x1, 0xeb, 0x0, 0x7, 0x6, 0x8, 0x7f, 0x2, 0x55, 0xb1a, 0x4, 0x7, 0x7f, 0x7f, 0xfffffff8, 0x3ff, 0xfffffffe, 0x1, 0x3f, 0xd, 0x1, 0xcb, 0x80000001, 0x5, 0x7, 0x3, 0xfffffffc, 0xfffffffe, 0x99df, 0x1, 0xe29b0, 0x9, 0x1, 0xfff, 0x4, 0x8, 0x93, 0xe50, 0x4, 0x8, 0x6, 0x4, 0x8001, 0x0, 0x4, 0x1, 0x0, 0x101, 0x7, 0x20, 0x5, 0x1, 0x3, 0x7, 0x2, 0x874, 0x8, 0xe9, 0x200, 0x0, 0x40, 0x2, 0x9, 0x4, 0x1ff, 0xff, 0x8, 0x3f], 0x5, 0x400, 0x2e}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@local}) r3 = signalfd(r1, &(0x7f0000000140)={[0xff2b, 0x7f]}, 0x8) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000180)=0x80000) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = signalfd4(r2, &(0x7f0000000240)={[0xd3, 0x1]}, 0x8, 0x800) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000280)={{@local, 0x4}, @hyper, 0x0, 0x1, 0xfffffffffffffffb, 0x7, 0x9fe3, 0x6, 0x3ff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, &(0x7f0000000140)) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x95bf9c41db2c09ee, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) signalfd(r0, &(0x7f00000000c0)={[0x21]}, 0x8) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@my=0x0}, 0x1, 0x9b005b04989d20eb, 0x6}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000001c0)={&(0x7f0000000780)=[0x2, 0x1, 0xffffff0f, 0x5f8a, 0xff, 0x6, 0x5, 0x1, 0x7, 0x5, 0x200, 0xc000, 0x81a, 0xffffa48a, 0x1ff, 0x85, 0x101, 0x3, 0x4, 0x1, 0x1000000, 0xb76f, 0x80, 0x0, 0x5, 0x1, 0x4, 0x20, 0x401, 0x8, 0x5, 0xd1, 0x8, 0x8000, 0x1, 0xd9ce, 0xfffffffb, 0x9, 0x200, 0x172, 0x101, 0x400, 0xbca, 0xd98b, 0x5, 0xb56, 0x4, 0x2, 0x1, 0x4, 0xffffffff, 0x80, 0x4f9, 0x1, 0x4f, 0x80000000, 0x8001, 0x20, 0x8001, 0xffffd647, 0x1, 0x1, 0x3, 0xd48, 0x7fffffff, 0x9, 0x1, 0xb73, 0x6, 0x5, 0x9, 0x9, 0x2, 0x6, 0x7fff, 0x400, 0x7, 0x37, 0x4, 0x3, 0x0, 0x7, 0x7fffffff, 0x0, 0x2, 0x5, 0x9, 0x102e5587, 0x7, 0x4, 0x10001, 0x8, 0x6, 0x4, 0x1, 0x35ef, 0x5, 0x2, 0x80000000, 0x3, 0x5, 0x4, 0x7, 0x5, 0x9, 0x30dac804, 0x81, 0x2, 0xfffffff9, 0x0, 0xff, 0x3, 0x4, 0x5a8, 0x2, 0x6, 0x9, 0x800, 0x40, 0xcbd2, 0x53, 0x1, 0x3, 0x7, 0x0, 0x2, 0x800, 0x2, 0x9, 0x8001, 0x3f, 0x5, 0x7, 0x3, 0x4, 0x0, 0xb9, 0x6, 0xffffff13, 0xf80f, 0x8, 0x1000, 0x885, 0xffff0b58, 0x8001, 0x9, 0x101, 0x0, 0x5, 0x401, 0x5, 0x100, 0x2, 0x3f, 0x4, 0xc1, 0x401, 0xf0, 0x574, 0x80, 0x1, 0x3ff, 0x8000, 0x2, 0x1f, 0x2, 0x1, 0x80000001, 0xdaf, 0x6, 0x100, 0x10000, 0x200, 0x317, 0x0, 0x0, 0x9, 0x20, 0x1000, 0x6, 0x2, 0x1, 0x6, 0x400, 0x8, 0xfffffffe, 0x7, 0x3, 0xb3, 0x2, 0x8001, 0x3, 0xffff7fff, 0x40, 0x0, 0x30eb, 0xfff, 0x0, 0x4, 0x3, 0xfff, 0x0, 0x56e, 0x64, 0x800, 0x5, 0x7, 0x131, 0x5, 0x20, 0x2777cc65, 0x7ff, 0x4, 0x1, 0x3, 0x81, 0x401, 0x1, 0x8, 0xffffffe1, 0x2, 0x90c9, 0x8, 0xffff7fff, 0x9, 0x4, 0x6, 0x1, 0x9a, 0x9, 0x7, 0x3, 0x3, 0xc3, 0xe7, 0x5, 0x2, 0x1000000, 0x3ff, 0x0, 0xfffffff7, 0x8001, 0x0, 0x800, 0xd783, 0x40, 0x1000, 0x5, 0xffffff00, 0x0, 0x0, 0x3, 0x9, 0x5, 0x3, 0x1, 0x2, 0x9, 0x5, 0x8, 0x7, 0x6, 0x200, 0xbf, 0x80000000, 0x7fffffff, 0x200, 0x2, 0x800, 0xcf, 0xff, 0x4, 0x4, 0x3f, 0x7f, 0x4, 0x80000000, 0x9, 0x8, 0x8000, 0x43, 0x3, 0xba0, 0xac09, 0x5, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x5, 0x7ff, 0x0, 0x6, 0x10000, 0xffff, 0x6aa9c1b7, 0x9, 0x3, 0xa8d9, 0x0, 0x7, 0x20000000, 0x1, 0x101, 0x80000000, 0x8, 0x1, 0x4, 0x69, 0x3, 0x200, 0xfa1, 0xd6b, 0x1, 0x7, 0x3, 0x89, 0x55, 0xfff, 0x400, 0x951e, 0xac6, 0xd60a, 0xfff, 0x3, 0x2, 0x7, 0x7f, 0x1, 0x8000, 0x3, 0x401, 0xfffffffd, 0x195a, 0xc0000000, 0x66e, 0xfffffff7, 0x20, 0xfffffffb, 0xa, 0x800, 0x1f, 0x40, 0x1, 0x83, 0x7f, 0x7fff, 0x33, 0x800, 0x7f, 0x80000001, 0x101, 0x0, 0x80000001, 0x100, 0x4, 0x12c14a0f, 0x0, 0x6, 0x3f, 0x1f, 0x8001, 0x8, 0x9f4, 0xfffffffc, 0x8, 0x80, 0x7fff, 0x7, 0x7f, 0xd2, 0x30, 0x10001, 0x8, 0x1, 0x8, 0x80000001, 0x8, 0x7, 0x0, 0x0, 0xad, 0x5810f2ad, 0x3, 0x80000000, 0xab5, 0xfffffff7, 0x7ff, 0x1, 0x4, 0x8, 0xffffffff, 0x0, 0xbd, 0x9, 0x10001, 0xfdb, 0x4, 0x5, 0x20, 0x7, 0x9, 0x101, 0x7, 0x20, 0xa785fef5, 0x1, 0x400, 0x1ff, 0x4, 0x7, 0x1, 0x7, 0x10001, 0x2c, 0x5, 0x1, 0x5, 0x401, 0x7, 0x4, 0x3, 0x1ff, 0x400, 0x4, 0x7, 0x20, 0xec9, 0x1, 0x2, 0x9, 0x800, 0x0, 0x7, 0x3, 0x1000, 0x5, 0x3, 0x4, 0x1, 0x68, 0x1, 0x7, 0x4, 0x3, 0x3, 0x1ff, 0x6, 0x200, 0xa2, 0x7fff, 0x9, 0x3f, 0x5c, 0xfffffff7, 0x10001, 0x80, 0x0, 0x9, 0x0, 0xfffffffd, 0xff, 0x3f, 0x8, 0x1, 0x6b3b, 0x7fffffff, 0x6, 0x5, 0xfe000000, 0x1, 0x8, 0x4, 0x2d8ec693, 0x100, 0x7884, 0x2, 0x5, 0x3, 0xe2f0, 0x6, 0x8, 0x80000000, 0x7, 0x81, 0x80000001, 0x6, 0x7f, 0x3, 0x9, 0x80000000, 0x7, 0x3f, 0x35, 0x0, 0x0, 0x8001, 0x2, 0x7, 0x0, 0xb9ae, 0xfffffee6, 0x3, 0x3, 0x80000000, 0x1, 0x6, 0x157a, 0x80000001, 0x4, 0x8, 0x5, 0x40, 0x8, 0x1000, 0x0, 0x83, 0x5, 0x401, 0x9, 0x1, 0x8, 0xfffffff8, 0x7fffffff, 0x7136, 0x2, 0x9, 0x1ff, 0xffffffff, 0xee, 0x678, 0x0, 0x200, 0x7, 0x2, 0x7ff, 0x7, 0x4, 0x8, 0x5, 0x8001, 0x400, 0x6, 0xfffffffe, 0x5, 0x69, 0x9, 0xb3, 0x4, 0x0, 0x1, 0x9, 0x9, 0xffffffd7, 0x1000, 0xa1, 0x3, 0x57a9, 0x2, 0x3, 0x6, 0xffff, 0xfffff2d2, 0x80000001, 0x1, 0x80, 0x2ccd, 0x8, 0x6, 0xe9, 0x2, 0x3ff, 0x0, 0xfffff605, 0x8, 0x8001, 0x6, 0x800, 0x2, 0xa1e3, 0x4, 0x7, 0x3, 0x2, 0xcc2a, 0x8, 0x3, 0x7, 0x40, 0x6, 0x8000, 0xfffeffff, 0x0, 0x8, 0x3be, 0x1ff, 0x8, 0x769e, 0x40, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0x8, 0x5, 0xffffffff, 0x3ff, 0x1a2, 0x1, 0x7, 0x81, 0x6, 0x101, 0x1, 0x4, 0x80000001, 0x8, 0x3ff, 0x2, 0x35, 0x6, 0x2, 0x8000, 0x93, 0x9, 0x401, 0x0, 0x80, 0x7ff, 0x7f, 0xdd4, 0x1, 0x3, 0x1, 0xae, 0x2, 0x7, 0xbc7, 0x6, 0xe0000000, 0xff, 0x8, 0x10000, 0x4, 0xfffffff8, 0x37c0, 0xa3, 0x8, 0x8, 0x5, 0x3, 0x2, 0x80000000, 0xffffff26, 0x8, 0x2, 0x80000000, 0x6ff, 0x10000, 0x80, 0x80000001, 0xffffffff, 0x5, 0xffff7fff, 0x8, 0x34, 0x7ff, 0x9, 0x8001, 0x4, 0xd4, 0x5, 0x6, 0x3, 0xa4, 0x3f, 0x1ff, 0x8, 0x7c, 0x9, 0x1, 0x1, 0x31a, 0x80, 0x10001, 0x6, 0x0, 0x1, 0xca3, 0x80, 0x9, 0x0, 0x7, 0x8, 0x9, 0x60000, 0xff, 0xfffffffb, 0x1, 0x4, 0x2, 0x3, 0x3, 0x80, 0x8000, 0x22ca, 0x8, 0x7, 0xcd2, 0x1, 0x1, 0x3, 0x4, 0x5, 0x40, 0x4, 0x2, 0xc0, 0x8001, 0xfff, 0x8, 0xe601, 0x1, 0x7, 0x400, 0x9, 0x0, 0x1f, 0x401, 0x4, 0x9, 0x3, 0x0, 0x8, 0x40, 0xad72, 0x4, 0x423d, 0xef, 0x7, 0x6, 0xffff, 0x416e, 0x8001, 0x3, 0x7, 0x4, 0x5, 0x7f, 0xfffffffb, 0x9, 0x2, 0x7, 0x3, 0x0, 0x1fc, 0x3, 0x1000, 0x0, 0x4, 0x5, 0x4, 0x8, 0x0, 0x3f, 0xfda, 0x1, 0x8, 0xee, 0xcc, 0x0, 0x3, 0x5, 0x200, 0x0, 0xfff, 0x1000, 0x2, 0x1608, 0x6, 0x1, 0x7fffffff, 0x1000, 0x8000, 0x5f7, 0x101, 0x7f, 0x80, 0x5958, 0x9, 0x0, 0x7fffffff, 0x80000, 0x8000, 0x7, 0x100, 0x1, 0x10000, 0x2b1, 0x1, 0xfffffffd, 0x9, 0xbd9d, 0x3786, 0x0, 0x6, 0x200, 0x80, 0xfffffff9, 0xfffffffa, 0x8, 0x4, 0x101, 0xc1, 0x1, 0x6, 0x7ff, 0x61fe, 0xdd6, 0xffffff81, 0x1, 0x1f, 0xff, 0x3f, 0x9, 0x8001, 0x80000000, 0x1, 0xfffffffc, 0x2, 0x10001, 0x6, 0x9, 0x8c03, 0x10001, 0x1, 0x800, 0x4, 0x6, 0x1, 0x14b, 0xfffffffd, 0x1, 0x3, 0x0, 0x7, 0x1, 0xf7, 0x4, 0x3ff, 0x77b9, 0xc1e, 0xdf4, 0xf75, 0x4, 0x7ff, 0x8, 0x800, 0x735e5edf, 0x6, 0x578, 0x2, 0x1, 0x0, 0xab, 0x3ff, 0x1f, 0x3, 0x6, 0x10000, 0x4, 0x7fff, 0x3, 0x3f, 0x4, 0x8001, 0x1000, 0x1, 0x8, 0xffff, 0x9, 0x6, 0x7a8f, 0x3, 0x80000000, 0x4, 0xfff, 0x3, 0xfff, 0x1f, 0x5, 0x1, 0x3, 0x8, 0x8, 0x8, 0x0, 0x1000, 0x6, 0x1, 0x3e, 0x1, 0xa4f6, 0x17, 0x96, 0x10001, 0x0, 0x5, 0x2, 0x2, 0x40, 0x8f, 0x0, 0x5, 0x0, 0x8, 0x3ff, 0xb9ea, 0x7ff, 0xfffffffe, 0x7, 0xdc7, 0x7ff, 0x2, 0x2, 0xffffa108, 0x0, 0x7, 0xffffffff, 0x79, 0x7ff, 0xfffffff8, 0x3, 0x1, 0x0, 0xb6e1, 0x7c, 0x10000, 0x4, 0x3, 0x538, 0x8, 0x81, 0x10000, 0x401, 0x4, 0x5, 0x2, 0x3, 0x6, 0xe7d, 0xff, 0x101, 0x1, 0xeb, 0x0, 0x7, 0x6, 0x8, 0x7f, 0x2, 0x55, 0xb1a, 0x4, 0x7, 0x7f, 0x7f, 0xfffffff8, 0x3ff, 0xfffffffe, 0x1, 0x3f, 0xd, 0x1, 0xcb, 0x80000001, 0x5, 0x7, 0x3, 0xfffffffc, 0xfffffffe, 0x99df, 0x1, 0xe29b0, 0x9, 0x1, 0xfff, 0x4, 0x8, 0x93, 0xe50, 0x4, 0x8, 0x6, 0x4, 0x8001, 0x0, 0x4, 0x1, 0x0, 0x101, 0x7, 0x20, 0x5, 0x1, 0x3, 0x7, 0x2, 0x874, 0x8, 0xe9, 0x200, 0x0, 0x40, 0x2, 0x9, 0x4, 0x1ff, 0xff, 0x8, 0x3f], 0x5, 0x400, 0x2e}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@local}) (async) signalfd(r1, &(0x7f0000000140)={[0xff2b, 0x7f]}, 0x8) (async) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000180)=0x80000) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) pipe(&(0x7f0000000080)) (async) signalfd4(r2, &(0x7f0000000240)={[0xd3, 0x1]}, 0x8, 0x800) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000280)={{@local, 0x4}, @hyper, 0x0, 0x1, 0xfffffffffffffffb, 0x7, 0x9fe3, 0x6, 0x3ff}) (async) pipe(&(0x7f00000000c0)) (async) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) (async) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x95bf9c41db2c09ee, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:45:41 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xc, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x4aa200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:45:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0xf800}]}]}, 0x30}}, 0x0) 20:45:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000000e0007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000000)=ANY=[], 0x2c) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000000)=ANY=[], 0x2c) (async) [ 671.599933][ T3685] Bluetooth: hci0: command 0x0419 tx timeout 20:45:41 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) r1 = signalfd(r0, &(0x7f00000000c0)={[0x21]}, 0x8) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@my=0x0}, 0x1, 0x9b005b04989d20eb, 0x6}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000001c0)={&(0x7f0000000780)=[0x2, 0x1, 0xffffff0f, 0x5f8a, 0xff, 0x6, 0x5, 0x1, 0x7, 0x5, 0x200, 0xc000, 0x81a, 0xffffa48a, 0x1ff, 0x85, 0x101, 0x3, 0x4, 0x1, 0x1000000, 0xb76f, 0x80, 0x0, 0x5, 0x1, 0x4, 0x20, 0x401, 0x8, 0x5, 0xd1, 0x8, 0x8000, 0x1, 0xd9ce, 0xfffffffb, 0x9, 0x200, 0x172, 0x101, 0x400, 0xbca, 0xd98b, 0x5, 0xb56, 0x4, 0x2, 0x1, 0x4, 0xffffffff, 0x80, 0x4f9, 0x1, 0x4f, 0x80000000, 0x8001, 0x20, 0x8001, 0xffffd647, 0x1, 0x1, 0x3, 0xd48, 0x7fffffff, 0x9, 0x1, 0xb73, 0x6, 0x5, 0x9, 0x9, 0x2, 0x6, 0x7fff, 0x400, 0x7, 0x37, 0x4, 0x3, 0x0, 0x7, 0x7fffffff, 0x0, 0x2, 0x5, 0x9, 0x102e5587, 0x7, 0x4, 0x10001, 0x8, 0x6, 0x4, 0x1, 0x35ef, 0x5, 0x2, 0x80000000, 0x3, 0x5, 0x4, 0x7, 0x5, 0x9, 0x30dac804, 0x81, 0x2, 0xfffffff9, 0x0, 0xff, 0x3, 0x4, 0x5a8, 0x2, 0x6, 0x9, 0x800, 0x40, 0xcbd2, 0x53, 0x1, 0x3, 0x7, 0x0, 0x2, 0x800, 0x2, 0x9, 0x8001, 0x3f, 0x5, 0x7, 0x3, 0x4, 0x0, 0xb9, 0x6, 0xffffff13, 0xf80f, 0x8, 0x1000, 0x885, 0xffff0b58, 0x8001, 0x9, 0x101, 0x0, 0x5, 0x401, 0x5, 0x100, 0x2, 0x3f, 0x4, 0xc1, 0x401, 0xf0, 0x574, 0x80, 0x1, 0x3ff, 0x8000, 0x2, 0x1f, 0x2, 0x1, 0x80000001, 0xdaf, 0x6, 0x100, 0x10000, 0x200, 0x317, 0x0, 0x0, 0x9, 0x20, 0x1000, 0x6, 0x2, 0x1, 0x6, 0x400, 0x8, 0xfffffffe, 0x7, 0x3, 0xb3, 0x2, 0x8001, 0x3, 0xffff7fff, 0x40, 0x0, 0x30eb, 0xfff, 0x0, 0x4, 0x3, 0xfff, 0x0, 0x56e, 0x64, 0x800, 0x5, 0x7, 0x131, 0x5, 0x20, 0x2777cc65, 0x7ff, 0x4, 0x1, 0x3, 0x81, 0x401, 0x1, 0x8, 0xffffffe1, 0x2, 0x90c9, 0x8, 0xffff7fff, 0x9, 0x4, 0x6, 0x1, 0x9a, 0x9, 0x7, 0x3, 0x3, 0xc3, 0xe7, 0x5, 0x2, 0x1000000, 0x3ff, 0x0, 0xfffffff7, 0x8001, 0x0, 0x800, 0xd783, 0x40, 0x1000, 0x5, 0xffffff00, 0x0, 0x0, 0x3, 0x9, 0x5, 0x3, 0x1, 0x2, 0x9, 0x5, 0x8, 0x7, 0x6, 0x200, 0xbf, 0x80000000, 0x7fffffff, 0x200, 0x2, 0x800, 0xcf, 0xff, 0x4, 0x4, 0x3f, 0x7f, 0x4, 0x80000000, 0x9, 0x8, 0x8000, 0x43, 0x3, 0xba0, 0xac09, 0x5, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x5, 0x7ff, 0x0, 0x6, 0x10000, 0xffff, 0x6aa9c1b7, 0x9, 0x3, 0xa8d9, 0x0, 0x7, 0x20000000, 0x1, 0x101, 0x80000000, 0x8, 0x1, 0x4, 0x69, 0x3, 0x200, 0xfa1, 0xd6b, 0x1, 0x7, 0x3, 0x89, 0x55, 0xfff, 0x400, 0x951e, 0xac6, 0xd60a, 0xfff, 0x3, 0x2, 0x7, 0x7f, 0x1, 0x8000, 0x3, 0x401, 0xfffffffd, 0x195a, 0xc0000000, 0x66e, 0xfffffff7, 0x20, 0xfffffffb, 0xa, 0x800, 0x1f, 0x40, 0x1, 0x83, 0x7f, 0x7fff, 0x33, 0x800, 0x7f, 0x80000001, 0x101, 0x0, 0x80000001, 0x100, 0x4, 0x12c14a0f, 0x0, 0x6, 0x3f, 0x1f, 0x8001, 0x8, 0x9f4, 0xfffffffc, 0x8, 0x80, 0x7fff, 0x7, 0x7f, 0xd2, 0x30, 0x10001, 0x8, 0x1, 0x8, 0x80000001, 0x8, 0x7, 0x0, 0x0, 0xad, 0x5810f2ad, 0x3, 0x80000000, 0xab5, 0xfffffff7, 0x7ff, 0x1, 0x4, 0x8, 0xffffffff, 0x0, 0xbd, 0x9, 0x10001, 0xfdb, 0x4, 0x5, 0x20, 0x7, 0x9, 0x101, 0x7, 0x20, 0xa785fef5, 0x1, 0x400, 0x1ff, 0x4, 0x7, 0x1, 0x7, 0x10001, 0x2c, 0x5, 0x1, 0x5, 0x401, 0x7, 0x4, 0x3, 0x1ff, 0x400, 0x4, 0x7, 0x20, 0xec9, 0x1, 0x2, 0x9, 0x800, 0x0, 0x7, 0x3, 0x1000, 0x5, 0x3, 0x4, 0x1, 0x68, 0x1, 0x7, 0x4, 0x3, 0x3, 0x1ff, 0x6, 0x200, 0xa2, 0x7fff, 0x9, 0x3f, 0x5c, 0xfffffff7, 0x10001, 0x80, 0x0, 0x9, 0x0, 0xfffffffd, 0xff, 0x3f, 0x8, 0x1, 0x6b3b, 0x7fffffff, 0x6, 0x5, 0xfe000000, 0x1, 0x8, 0x4, 0x2d8ec693, 0x100, 0x7884, 0x2, 0x5, 0x3, 0xe2f0, 0x6, 0x8, 0x80000000, 0x7, 0x81, 0x80000001, 0x6, 0x7f, 0x3, 0x9, 0x80000000, 0x7, 0x3f, 0x35, 0x0, 0x0, 0x8001, 0x2, 0x7, 0x0, 0xb9ae, 0xfffffee6, 0x3, 0x3, 0x80000000, 0x1, 0x6, 0x157a, 0x80000001, 0x4, 0x8, 0x5, 0x40, 0x8, 0x1000, 0x0, 0x83, 0x5, 0x401, 0x9, 0x1, 0x8, 0xfffffff8, 0x7fffffff, 0x7136, 0x2, 0x9, 0x1ff, 0xffffffff, 0xee, 0x678, 0x0, 0x200, 0x7, 0x2, 0x7ff, 0x7, 0x4, 0x8, 0x5, 0x8001, 0x400, 0x6, 0xfffffffe, 0x5, 0x69, 0x9, 0xb3, 0x4, 0x0, 0x1, 0x9, 0x9, 0xffffffd7, 0x1000, 0xa1, 0x3, 0x57a9, 0x2, 0x3, 0x6, 0xffff, 0xfffff2d2, 0x80000001, 0x1, 0x80, 0x2ccd, 0x8, 0x6, 0xe9, 0x2, 0x3ff, 0x0, 0xfffff605, 0x8, 0x8001, 0x6, 0x800, 0x2, 0xa1e3, 0x4, 0x7, 0x3, 0x2, 0xcc2a, 0x8, 0x3, 0x7, 0x40, 0x6, 0x8000, 0xfffeffff, 0x0, 0x8, 0x3be, 0x1ff, 0x8, 0x769e, 0x40, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0x8, 0x5, 0xffffffff, 0x3ff, 0x1a2, 0x1, 0x7, 0x81, 0x6, 0x101, 0x1, 0x4, 0x80000001, 0x8, 0x3ff, 0x2, 0x35, 0x6, 0x2, 0x8000, 0x93, 0x9, 0x401, 0x0, 0x80, 0x7ff, 0x7f, 0xdd4, 0x1, 0x3, 0x1, 0xae, 0x2, 0x7, 0xbc7, 0x6, 0xe0000000, 0xff, 0x8, 0x10000, 0x4, 0xfffffff8, 0x37c0, 0xa3, 0x8, 0x8, 0x5, 0x3, 0x2, 0x80000000, 0xffffff26, 0x8, 0x2, 0x80000000, 0x6ff, 0x10000, 0x80, 0x80000001, 0xffffffff, 0x5, 0xffff7fff, 0x8, 0x34, 0x7ff, 0x9, 0x8001, 0x4, 0xd4, 0x5, 0x6, 0x3, 0xa4, 0x3f, 0x1ff, 0x8, 0x7c, 0x9, 0x1, 0x1, 0x31a, 0x80, 0x10001, 0x6, 0x0, 0x1, 0xca3, 0x80, 0x9, 0x0, 0x7, 0x8, 0x9, 0x60000, 0xff, 0xfffffffb, 0x1, 0x4, 0x2, 0x3, 0x3, 0x80, 0x8000, 0x22ca, 0x8, 0x7, 0xcd2, 0x1, 0x1, 0x3, 0x4, 0x5, 0x40, 0x4, 0x2, 0xc0, 0x8001, 0xfff, 0x8, 0xe601, 0x1, 0x7, 0x400, 0x9, 0x0, 0x1f, 0x401, 0x4, 0x9, 0x3, 0x0, 0x8, 0x40, 0xad72, 0x4, 0x423d, 0xef, 0x7, 0x6, 0xffff, 0x416e, 0x8001, 0x3, 0x7, 0x4, 0x5, 0x7f, 0xfffffffb, 0x9, 0x2, 0x7, 0x3, 0x0, 0x1fc, 0x3, 0x1000, 0x0, 0x4, 0x5, 0x4, 0x8, 0x0, 0x3f, 0xfda, 0x1, 0x8, 0xee, 0xcc, 0x0, 0x3, 0x5, 0x200, 0x0, 0xfff, 0x1000, 0x2, 0x1608, 0x6, 0x1, 0x7fffffff, 0x1000, 0x8000, 0x5f7, 0x101, 0x7f, 0x80, 0x5958, 0x9, 0x0, 0x7fffffff, 0x80000, 0x8000, 0x7, 0x100, 0x1, 0x10000, 0x2b1, 0x1, 0xfffffffd, 0x9, 0xbd9d, 0x3786, 0x0, 0x6, 0x200, 0x80, 0xfffffff9, 0xfffffffa, 0x8, 0x4, 0x101, 0xc1, 0x1, 0x6, 0x7ff, 0x61fe, 0xdd6, 0xffffff81, 0x1, 0x1f, 0xff, 0x3f, 0x9, 0x8001, 0x80000000, 0x1, 0xfffffffc, 0x2, 0x10001, 0x6, 0x9, 0x8c03, 0x10001, 0x1, 0x800, 0x4, 0x6, 0x1, 0x14b, 0xfffffffd, 0x1, 0x3, 0x0, 0x7, 0x1, 0xf7, 0x4, 0x3ff, 0x77b9, 0xc1e, 0xdf4, 0xf75, 0x4, 0x7ff, 0x8, 0x800, 0x735e5edf, 0x6, 0x578, 0x2, 0x1, 0x0, 0xab, 0x3ff, 0x1f, 0x3, 0x6, 0x10000, 0x4, 0x7fff, 0x3, 0x3f, 0x4, 0x8001, 0x1000, 0x1, 0x8, 0xffff, 0x9, 0x6, 0x7a8f, 0x3, 0x80000000, 0x4, 0xfff, 0x3, 0xfff, 0x1f, 0x5, 0x1, 0x3, 0x8, 0x8, 0x8, 0x0, 0x1000, 0x6, 0x1, 0x3e, 0x1, 0xa4f6, 0x17, 0x96, 0x10001, 0x0, 0x5, 0x2, 0x2, 0x40, 0x8f, 0x0, 0x5, 0x0, 0x8, 0x3ff, 0xb9ea, 0x7ff, 0xfffffffe, 0x7, 0xdc7, 0x7ff, 0x2, 0x2, 0xffffa108, 0x0, 0x7, 0xffffffff, 0x79, 0x7ff, 0xfffffff8, 0x3, 0x1, 0x0, 0xb6e1, 0x7c, 0x10000, 0x4, 0x3, 0x538, 0x8, 0x81, 0x10000, 0x401, 0x4, 0x5, 0x2, 0x3, 0x6, 0xe7d, 0xff, 0x101, 0x1, 0xeb, 0x0, 0x7, 0x6, 0x8, 0x7f, 0x2, 0x55, 0xb1a, 0x4, 0x7, 0x7f, 0x7f, 0xfffffff8, 0x3ff, 0xfffffffe, 0x1, 0x3f, 0xd, 0x1, 0xcb, 0x80000001, 0x5, 0x7, 0x3, 0xfffffffc, 0xfffffffe, 0x99df, 0x1, 0xe29b0, 0x9, 0x1, 0xfff, 0x4, 0x8, 0x93, 0xe50, 0x4, 0x8, 0x6, 0x4, 0x8001, 0x0, 0x4, 0x1, 0x0, 0x101, 0x7, 0x20, 0x5, 0x1, 0x3, 0x7, 0x2, 0x874, 0x8, 0xe9, 0x200, 0x0, 0x40, 0x2, 0x9, 0x4, 0x1ff, 0xff, 0x8, 0x3f], 0x5, 0x400, 0x2e}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@local}) r3 = signalfd(r1, &(0x7f0000000140)={[0xff2b, 0x7f]}, 0x8) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000180)=0x80000) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = signalfd4(r2, &(0x7f0000000240)={[0xd3, 0x1]}, 0x8, 0x800) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000280)={{@local, 0x4}, @hyper, 0x0, 0x1, 0xfffffffffffffffb, 0x7, 0x9fe3, 0x6, 0x3ff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x95bf9c41db2c09ee, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:45:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x30}}, 0x0) 20:45:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, "00000000000000000000000000ddc1517600"}) (async, rerun: 64) r1 = syz_open_pts(r0, 0x4aa200) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 671.651121][T23618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000c00e0007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:41 executing program 3: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x4, 0x4, 0x0, 'queue0\x00', 0x800}) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:45:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x30}}, 0x0) 20:45:41 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local}) r2 = socket$tipc(0x1e, 0x5, 0x0) sendfile(r0, r2, &(0x7f0000000000)=0x7fffffff, 0xfffffffe) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) [ 671.797978][T23638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.903594][T23645] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:42 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xd, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x30}}, 0x0) 20:45:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000000f0007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0, 0x3, "00000000000000000000000000ddc1517600"}) syz_open_pts(r0, 0x200a41) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) fcntl$setstatus(r0, 0x4, 0x6400) 20:45:42 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local}) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) sendfile(r0, r2, &(0x7f0000000000)=0x7fffffff, 0xfffffffe) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:45:42 executing program 3: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x4, 0x4, 0x0, 'queue0\x00', 0x800}) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:45:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000003f0007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x30}}, 0x0) [ 672.551049][T23651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.568108][T23656] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0, 0x3, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(r0, 0x200a41) (async, rerun: 32) r1 = syz_open_pts(r0, 0x0) (rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) fcntl$setstatus(r0, 0x4, 0x6400) 20:45:42 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async, rerun: 64) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local}) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x5, 0x0) sendfile(r0, r2, &(0x7f0000000000)=0x7fffffff, 0xfffffffe) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:45:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x30}}, 0x0) 20:45:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000600007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 672.677192][T23663] ptm ptm0: ldisc open failed (-12), clearing slot 0 20:45:43 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xe, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0, 0x3, "00000000000000000000000000ddc1517600"}) syz_open_pts(r0, 0x200a41) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) fcntl$setstatus(r0, 0x4, 0x6400) 20:45:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x30}}, 0x0) 20:45:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x39000, 0x0) write(r4, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(r4, 0x407, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000200)={@my=0x1, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x0, 0x0, &(0x7f0000000140)) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000001c0)={{r5}, 0x0, 0x6, 0x8000000000000000}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper, 0xfffffffe}, 0x1}) 20:45:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000ec00007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:43 executing program 3: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x4, 0x4, 0x0, 'queue0\x00', 0x800}) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x4, 0x4, 0x0, 'queue0\x00', 0x800}) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) (async) 20:45:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000009ce0007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x30}}, 0x0) 20:45:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 673.477285][T23691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.516670][T23692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x30}}, 0x0) 20:45:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000f00007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}]}]}, 0x30}}, 0x0) [ 673.706299][T23713] Failed to get privilege flags for destination (handle=0x0:0xfffffffe) 20:45:44 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000f000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}]}]}, 0x30}}, 0x0) 20:45:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:45:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x1, 0x0, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[], 0x2c) 20:45:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x39000, 0x0) write(r4, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(r4, 0x407, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000200)={@my=0x1, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x0, 0x0, &(0x7f0000000140)) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000001c0)={{r5}, 0x0, 0x6, 0x8000000000000000}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper, 0xfffffffe}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) pipe(&(0x7f0000000080)) (async) splice(r3, 0x0, r4, 0x0, 0x39000, 0x0) (async) write(r4, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(r4, 0x407, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000200)={@my=0x1, 0x2}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$netlink(r5, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000001c0)={{r5}, 0x0, 0x6, 0x8000000000000000}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper, 0xfffffffe}, 0x1}) (async) 20:45:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x60}]}]}, 0x30}}, 0x0) 20:45:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000020007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 674.428968][T23720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) (rerun: 32) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:45:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000030007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf0}]}]}, 0x30}}, 0x0) 20:45:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/114, 0x72}], 0x1) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x39000, 0x0) (async) write(r4, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(r4, 0x407, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000200)={@my=0x1, 0x2}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000001c0)={{r5}, 0x0, 0x6, 0x8000000000000000}) (async, rerun: 32) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper, 0xfffffffe}, 0x1}) (rerun: 32) 20:45:45 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000040007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x300}]}]}, 0x30}}, 0x0) 20:45:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x1, 0x0, &(0x7f0000000140)) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[], 0x2c) 20:45:45 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) r2 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000100)={&(0x7f0000000780)=[0x7, 0x3, 0x1, 0xe5e, 0x3, 0x3, 0x94c3, 0x2, 0x5, 0xfffeffff, 0x81, 0xa40, 0x81, 0x9eb, 0x7, 0x7, 0x0, 0x6, 0xffff4f2c, 0xfffffbff, 0x6, 0x154, 0x8, 0x4, 0x72e, 0x4, 0x7fffffff, 0x81051ee, 0x8dd2, 0x100, 0x5, 0x4, 0x54, 0x2, 0x2, 0x10000, 0x7, 0x8, 0x9, 0x200, 0x8, 0x5, 0x400, 0x7, 0x20, 0x2, 0x3f, 0x4, 0x1, 0xffffff68, 0x0, 0x5, 0x8, 0x6, 0x4, 0x8, 0x400, 0x1, 0x9, 0x8, 0x2e, 0x9f, 0x1000, 0x6, 0x8, 0x9, 0x9, 0x609, 0x0, 0x8, 0x6, 0x8, 0x0, 0x6, 0x0, 0x8, 0xa5, 0x3, 0x1, 0x20, 0x3, 0xffffffe0, 0x264, 0x0, 0x20, 0x3, 0x5, 0x80, 0x80000000, 0x20, 0x1, 0x8, 0xfffff526, 0x9, 0x1000, 0x5, 0x6, 0x8001, 0x4, 0x8, 0x3, 0x5fe, 0x40, 0x10001, 0x7bf, 0x3f, 0xfff, 0xfffffffe, 0x2, 0xffffffff, 0x4, 0x8, 0x7fffffff, 0x3, 0x79ba, 0x5, 0x5, 0x8, 0xffffff7f, 0x4000, 0x84, 0x8, 0xfcbb, 0xffffffff, 0x4, 0x2, 0x3, 0x8001, 0x7, 0xfffffffe, 0x81, 0x1, 0x7, 0x0, 0x6, 0x178000, 0xfffffc00, 0xffff0001, 0x40, 0xffffffff, 0xf9, 0x7, 0x400, 0xffff, 0x10001, 0x7fffffff, 0x0, 0x3, 0x3, 0x2, 0x5, 0x7fffffff, 0x401, 0x7fffffff, 0x6, 0x9, 0xf5, 0x3, 0x1, 0x5, 0x519, 0xffffffff, 0x10000, 0x62a3, 0x7fffffff, 0x1ff, 0x400, 0x7, 0xffff, 0xfffffffd, 0x7, 0x47e8, 0x0, 0x40, 0x2cbe, 0x32, 0x4646, 0x8, 0x4, 0x1000, 0x1, 0x1ff, 0x5, 0x2, 0x8, 0x1, 0x9, 0x1, 0xb8bf, 0x5, 0x9, 0x4, 0x2, 0x1, 0x2, 0x5, 0x80, 0x1, 0x1, 0x7, 0x6, 0x8, 0x4, 0x8, 0x3ff, 0x6, 0x4, 0xa6b5, 0x8, 0x3, 0xe56, 0x1, 0x1, 0x7, 0x18, 0x200, 0x3, 0xfffffffa, 0xf6b6, 0x6, 0x3, 0x1, 0x2, 0x4, 0x9, 0x200, 0x7fffffff, 0x0, 0x9, 0xa3, 0x4, 0x0, 0x40, 0x3f, 0x401, 0xffff, 0x6, 0x2, 0x1, 0x4, 0xb60, 0x5a6e, 0x3, 0x2, 0x8, 0x80000000, 0x0, 0x7fffffff, 0x1, 0x8000, 0x10001, 0x9d46, 0x7, 0x9, 0x4ff, 0x800, 0x7ff, 0x7ff, 0x9, 0x7fff, 0x101, 0x7fffffff, 0xf76, 0x3f, 0x0, 0x80, 0x1, 0x8, 0x400, 0x9, 0x2, 0x1, 0x0, 0x4f, 0x50fd, 0xb90e, 0x7, 0xf2b, 0x3ff, 0x101, 0x0, 0x3, 0x800, 0x6, 0x7ff, 0xcccc, 0x6d40, 0x401, 0x7ff, 0x9, 0x3, 0x80000000, 0x5, 0xf65, 0x9, 0x2, 0x2, 0x9, 0x2, 0x0, 0x1f, 0x8, 0x6, 0x81, 0xfffffff7, 0x491, 0x4, 0x4, 0x8, 0x80, 0x7fffffff, 0x7, 0x0, 0x8, 0xffff, 0x453, 0x2, 0x8, 0x7, 0x0, 0x4c, 0x7fffffff, 0x5, 0x20, 0x0, 0x80000001, 0x7, 0xc12, 0x4, 0x4d4b, 0x8, 0x80000000, 0x4, 0x8, 0x1, 0x8, 0x2, 0x3, 0x1, 0x9, 0x400, 0x5, 0x2, 0xfffffffb, 0x7, 0xffffffff, 0x4, 0x1f, 0x8, 0x3, 0x2ccae030, 0xffffffff, 0xdade, 0x1, 0xfe000000, 0x5, 0xceb, 0x7, 0x80000001, 0xff, 0xa5, 0x8, 0x401, 0x3ff, 0x3ff, 0x8001, 0x625, 0x1000, 0x8, 0x200, 0x2, 0x3, 0x6, 0x9, 0x9, 0x7fff, 0x5, 0x9, 0x3, 0x1ff, 0x0, 0x172851af, 0x8, 0x3, 0x20, 0x100, 0x6, 0x71380, 0x1f, 0x1, 0x5c3, 0x2, 0x7, 0x1000, 0x0, 0x8, 0x7fff, 0xe7, 0xc04, 0x3, 0x8, 0x401, 0x1, 0x1, 0x3ff, 0xe0, 0x8000, 0x3f, 0xff, 0x1, 0x1, 0x7, 0x200, 0x5bda, 0xbe, 0x2, 0x3f, 0x9, 0x7, 0x4, 0x3, 0x82, 0x3, 0xfa9e, 0x1ff, 0xffff, 0x7, 0x2, 0xffff, 0x7, 0xffff, 0x2, 0xfffffffa, 0x5, 0x5, 0x400, 0x433c7307, 0x9, 0x3, 0x8001, 0xfffffff7, 0x5, 0xfffffff7, 0x4, 0x2, 0x4, 0x1795, 0x30, 0xfffffff7, 0x40, 0xffffffff, 0x9, 0x1, 0x80000001, 0x1f, 0x4, 0x2, 0x0, 0x0, 0xe10, 0x5, 0xff, 0x1, 0x7, 0x26, 0xbc, 0x10001, 0xfffffff7, 0xef, 0x5, 0x101, 0xfffffffe, 0x80000000, 0x0, 0x3f, 0x6, 0x352ae443, 0x9, 0x4, 0x7, 0x7, 0x200, 0x0, 0x0, 0x0, 0x5, 0x80000001, 0x5, 0x80000000, 0x6, 0xc935, 0x1, 0x7f, 0x101, 0x1, 0x1, 0x1f, 0x3, 0x8, 0x9, 0xc00000, 0x3f, 0x81, 0xe2000000, 0x7fffffff, 0x5, 0xfffffffc, 0x38, 0xfff, 0x7, 0x1f, 0x7fffffff, 0x6, 0x8b, 0x40, 0x6, 0x1b5, 0xca84, 0x4, 0xffffffff, 0x5, 0x207, 0x1ff, 0xfffff288, 0x6, 0x5, 0xffffc000, 0x3, 0x9, 0x7ff, 0x9, 0x5540, 0x4c91, 0x9, 0x1, 0x1, 0x5, 0x4, 0x0, 0x4, 0x274, 0x0, 0x0, 0x10001, 0x0, 0x3, 0x9, 0x7d6, 0x40a, 0x7fff, 0x100, 0x8000, 0xa6, 0x2, 0x1f, 0xf3ee, 0x7fff, 0x60, 0x5, 0x5, 0x0, 0x9, 0x2, 0xfff, 0x8000, 0x5, 0x40, 0x469, 0xffffffe1, 0x1, 0x3, 0x4, 0x992a, 0x4, 0xd78, 0x6, 0x6, 0xfff, 0x12, 0xfffffff9, 0xfffffffc, 0x2, 0x25ccbd4b, 0x1, 0x9, 0x2, 0xff, 0xffffffff, 0x22, 0x7, 0x7fffffff, 0x3, 0x400, 0x7, 0x4, 0x4, 0x4, 0x3, 0x2, 0x9, 0x6, 0x6, 0x8f1, 0x3, 0x2, 0x7, 0x7, 0xca8, 0x7, 0x9, 0x401, 0x2, 0x8, 0x3ff, 0x4, 0x5, 0x0, 0x2, 0x101, 0x40, 0x3, 0x3, 0x6, 0x2, 0x1f, 0x3, 0x2, 0x1f, 0x80, 0x9, 0x9, 0xbd, 0x9, 0x40, 0x92, 0x200, 0x7, 0x29c5, 0x0, 0x9, 0x2, 0xf88, 0x816, 0x100, 0x7, 0x0, 0x7, 0x6, 0x4, 0x3ff, 0x62, 0xf5, 0x7, 0xff, 0x7ff, 0x8, 0x0, 0x4221bb2e, 0x4, 0x0, 0x207, 0x7, 0x4, 0x82, 0x1000, 0x0, 0xa46, 0x6, 0xe137, 0x3, 0x100, 0x8011, 0x5, 0x4, 0x0, 0xffffffff, 0x8, 0x8000, 0x10000, 0x3, 0x7, 0x4, 0x69, 0x2, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000, 0x7, 0x7, 0x0, 0x3, 0xce, 0x8, 0x20, 0x1ff, 0xa1e, 0x81, 0x41, 0x5, 0x7d5786b, 0x3, 0x5, 0x9, 0x1, 0x7b2, 0xd9, 0x1, 0x7, 0x80b, 0x81, 0x4, 0x60, 0x800, 0x7fffffff, 0x2, 0x9, 0x7, 0x6, 0x7, 0x5, 0x10001, 0xffff, 0x80000001, 0x7, 0x1, 0x3, 0x1000, 0x3ff, 0x5, 0x85, 0x1, 0xfe8c, 0x7088, 0xfff, 0x9, 0x1, 0x1, 0x4, 0x5, 0x20, 0x2, 0x101, 0xdb, 0x7, 0x800, 0x4, 0xa75, 0x0, 0x80000001, 0xffff, 0x0, 0x3ff, 0x1, 0x1, 0x8, 0xfff, 0x2, 0x6, 0x5, 0x2, 0x4, 0x8, 0xfff, 0x40, 0x8, 0x9, 0x5, 0xffffffff, 0x8, 0x587, 0x0, 0x9, 0xc7, 0x8, 0x7, 0x8, 0xfffffffe, 0x2, 0x6, 0x8, 0x7fff, 0x200, 0x4, 0x2, 0x8, 0x8, 0x10001, 0x4, 0x9, 0xef3, 0x5, 0x3, 0x8, 0xffffffe1, 0x80, 0x49, 0xfffff9ab, 0x1000, 0x348, 0x400, 0x9, 0x200, 0x9, 0xf37a, 0xe000, 0x8, 0x200, 0x3, 0x1ff, 0x7, 0x88, 0x2, 0x1, 0xc, 0xf7, 0x59, 0x1, 0x8, 0x3, 0x40, 0x3, 0x9, 0x4, 0x5b, 0x80000000, 0x0, 0x7, 0xfff, 0x1cb2, 0x2430b698, 0x7, 0x8000, 0x8, 0x8001, 0x80000001, 0x8001, 0x48, 0x3, 0xa3, 0x9, 0x3, 0x5, 0x8, 0x6, 0x8, 0x346, 0x3fc3, 0x1, 0x1, 0x0, 0x400, 0xe57, 0x200, 0x1, 0x80, 0x5, 0xfa1, 0x6, 0xffffffff, 0x4, 0x400, 0xffffffc1, 0x0, 0x0, 0x7, 0x3ff, 0x2, 0xa01, 0x58, 0xe86, 0x5, 0xffff0000, 0x1ff, 0x5, 0x6, 0x2, 0x2, 0x3c, 0x7fff, 0x4, 0x1, 0x20200000, 0x4, 0x5, 0x8001, 0x2, 0x3b, 0x9, 0x0, 0xdc, 0x8, 0x6, 0x0, 0x7, 0x9ec, 0x8, 0x3, 0x1000, 0x6, 0x0, 0x10000, 0x0, 0x7f, 0x5a, 0x2, 0x2, 0x4, 0x671b, 0x0, 0x97, 0xfff, 0x2, 0x7ff, 0xfffffffc, 0xff, 0x4, 0x3, 0x5980000, 0x943d, 0xf88, 0x2, 0xfffffffe, 0x8, 0x7, 0x4, 0x8001, 0x6, 0x97d, 0x7fffffff, 0x7fff, 0x9, 0x1, 0x1, 0x3ff, 0x8000, 0x40, 0x8, 0x200, 0x4, 0x1, 0x9, 0x9, 0x5a8c, 0x6, 0x8000, 0x6, 0xffffffff, 0xffffff8d, 0x7fff, 0x81, 0xff, 0x6, 0x6, 0x8, 0x4, 0x8, 0x10000, 0x4, 0x1f, 0x3f, 0x80000000, 0x200, 0x7, 0x7, 0xb49, 0x7, 0x5, 0x1, 0xbda, 0x98da, 0xdcf7, 0x7, 0x4, 0x3, 0x9, 0x80000000, 0x1, 0x2, 0x400, 0x9e, 0x59, 0x0, 0x2, 0x0, 0x658f, 0xd6a2, 0x62772d68, 0x5, 0x5, 0x7, 0x5, 0xff, 0x1, 0x1, 0x80, 0x8000, 0x0, 0x5, 0x7fff, 0x1ff, 0x4, 0x3, 0x4, 0x26ce, 0x20, 0x5, 0x7, 0x81, 0x1f, 0x9, 0x7ff, 0x6, 0x1, 0x7, 0x4, 0x80, 0x5f, 0x2, 0x200, 0x3, 0xff, 0x80000001], 0x6, 0x400, 0xa99}) r3 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x90000, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@hyper, 0x9b45}, 0x1, 0x2, 0x4}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:45:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x500}]}]}, 0x30}}, 0x0) 20:45:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000080007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 675.390415][T23780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.402318][T23784] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:45 executing program 0: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) sync_file_range(r0, 0x5, 0x8, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) syz_open_pts(r2, 0x141200) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000001c0)) r4 = syz_open_pts(r1, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000300)={0x5, 0xe, 0xafc, 0x80, 0x43, 0xa1e, &(0x7f0000000280)="fb3ff81d5b2859182ba11e738f010def14d2154564fd21aed450a4b3d42ba5d82e83bfe1fc1e1a86b3259fa36ec1807559257b93e0680722fb35a02d021a1a54846bde"}) r5 = openat$damon_monitor_on(0xffffff9c, &(0x7f0000000040), 0x2400, 0x41) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, &(0x7f0000000100)={{r5}, 0x7, &(0x7f0000000080)=[0x9, 0xfff, 0xf184, 0x2, 0x3, 0x0, 0x1000], 0x7, 0x2, 0x1}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r6, 0x10e, 0x0, 0x0, &(0x7f0000000140)) ftruncate(r6, 0xff) 20:45:45 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) r2 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000100)={&(0x7f0000000780)=[0x7, 0x3, 0x1, 0xe5e, 0x3, 0x3, 0x94c3, 0x2, 0x5, 0xfffeffff, 0x81, 0xa40, 0x81, 0x9eb, 0x7, 0x7, 0x0, 0x6, 0xffff4f2c, 0xfffffbff, 0x6, 0x154, 0x8, 0x4, 0x72e, 0x4, 0x7fffffff, 0x81051ee, 0x8dd2, 0x100, 0x5, 0x4, 0x54, 0x2, 0x2, 0x10000, 0x7, 0x8, 0x9, 0x200, 0x8, 0x5, 0x400, 0x7, 0x20, 0x2, 0x3f, 0x4, 0x1, 0xffffff68, 0x0, 0x5, 0x8, 0x6, 0x4, 0x8, 0x400, 0x1, 0x9, 0x8, 0x2e, 0x9f, 0x1000, 0x6, 0x8, 0x9, 0x9, 0x609, 0x0, 0x8, 0x6, 0x8, 0x0, 0x6, 0x0, 0x8, 0xa5, 0x3, 0x1, 0x20, 0x3, 0xffffffe0, 0x264, 0x0, 0x20, 0x3, 0x5, 0x80, 0x80000000, 0x20, 0x1, 0x8, 0xfffff526, 0x9, 0x1000, 0x5, 0x6, 0x8001, 0x4, 0x8, 0x3, 0x5fe, 0x40, 0x10001, 0x7bf, 0x3f, 0xfff, 0xfffffffe, 0x2, 0xffffffff, 0x4, 0x8, 0x7fffffff, 0x3, 0x79ba, 0x5, 0x5, 0x8, 0xffffff7f, 0x4000, 0x84, 0x8, 0xfcbb, 0xffffffff, 0x4, 0x2, 0x3, 0x8001, 0x7, 0xfffffffe, 0x81, 0x1, 0x7, 0x0, 0x6, 0x178000, 0xfffffc00, 0xffff0001, 0x40, 0xffffffff, 0xf9, 0x7, 0x400, 0xffff, 0x10001, 0x7fffffff, 0x0, 0x3, 0x3, 0x2, 0x5, 0x7fffffff, 0x401, 0x7fffffff, 0x6, 0x9, 0xf5, 0x3, 0x1, 0x5, 0x519, 0xffffffff, 0x10000, 0x62a3, 0x7fffffff, 0x1ff, 0x400, 0x7, 0xffff, 0xfffffffd, 0x7, 0x47e8, 0x0, 0x40, 0x2cbe, 0x32, 0x4646, 0x8, 0x4, 0x1000, 0x1, 0x1ff, 0x5, 0x2, 0x8, 0x1, 0x9, 0x1, 0xb8bf, 0x5, 0x9, 0x4, 0x2, 0x1, 0x2, 0x5, 0x80, 0x1, 0x1, 0x7, 0x6, 0x8, 0x4, 0x8, 0x3ff, 0x6, 0x4, 0xa6b5, 0x8, 0x3, 0xe56, 0x1, 0x1, 0x7, 0x18, 0x200, 0x3, 0xfffffffa, 0xf6b6, 0x6, 0x3, 0x1, 0x2, 0x4, 0x9, 0x200, 0x7fffffff, 0x0, 0x9, 0xa3, 0x4, 0x0, 0x40, 0x3f, 0x401, 0xffff, 0x6, 0x2, 0x1, 0x4, 0xb60, 0x5a6e, 0x3, 0x2, 0x8, 0x80000000, 0x0, 0x7fffffff, 0x1, 0x8000, 0x10001, 0x9d46, 0x7, 0x9, 0x4ff, 0x800, 0x7ff, 0x7ff, 0x9, 0x7fff, 0x101, 0x7fffffff, 0xf76, 0x3f, 0x0, 0x80, 0x1, 0x8, 0x400, 0x9, 0x2, 0x1, 0x0, 0x4f, 0x50fd, 0xb90e, 0x7, 0xf2b, 0x3ff, 0x101, 0x0, 0x3, 0x800, 0x6, 0x7ff, 0xcccc, 0x6d40, 0x401, 0x7ff, 0x9, 0x3, 0x80000000, 0x5, 0xf65, 0x9, 0x2, 0x2, 0x9, 0x2, 0x0, 0x1f, 0x8, 0x6, 0x81, 0xfffffff7, 0x491, 0x4, 0x4, 0x8, 0x80, 0x7fffffff, 0x7, 0x0, 0x8, 0xffff, 0x453, 0x2, 0x8, 0x7, 0x0, 0x4c, 0x7fffffff, 0x5, 0x20, 0x0, 0x80000001, 0x7, 0xc12, 0x4, 0x4d4b, 0x8, 0x80000000, 0x4, 0x8, 0x1, 0x8, 0x2, 0x3, 0x1, 0x9, 0x400, 0x5, 0x2, 0xfffffffb, 0x7, 0xffffffff, 0x4, 0x1f, 0x8, 0x3, 0x2ccae030, 0xffffffff, 0xdade, 0x1, 0xfe000000, 0x5, 0xceb, 0x7, 0x80000001, 0xff, 0xa5, 0x8, 0x401, 0x3ff, 0x3ff, 0x8001, 0x625, 0x1000, 0x8, 0x200, 0x2, 0x3, 0x6, 0x9, 0x9, 0x7fff, 0x5, 0x9, 0x3, 0x1ff, 0x0, 0x172851af, 0x8, 0x3, 0x20, 0x100, 0x6, 0x71380, 0x1f, 0x1, 0x5c3, 0x2, 0x7, 0x1000, 0x0, 0x8, 0x7fff, 0xe7, 0xc04, 0x3, 0x8, 0x401, 0x1, 0x1, 0x3ff, 0xe0, 0x8000, 0x3f, 0xff, 0x1, 0x1, 0x7, 0x200, 0x5bda, 0xbe, 0x2, 0x3f, 0x9, 0x7, 0x4, 0x3, 0x82, 0x3, 0xfa9e, 0x1ff, 0xffff, 0x7, 0x2, 0xffff, 0x7, 0xffff, 0x2, 0xfffffffa, 0x5, 0x5, 0x400, 0x433c7307, 0x9, 0x3, 0x8001, 0xfffffff7, 0x5, 0xfffffff7, 0x4, 0x2, 0x4, 0x1795, 0x30, 0xfffffff7, 0x40, 0xffffffff, 0x9, 0x1, 0x80000001, 0x1f, 0x4, 0x2, 0x0, 0x0, 0xe10, 0x5, 0xff, 0x1, 0x7, 0x26, 0xbc, 0x10001, 0xfffffff7, 0xef, 0x5, 0x101, 0xfffffffe, 0x80000000, 0x0, 0x3f, 0x6, 0x352ae443, 0x9, 0x4, 0x7, 0x7, 0x200, 0x0, 0x0, 0x0, 0x5, 0x80000001, 0x5, 0x80000000, 0x6, 0xc935, 0x1, 0x7f, 0x101, 0x1, 0x1, 0x1f, 0x3, 0x8, 0x9, 0xc00000, 0x3f, 0x81, 0xe2000000, 0x7fffffff, 0x5, 0xfffffffc, 0x38, 0xfff, 0x7, 0x1f, 0x7fffffff, 0x6, 0x8b, 0x40, 0x6, 0x1b5, 0xca84, 0x4, 0xffffffff, 0x5, 0x207, 0x1ff, 0xfffff288, 0x6, 0x5, 0xffffc000, 0x3, 0x9, 0x7ff, 0x9, 0x5540, 0x4c91, 0x9, 0x1, 0x1, 0x5, 0x4, 0x0, 0x4, 0x274, 0x0, 0x0, 0x10001, 0x0, 0x3, 0x9, 0x7d6, 0x40a, 0x7fff, 0x100, 0x8000, 0xa6, 0x2, 0x1f, 0xf3ee, 0x7fff, 0x60, 0x5, 0x5, 0x0, 0x9, 0x2, 0xfff, 0x8000, 0x5, 0x40, 0x469, 0xffffffe1, 0x1, 0x3, 0x4, 0x992a, 0x4, 0xd78, 0x6, 0x6, 0xfff, 0x12, 0xfffffff9, 0xfffffffc, 0x2, 0x25ccbd4b, 0x1, 0x9, 0x2, 0xff, 0xffffffff, 0x22, 0x7, 0x7fffffff, 0x3, 0x400, 0x7, 0x4, 0x4, 0x4, 0x3, 0x2, 0x9, 0x6, 0x6, 0x8f1, 0x3, 0x2, 0x7, 0x7, 0xca8, 0x7, 0x9, 0x401, 0x2, 0x8, 0x3ff, 0x4, 0x5, 0x0, 0x2, 0x101, 0x40, 0x3, 0x3, 0x6, 0x2, 0x1f, 0x3, 0x2, 0x1f, 0x80, 0x9, 0x9, 0xbd, 0x9, 0x40, 0x92, 0x200, 0x7, 0x29c5, 0x0, 0x9, 0x2, 0xf88, 0x816, 0x100, 0x7, 0x0, 0x7, 0x6, 0x4, 0x3ff, 0x62, 0xf5, 0x7, 0xff, 0x7ff, 0x8, 0x0, 0x4221bb2e, 0x4, 0x0, 0x207, 0x7, 0x4, 0x82, 0x1000, 0x0, 0xa46, 0x6, 0xe137, 0x3, 0x100, 0x8011, 0x5, 0x4, 0x0, 0xffffffff, 0x8, 0x8000, 0x10000, 0x3, 0x7, 0x4, 0x69, 0x2, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000, 0x7, 0x7, 0x0, 0x3, 0xce, 0x8, 0x20, 0x1ff, 0xa1e, 0x81, 0x41, 0x5, 0x7d5786b, 0x3, 0x5, 0x9, 0x1, 0x7b2, 0xd9, 0x1, 0x7, 0x80b, 0x81, 0x4, 0x60, 0x800, 0x7fffffff, 0x2, 0x9, 0x7, 0x6, 0x7, 0x5, 0x10001, 0xffff, 0x80000001, 0x7, 0x1, 0x3, 0x1000, 0x3ff, 0x5, 0x85, 0x1, 0xfe8c, 0x7088, 0xfff, 0x9, 0x1, 0x1, 0x4, 0x5, 0x20, 0x2, 0x101, 0xdb, 0x7, 0x800, 0x4, 0xa75, 0x0, 0x80000001, 0xffff, 0x0, 0x3ff, 0x1, 0x1, 0x8, 0xfff, 0x2, 0x6, 0x5, 0x2, 0x4, 0x8, 0xfff, 0x40, 0x8, 0x9, 0x5, 0xffffffff, 0x8, 0x587, 0x0, 0x9, 0xc7, 0x8, 0x7, 0x8, 0xfffffffe, 0x2, 0x6, 0x8, 0x7fff, 0x200, 0x4, 0x2, 0x8, 0x8, 0x10001, 0x4, 0x9, 0xef3, 0x5, 0x3, 0x8, 0xffffffe1, 0x80, 0x49, 0xfffff9ab, 0x1000, 0x348, 0x400, 0x9, 0x200, 0x9, 0xf37a, 0xe000, 0x8, 0x200, 0x3, 0x1ff, 0x7, 0x88, 0x2, 0x1, 0xc, 0xf7, 0x59, 0x1, 0x8, 0x3, 0x40, 0x3, 0x9, 0x4, 0x5b, 0x80000000, 0x0, 0x7, 0xfff, 0x1cb2, 0x2430b698, 0x7, 0x8000, 0x8, 0x8001, 0x80000001, 0x8001, 0x48, 0x3, 0xa3, 0x9, 0x3, 0x5, 0x8, 0x6, 0x8, 0x346, 0x3fc3, 0x1, 0x1, 0x0, 0x400, 0xe57, 0x200, 0x1, 0x80, 0x5, 0xfa1, 0x6, 0xffffffff, 0x4, 0x400, 0xffffffc1, 0x0, 0x0, 0x7, 0x3ff, 0x2, 0xa01, 0x58, 0xe86, 0x5, 0xffff0000, 0x1ff, 0x5, 0x6, 0x2, 0x2, 0x3c, 0x7fff, 0x4, 0x1, 0x20200000, 0x4, 0x5, 0x8001, 0x2, 0x3b, 0x9, 0x0, 0xdc, 0x8, 0x6, 0x0, 0x7, 0x9ec, 0x8, 0x3, 0x1000, 0x6, 0x0, 0x10000, 0x0, 0x7f, 0x5a, 0x2, 0x2, 0x4, 0x671b, 0x0, 0x97, 0xfff, 0x2, 0x7ff, 0xfffffffc, 0xff, 0x4, 0x3, 0x5980000, 0x943d, 0xf88, 0x2, 0xfffffffe, 0x8, 0x7, 0x4, 0x8001, 0x6, 0x97d, 0x7fffffff, 0x7fff, 0x9, 0x1, 0x1, 0x3ff, 0x8000, 0x40, 0x8, 0x200, 0x4, 0x1, 0x9, 0x9, 0x5a8c, 0x6, 0x8000, 0x6, 0xffffffff, 0xffffff8d, 0x7fff, 0x81, 0xff, 0x6, 0x6, 0x8, 0x4, 0x8, 0x10000, 0x4, 0x1f, 0x3f, 0x80000000, 0x200, 0x7, 0x7, 0xb49, 0x7, 0x5, 0x1, 0xbda, 0x98da, 0xdcf7, 0x7, 0x4, 0x3, 0x9, 0x80000000, 0x1, 0x2, 0x400, 0x9e, 0x59, 0x0, 0x2, 0x0, 0x658f, 0xd6a2, 0x62772d68, 0x5, 0x5, 0x7, 0x5, 0xff, 0x1, 0x1, 0x80, 0x8000, 0x0, 0x5, 0x7fff, 0x1ff, 0x4, 0x3, 0x4, 0x26ce, 0x20, 0x5, 0x7, 0x81, 0x1f, 0x9, 0x7ff, 0x6, 0x1, 0x7, 0x4, 0x80, 0x5f, 0x2, 0x200, 0x3, 0xff, 0x80000001], 0x6, 0x400, 0xa99}) r3 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x90000, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@hyper, 0x9b45}, 0x1, 0x2, 0x4}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000100)={&(0x7f0000000780)=[0x7, 0x3, 0x1, 0xe5e, 0x3, 0x3, 0x94c3, 0x2, 0x5, 0xfffeffff, 0x81, 0xa40, 0x81, 0x9eb, 0x7, 0x7, 0x0, 0x6, 0xffff4f2c, 0xfffffbff, 0x6, 0x154, 0x8, 0x4, 0x72e, 0x4, 0x7fffffff, 0x81051ee, 0x8dd2, 0x100, 0x5, 0x4, 0x54, 0x2, 0x2, 0x10000, 0x7, 0x8, 0x9, 0x200, 0x8, 0x5, 0x400, 0x7, 0x20, 0x2, 0x3f, 0x4, 0x1, 0xffffff68, 0x0, 0x5, 0x8, 0x6, 0x4, 0x8, 0x400, 0x1, 0x9, 0x8, 0x2e, 0x9f, 0x1000, 0x6, 0x8, 0x9, 0x9, 0x609, 0x0, 0x8, 0x6, 0x8, 0x0, 0x6, 0x0, 0x8, 0xa5, 0x3, 0x1, 0x20, 0x3, 0xffffffe0, 0x264, 0x0, 0x20, 0x3, 0x5, 0x80, 0x80000000, 0x20, 0x1, 0x8, 0xfffff526, 0x9, 0x1000, 0x5, 0x6, 0x8001, 0x4, 0x8, 0x3, 0x5fe, 0x40, 0x10001, 0x7bf, 0x3f, 0xfff, 0xfffffffe, 0x2, 0xffffffff, 0x4, 0x8, 0x7fffffff, 0x3, 0x79ba, 0x5, 0x5, 0x8, 0xffffff7f, 0x4000, 0x84, 0x8, 0xfcbb, 0xffffffff, 0x4, 0x2, 0x3, 0x8001, 0x7, 0xfffffffe, 0x81, 0x1, 0x7, 0x0, 0x6, 0x178000, 0xfffffc00, 0xffff0001, 0x40, 0xffffffff, 0xf9, 0x7, 0x400, 0xffff, 0x10001, 0x7fffffff, 0x0, 0x3, 0x3, 0x2, 0x5, 0x7fffffff, 0x401, 0x7fffffff, 0x6, 0x9, 0xf5, 0x3, 0x1, 0x5, 0x519, 0xffffffff, 0x10000, 0x62a3, 0x7fffffff, 0x1ff, 0x400, 0x7, 0xffff, 0xfffffffd, 0x7, 0x47e8, 0x0, 0x40, 0x2cbe, 0x32, 0x4646, 0x8, 0x4, 0x1000, 0x1, 0x1ff, 0x5, 0x2, 0x8, 0x1, 0x9, 0x1, 0xb8bf, 0x5, 0x9, 0x4, 0x2, 0x1, 0x2, 0x5, 0x80, 0x1, 0x1, 0x7, 0x6, 0x8, 0x4, 0x8, 0x3ff, 0x6, 0x4, 0xa6b5, 0x8, 0x3, 0xe56, 0x1, 0x1, 0x7, 0x18, 0x200, 0x3, 0xfffffffa, 0xf6b6, 0x6, 0x3, 0x1, 0x2, 0x4, 0x9, 0x200, 0x7fffffff, 0x0, 0x9, 0xa3, 0x4, 0x0, 0x40, 0x3f, 0x401, 0xffff, 0x6, 0x2, 0x1, 0x4, 0xb60, 0x5a6e, 0x3, 0x2, 0x8, 0x80000000, 0x0, 0x7fffffff, 0x1, 0x8000, 0x10001, 0x9d46, 0x7, 0x9, 0x4ff, 0x800, 0x7ff, 0x7ff, 0x9, 0x7fff, 0x101, 0x7fffffff, 0xf76, 0x3f, 0x0, 0x80, 0x1, 0x8, 0x400, 0x9, 0x2, 0x1, 0x0, 0x4f, 0x50fd, 0xb90e, 0x7, 0xf2b, 0x3ff, 0x101, 0x0, 0x3, 0x800, 0x6, 0x7ff, 0xcccc, 0x6d40, 0x401, 0x7ff, 0x9, 0x3, 0x80000000, 0x5, 0xf65, 0x9, 0x2, 0x2, 0x9, 0x2, 0x0, 0x1f, 0x8, 0x6, 0x81, 0xfffffff7, 0x491, 0x4, 0x4, 0x8, 0x80, 0x7fffffff, 0x7, 0x0, 0x8, 0xffff, 0x453, 0x2, 0x8, 0x7, 0x0, 0x4c, 0x7fffffff, 0x5, 0x20, 0x0, 0x80000001, 0x7, 0xc12, 0x4, 0x4d4b, 0x8, 0x80000000, 0x4, 0x8, 0x1, 0x8, 0x2, 0x3, 0x1, 0x9, 0x400, 0x5, 0x2, 0xfffffffb, 0x7, 0xffffffff, 0x4, 0x1f, 0x8, 0x3, 0x2ccae030, 0xffffffff, 0xdade, 0x1, 0xfe000000, 0x5, 0xceb, 0x7, 0x80000001, 0xff, 0xa5, 0x8, 0x401, 0x3ff, 0x3ff, 0x8001, 0x625, 0x1000, 0x8, 0x200, 0x2, 0x3, 0x6, 0x9, 0x9, 0x7fff, 0x5, 0x9, 0x3, 0x1ff, 0x0, 0x172851af, 0x8, 0x3, 0x20, 0x100, 0x6, 0x71380, 0x1f, 0x1, 0x5c3, 0x2, 0x7, 0x1000, 0x0, 0x8, 0x7fff, 0xe7, 0xc04, 0x3, 0x8, 0x401, 0x1, 0x1, 0x3ff, 0xe0, 0x8000, 0x3f, 0xff, 0x1, 0x1, 0x7, 0x200, 0x5bda, 0xbe, 0x2, 0x3f, 0x9, 0x7, 0x4, 0x3, 0x82, 0x3, 0xfa9e, 0x1ff, 0xffff, 0x7, 0x2, 0xffff, 0x7, 0xffff, 0x2, 0xfffffffa, 0x5, 0x5, 0x400, 0x433c7307, 0x9, 0x3, 0x8001, 0xfffffff7, 0x5, 0xfffffff7, 0x4, 0x2, 0x4, 0x1795, 0x30, 0xfffffff7, 0x40, 0xffffffff, 0x9, 0x1, 0x80000001, 0x1f, 0x4, 0x2, 0x0, 0x0, 0xe10, 0x5, 0xff, 0x1, 0x7, 0x26, 0xbc, 0x10001, 0xfffffff7, 0xef, 0x5, 0x101, 0xfffffffe, 0x80000000, 0x0, 0x3f, 0x6, 0x352ae443, 0x9, 0x4, 0x7, 0x7, 0x200, 0x0, 0x0, 0x0, 0x5, 0x80000001, 0x5, 0x80000000, 0x6, 0xc935, 0x1, 0x7f, 0x101, 0x1, 0x1, 0x1f, 0x3, 0x8, 0x9, 0xc00000, 0x3f, 0x81, 0xe2000000, 0x7fffffff, 0x5, 0xfffffffc, 0x38, 0xfff, 0x7, 0x1f, 0x7fffffff, 0x6, 0x8b, 0x40, 0x6, 0x1b5, 0xca84, 0x4, 0xffffffff, 0x5, 0x207, 0x1ff, 0xfffff288, 0x6, 0x5, 0xffffc000, 0x3, 0x9, 0x7ff, 0x9, 0x5540, 0x4c91, 0x9, 0x1, 0x1, 0x5, 0x4, 0x0, 0x4, 0x274, 0x0, 0x0, 0x10001, 0x0, 0x3, 0x9, 0x7d6, 0x40a, 0x7fff, 0x100, 0x8000, 0xa6, 0x2, 0x1f, 0xf3ee, 0x7fff, 0x60, 0x5, 0x5, 0x0, 0x9, 0x2, 0xfff, 0x8000, 0x5, 0x40, 0x469, 0xffffffe1, 0x1, 0x3, 0x4, 0x992a, 0x4, 0xd78, 0x6, 0x6, 0xfff, 0x12, 0xfffffff9, 0xfffffffc, 0x2, 0x25ccbd4b, 0x1, 0x9, 0x2, 0xff, 0xffffffff, 0x22, 0x7, 0x7fffffff, 0x3, 0x400, 0x7, 0x4, 0x4, 0x4, 0x3, 0x2, 0x9, 0x6, 0x6, 0x8f1, 0x3, 0x2, 0x7, 0x7, 0xca8, 0x7, 0x9, 0x401, 0x2, 0x8, 0x3ff, 0x4, 0x5, 0x0, 0x2, 0x101, 0x40, 0x3, 0x3, 0x6, 0x2, 0x1f, 0x3, 0x2, 0x1f, 0x80, 0x9, 0x9, 0xbd, 0x9, 0x40, 0x92, 0x200, 0x7, 0x29c5, 0x0, 0x9, 0x2, 0xf88, 0x816, 0x100, 0x7, 0x0, 0x7, 0x6, 0x4, 0x3ff, 0x62, 0xf5, 0x7, 0xff, 0x7ff, 0x8, 0x0, 0x4221bb2e, 0x4, 0x0, 0x207, 0x7, 0x4, 0x82, 0x1000, 0x0, 0xa46, 0x6, 0xe137, 0x3, 0x100, 0x8011, 0x5, 0x4, 0x0, 0xffffffff, 0x8, 0x8000, 0x10000, 0x3, 0x7, 0x4, 0x69, 0x2, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000, 0x7, 0x7, 0x0, 0x3, 0xce, 0x8, 0x20, 0x1ff, 0xa1e, 0x81, 0x41, 0x5, 0x7d5786b, 0x3, 0x5, 0x9, 0x1, 0x7b2, 0xd9, 0x1, 0x7, 0x80b, 0x81, 0x4, 0x60, 0x800, 0x7fffffff, 0x2, 0x9, 0x7, 0x6, 0x7, 0x5, 0x10001, 0xffff, 0x80000001, 0x7, 0x1, 0x3, 0x1000, 0x3ff, 0x5, 0x85, 0x1, 0xfe8c, 0x7088, 0xfff, 0x9, 0x1, 0x1, 0x4, 0x5, 0x20, 0x2, 0x101, 0xdb, 0x7, 0x800, 0x4, 0xa75, 0x0, 0x80000001, 0xffff, 0x0, 0x3ff, 0x1, 0x1, 0x8, 0xfff, 0x2, 0x6, 0x5, 0x2, 0x4, 0x8, 0xfff, 0x40, 0x8, 0x9, 0x5, 0xffffffff, 0x8, 0x587, 0x0, 0x9, 0xc7, 0x8, 0x7, 0x8, 0xfffffffe, 0x2, 0x6, 0x8, 0x7fff, 0x200, 0x4, 0x2, 0x8, 0x8, 0x10001, 0x4, 0x9, 0xef3, 0x5, 0x3, 0x8, 0xffffffe1, 0x80, 0x49, 0xfffff9ab, 0x1000, 0x348, 0x400, 0x9, 0x200, 0x9, 0xf37a, 0xe000, 0x8, 0x200, 0x3, 0x1ff, 0x7, 0x88, 0x2, 0x1, 0xc, 0xf7, 0x59, 0x1, 0x8, 0x3, 0x40, 0x3, 0x9, 0x4, 0x5b, 0x80000000, 0x0, 0x7, 0xfff, 0x1cb2, 0x2430b698, 0x7, 0x8000, 0x8, 0x8001, 0x80000001, 0x8001, 0x48, 0x3, 0xa3, 0x9, 0x3, 0x5, 0x8, 0x6, 0x8, 0x346, 0x3fc3, 0x1, 0x1, 0x0, 0x400, 0xe57, 0x200, 0x1, 0x80, 0x5, 0xfa1, 0x6, 0xffffffff, 0x4, 0x400, 0xffffffc1, 0x0, 0x0, 0x7, 0x3ff, 0x2, 0xa01, 0x58, 0xe86, 0x5, 0xffff0000, 0x1ff, 0x5, 0x6, 0x2, 0x2, 0x3c, 0x7fff, 0x4, 0x1, 0x20200000, 0x4, 0x5, 0x8001, 0x2, 0x3b, 0x9, 0x0, 0xdc, 0x8, 0x6, 0x0, 0x7, 0x9ec, 0x8, 0x3, 0x1000, 0x6, 0x0, 0x10000, 0x0, 0x7f, 0x5a, 0x2, 0x2, 0x4, 0x671b, 0x0, 0x97, 0xfff, 0x2, 0x7ff, 0xfffffffc, 0xff, 0x4, 0x3, 0x5980000, 0x943d, 0xf88, 0x2, 0xfffffffe, 0x8, 0x7, 0x4, 0x8001, 0x6, 0x97d, 0x7fffffff, 0x7fff, 0x9, 0x1, 0x1, 0x3ff, 0x8000, 0x40, 0x8, 0x200, 0x4, 0x1, 0x9, 0x9, 0x5a8c, 0x6, 0x8000, 0x6, 0xffffffff, 0xffffff8d, 0x7fff, 0x81, 0xff, 0x6, 0x6, 0x8, 0x4, 0x8, 0x10000, 0x4, 0x1f, 0x3f, 0x80000000, 0x200, 0x7, 0x7, 0xb49, 0x7, 0x5, 0x1, 0xbda, 0x98da, 0xdcf7, 0x7, 0x4, 0x3, 0x9, 0x80000000, 0x1, 0x2, 0x400, 0x9e, 0x59, 0x0, 0x2, 0x0, 0x658f, 0xd6a2, 0x62772d68, 0x5, 0x5, 0x7, 0x5, 0xff, 0x1, 0x1, 0x80, 0x8000, 0x0, 0x5, 0x7fff, 0x1ff, 0x4, 0x3, 0x4, 0x26ce, 0x20, 0x5, 0x7, 0x81, 0x1f, 0x9, 0x7ff, 0x6, 0x1, 0x7, 0x4, 0x80, 0x5f, 0x2, 0x200, 0x3, 0xff, 0x80000001], 0x6, 0x400, 0xa99}) (async) openat$vcs(0xffffff9c, &(0x7f0000000140), 0x90000, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@hyper, 0x9b45}, 0x1, 0x2, 0x4}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:45:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x600}]}]}, 0x30}}, 0x0) 20:45:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000000e0007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 675.574130][T23796] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x700}]}]}, 0x30}}, 0x0) 20:45:45 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x11, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:45 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) r2 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000100)={&(0x7f0000000780)=[0x7, 0x3, 0x1, 0xe5e, 0x3, 0x3, 0x94c3, 0x2, 0x5, 0xfffeffff, 0x81, 0xa40, 0x81, 0x9eb, 0x7, 0x7, 0x0, 0x6, 0xffff4f2c, 0xfffffbff, 0x6, 0x154, 0x8, 0x4, 0x72e, 0x4, 0x7fffffff, 0x81051ee, 0x8dd2, 0x100, 0x5, 0x4, 0x54, 0x2, 0x2, 0x10000, 0x7, 0x8, 0x9, 0x200, 0x8, 0x5, 0x400, 0x7, 0x20, 0x2, 0x3f, 0x4, 0x1, 0xffffff68, 0x0, 0x5, 0x8, 0x6, 0x4, 0x8, 0x400, 0x1, 0x9, 0x8, 0x2e, 0x9f, 0x1000, 0x6, 0x8, 0x9, 0x9, 0x609, 0x0, 0x8, 0x6, 0x8, 0x0, 0x6, 0x0, 0x8, 0xa5, 0x3, 0x1, 0x20, 0x3, 0xffffffe0, 0x264, 0x0, 0x20, 0x3, 0x5, 0x80, 0x80000000, 0x20, 0x1, 0x8, 0xfffff526, 0x9, 0x1000, 0x5, 0x6, 0x8001, 0x4, 0x8, 0x3, 0x5fe, 0x40, 0x10001, 0x7bf, 0x3f, 0xfff, 0xfffffffe, 0x2, 0xffffffff, 0x4, 0x8, 0x7fffffff, 0x3, 0x79ba, 0x5, 0x5, 0x8, 0xffffff7f, 0x4000, 0x84, 0x8, 0xfcbb, 0xffffffff, 0x4, 0x2, 0x3, 0x8001, 0x7, 0xfffffffe, 0x81, 0x1, 0x7, 0x0, 0x6, 0x178000, 0xfffffc00, 0xffff0001, 0x40, 0xffffffff, 0xf9, 0x7, 0x400, 0xffff, 0x10001, 0x7fffffff, 0x0, 0x3, 0x3, 0x2, 0x5, 0x7fffffff, 0x401, 0x7fffffff, 0x6, 0x9, 0xf5, 0x3, 0x1, 0x5, 0x519, 0xffffffff, 0x10000, 0x62a3, 0x7fffffff, 0x1ff, 0x400, 0x7, 0xffff, 0xfffffffd, 0x7, 0x47e8, 0x0, 0x40, 0x2cbe, 0x32, 0x4646, 0x8, 0x4, 0x1000, 0x1, 0x1ff, 0x5, 0x2, 0x8, 0x1, 0x9, 0x1, 0xb8bf, 0x5, 0x9, 0x4, 0x2, 0x1, 0x2, 0x5, 0x80, 0x1, 0x1, 0x7, 0x6, 0x8, 0x4, 0x8, 0x3ff, 0x6, 0x4, 0xa6b5, 0x8, 0x3, 0xe56, 0x1, 0x1, 0x7, 0x18, 0x200, 0x3, 0xfffffffa, 0xf6b6, 0x6, 0x3, 0x1, 0x2, 0x4, 0x9, 0x200, 0x7fffffff, 0x0, 0x9, 0xa3, 0x4, 0x0, 0x40, 0x3f, 0x401, 0xffff, 0x6, 0x2, 0x1, 0x4, 0xb60, 0x5a6e, 0x3, 0x2, 0x8, 0x80000000, 0x0, 0x7fffffff, 0x1, 0x8000, 0x10001, 0x9d46, 0x7, 0x9, 0x4ff, 0x800, 0x7ff, 0x7ff, 0x9, 0x7fff, 0x101, 0x7fffffff, 0xf76, 0x3f, 0x0, 0x80, 0x1, 0x8, 0x400, 0x9, 0x2, 0x1, 0x0, 0x4f, 0x50fd, 0xb90e, 0x7, 0xf2b, 0x3ff, 0x101, 0x0, 0x3, 0x800, 0x6, 0x7ff, 0xcccc, 0x6d40, 0x401, 0x7ff, 0x9, 0x3, 0x80000000, 0x5, 0xf65, 0x9, 0x2, 0x2, 0x9, 0x2, 0x0, 0x1f, 0x8, 0x6, 0x81, 0xfffffff7, 0x491, 0x4, 0x4, 0x8, 0x80, 0x7fffffff, 0x7, 0x0, 0x8, 0xffff, 0x453, 0x2, 0x8, 0x7, 0x0, 0x4c, 0x7fffffff, 0x5, 0x20, 0x0, 0x80000001, 0x7, 0xc12, 0x4, 0x4d4b, 0x8, 0x80000000, 0x4, 0x8, 0x1, 0x8, 0x2, 0x3, 0x1, 0x9, 0x400, 0x5, 0x2, 0xfffffffb, 0x7, 0xffffffff, 0x4, 0x1f, 0x8, 0x3, 0x2ccae030, 0xffffffff, 0xdade, 0x1, 0xfe000000, 0x5, 0xceb, 0x7, 0x80000001, 0xff, 0xa5, 0x8, 0x401, 0x3ff, 0x3ff, 0x8001, 0x625, 0x1000, 0x8, 0x200, 0x2, 0x3, 0x6, 0x9, 0x9, 0x7fff, 0x5, 0x9, 0x3, 0x1ff, 0x0, 0x172851af, 0x8, 0x3, 0x20, 0x100, 0x6, 0x71380, 0x1f, 0x1, 0x5c3, 0x2, 0x7, 0x1000, 0x0, 0x8, 0x7fff, 0xe7, 0xc04, 0x3, 0x8, 0x401, 0x1, 0x1, 0x3ff, 0xe0, 0x8000, 0x3f, 0xff, 0x1, 0x1, 0x7, 0x200, 0x5bda, 0xbe, 0x2, 0x3f, 0x9, 0x7, 0x4, 0x3, 0x82, 0x3, 0xfa9e, 0x1ff, 0xffff, 0x7, 0x2, 0xffff, 0x7, 0xffff, 0x2, 0xfffffffa, 0x5, 0x5, 0x400, 0x433c7307, 0x9, 0x3, 0x8001, 0xfffffff7, 0x5, 0xfffffff7, 0x4, 0x2, 0x4, 0x1795, 0x30, 0xfffffff7, 0x40, 0xffffffff, 0x9, 0x1, 0x80000001, 0x1f, 0x4, 0x2, 0x0, 0x0, 0xe10, 0x5, 0xff, 0x1, 0x7, 0x26, 0xbc, 0x10001, 0xfffffff7, 0xef, 0x5, 0x101, 0xfffffffe, 0x80000000, 0x0, 0x3f, 0x6, 0x352ae443, 0x9, 0x4, 0x7, 0x7, 0x200, 0x0, 0x0, 0x0, 0x5, 0x80000001, 0x5, 0x80000000, 0x6, 0xc935, 0x1, 0x7f, 0x101, 0x1, 0x1, 0x1f, 0x3, 0x8, 0x9, 0xc00000, 0x3f, 0x81, 0xe2000000, 0x7fffffff, 0x5, 0xfffffffc, 0x38, 0xfff, 0x7, 0x1f, 0x7fffffff, 0x6, 0x8b, 0x40, 0x6, 0x1b5, 0xca84, 0x4, 0xffffffff, 0x5, 0x207, 0x1ff, 0xfffff288, 0x6, 0x5, 0xffffc000, 0x3, 0x9, 0x7ff, 0x9, 0x5540, 0x4c91, 0x9, 0x1, 0x1, 0x5, 0x4, 0x0, 0x4, 0x274, 0x0, 0x0, 0x10001, 0x0, 0x3, 0x9, 0x7d6, 0x40a, 0x7fff, 0x100, 0x8000, 0xa6, 0x2, 0x1f, 0xf3ee, 0x7fff, 0x60, 0x5, 0x5, 0x0, 0x9, 0x2, 0xfff, 0x8000, 0x5, 0x40, 0x469, 0xffffffe1, 0x1, 0x3, 0x4, 0x992a, 0x4, 0xd78, 0x6, 0x6, 0xfff, 0x12, 0xfffffff9, 0xfffffffc, 0x2, 0x25ccbd4b, 0x1, 0x9, 0x2, 0xff, 0xffffffff, 0x22, 0x7, 0x7fffffff, 0x3, 0x400, 0x7, 0x4, 0x4, 0x4, 0x3, 0x2, 0x9, 0x6, 0x6, 0x8f1, 0x3, 0x2, 0x7, 0x7, 0xca8, 0x7, 0x9, 0x401, 0x2, 0x8, 0x3ff, 0x4, 0x5, 0x0, 0x2, 0x101, 0x40, 0x3, 0x3, 0x6, 0x2, 0x1f, 0x3, 0x2, 0x1f, 0x80, 0x9, 0x9, 0xbd, 0x9, 0x40, 0x92, 0x200, 0x7, 0x29c5, 0x0, 0x9, 0x2, 0xf88, 0x816, 0x100, 0x7, 0x0, 0x7, 0x6, 0x4, 0x3ff, 0x62, 0xf5, 0x7, 0xff, 0x7ff, 0x8, 0x0, 0x4221bb2e, 0x4, 0x0, 0x207, 0x7, 0x4, 0x82, 0x1000, 0x0, 0xa46, 0x6, 0xe137, 0x3, 0x100, 0x8011, 0x5, 0x4, 0x0, 0xffffffff, 0x8, 0x8000, 0x10000, 0x3, 0x7, 0x4, 0x69, 0x2, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000, 0x7, 0x7, 0x0, 0x3, 0xce, 0x8, 0x20, 0x1ff, 0xa1e, 0x81, 0x41, 0x5, 0x7d5786b, 0x3, 0x5, 0x9, 0x1, 0x7b2, 0xd9, 0x1, 0x7, 0x80b, 0x81, 0x4, 0x60, 0x800, 0x7fffffff, 0x2, 0x9, 0x7, 0x6, 0x7, 0x5, 0x10001, 0xffff, 0x80000001, 0x7, 0x1, 0x3, 0x1000, 0x3ff, 0x5, 0x85, 0x1, 0xfe8c, 0x7088, 0xfff, 0x9, 0x1, 0x1, 0x4, 0x5, 0x20, 0x2, 0x101, 0xdb, 0x7, 0x800, 0x4, 0xa75, 0x0, 0x80000001, 0xffff, 0x0, 0x3ff, 0x1, 0x1, 0x8, 0xfff, 0x2, 0x6, 0x5, 0x2, 0x4, 0x8, 0xfff, 0x40, 0x8, 0x9, 0x5, 0xffffffff, 0x8, 0x587, 0x0, 0x9, 0xc7, 0x8, 0x7, 0x8, 0xfffffffe, 0x2, 0x6, 0x8, 0x7fff, 0x200, 0x4, 0x2, 0x8, 0x8, 0x10001, 0x4, 0x9, 0xef3, 0x5, 0x3, 0x8, 0xffffffe1, 0x80, 0x49, 0xfffff9ab, 0x1000, 0x348, 0x400, 0x9, 0x200, 0x9, 0xf37a, 0xe000, 0x8, 0x200, 0x3, 0x1ff, 0x7, 0x88, 0x2, 0x1, 0xc, 0xf7, 0x59, 0x1, 0x8, 0x3, 0x40, 0x3, 0x9, 0x4, 0x5b, 0x80000000, 0x0, 0x7, 0xfff, 0x1cb2, 0x2430b698, 0x7, 0x8000, 0x8, 0x8001, 0x80000001, 0x8001, 0x48, 0x3, 0xa3, 0x9, 0x3, 0x5, 0x8, 0x6, 0x8, 0x346, 0x3fc3, 0x1, 0x1, 0x0, 0x400, 0xe57, 0x200, 0x1, 0x80, 0x5, 0xfa1, 0x6, 0xffffffff, 0x4, 0x400, 0xffffffc1, 0x0, 0x0, 0x7, 0x3ff, 0x2, 0xa01, 0x58, 0xe86, 0x5, 0xffff0000, 0x1ff, 0x5, 0x6, 0x2, 0x2, 0x3c, 0x7fff, 0x4, 0x1, 0x20200000, 0x4, 0x5, 0x8001, 0x2, 0x3b, 0x9, 0x0, 0xdc, 0x8, 0x6, 0x0, 0x7, 0x9ec, 0x8, 0x3, 0x1000, 0x6, 0x0, 0x10000, 0x0, 0x7f, 0x5a, 0x2, 0x2, 0x4, 0x671b, 0x0, 0x97, 0xfff, 0x2, 0x7ff, 0xfffffffc, 0xff, 0x4, 0x3, 0x5980000, 0x943d, 0xf88, 0x2, 0xfffffffe, 0x8, 0x7, 0x4, 0x8001, 0x6, 0x97d, 0x7fffffff, 0x7fff, 0x9, 0x1, 0x1, 0x3ff, 0x8000, 0x40, 0x8, 0x200, 0x4, 0x1, 0x9, 0x9, 0x5a8c, 0x6, 0x8000, 0x6, 0xffffffff, 0xffffff8d, 0x7fff, 0x81, 0xff, 0x6, 0x6, 0x8, 0x4, 0x8, 0x10000, 0x4, 0x1f, 0x3f, 0x80000000, 0x200, 0x7, 0x7, 0xb49, 0x7, 0x5, 0x1, 0xbda, 0x98da, 0xdcf7, 0x7, 0x4, 0x3, 0x9, 0x80000000, 0x1, 0x2, 0x400, 0x9e, 0x59, 0x0, 0x2, 0x0, 0x658f, 0xd6a2, 0x62772d68, 0x5, 0x5, 0x7, 0x5, 0xff, 0x1, 0x1, 0x80, 0x8000, 0x0, 0x5, 0x7fff, 0x1ff, 0x4, 0x3, 0x4, 0x26ce, 0x20, 0x5, 0x7, 0x81, 0x1f, 0x9, 0x7ff, 0x6, 0x1, 0x7, 0x4, 0x80, 0x5f, 0x2, 0x200, 0x3, 0xff, 0x80000001], 0x6, 0x400, 0xa99}) r3 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x90000, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@hyper, 0x9b45}, 0x1, 0x2, 0x4}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000100)={&(0x7f0000000780)=[0x7, 0x3, 0x1, 0xe5e, 0x3, 0x3, 0x94c3, 0x2, 0x5, 0xfffeffff, 0x81, 0xa40, 0x81, 0x9eb, 0x7, 0x7, 0x0, 0x6, 0xffff4f2c, 0xfffffbff, 0x6, 0x154, 0x8, 0x4, 0x72e, 0x4, 0x7fffffff, 0x81051ee, 0x8dd2, 0x100, 0x5, 0x4, 0x54, 0x2, 0x2, 0x10000, 0x7, 0x8, 0x9, 0x200, 0x8, 0x5, 0x400, 0x7, 0x20, 0x2, 0x3f, 0x4, 0x1, 0xffffff68, 0x0, 0x5, 0x8, 0x6, 0x4, 0x8, 0x400, 0x1, 0x9, 0x8, 0x2e, 0x9f, 0x1000, 0x6, 0x8, 0x9, 0x9, 0x609, 0x0, 0x8, 0x6, 0x8, 0x0, 0x6, 0x0, 0x8, 0xa5, 0x3, 0x1, 0x20, 0x3, 0xffffffe0, 0x264, 0x0, 0x20, 0x3, 0x5, 0x80, 0x80000000, 0x20, 0x1, 0x8, 0xfffff526, 0x9, 0x1000, 0x5, 0x6, 0x8001, 0x4, 0x8, 0x3, 0x5fe, 0x40, 0x10001, 0x7bf, 0x3f, 0xfff, 0xfffffffe, 0x2, 0xffffffff, 0x4, 0x8, 0x7fffffff, 0x3, 0x79ba, 0x5, 0x5, 0x8, 0xffffff7f, 0x4000, 0x84, 0x8, 0xfcbb, 0xffffffff, 0x4, 0x2, 0x3, 0x8001, 0x7, 0xfffffffe, 0x81, 0x1, 0x7, 0x0, 0x6, 0x178000, 0xfffffc00, 0xffff0001, 0x40, 0xffffffff, 0xf9, 0x7, 0x400, 0xffff, 0x10001, 0x7fffffff, 0x0, 0x3, 0x3, 0x2, 0x5, 0x7fffffff, 0x401, 0x7fffffff, 0x6, 0x9, 0xf5, 0x3, 0x1, 0x5, 0x519, 0xffffffff, 0x10000, 0x62a3, 0x7fffffff, 0x1ff, 0x400, 0x7, 0xffff, 0xfffffffd, 0x7, 0x47e8, 0x0, 0x40, 0x2cbe, 0x32, 0x4646, 0x8, 0x4, 0x1000, 0x1, 0x1ff, 0x5, 0x2, 0x8, 0x1, 0x9, 0x1, 0xb8bf, 0x5, 0x9, 0x4, 0x2, 0x1, 0x2, 0x5, 0x80, 0x1, 0x1, 0x7, 0x6, 0x8, 0x4, 0x8, 0x3ff, 0x6, 0x4, 0xa6b5, 0x8, 0x3, 0xe56, 0x1, 0x1, 0x7, 0x18, 0x200, 0x3, 0xfffffffa, 0xf6b6, 0x6, 0x3, 0x1, 0x2, 0x4, 0x9, 0x200, 0x7fffffff, 0x0, 0x9, 0xa3, 0x4, 0x0, 0x40, 0x3f, 0x401, 0xffff, 0x6, 0x2, 0x1, 0x4, 0xb60, 0x5a6e, 0x3, 0x2, 0x8, 0x80000000, 0x0, 0x7fffffff, 0x1, 0x8000, 0x10001, 0x9d46, 0x7, 0x9, 0x4ff, 0x800, 0x7ff, 0x7ff, 0x9, 0x7fff, 0x101, 0x7fffffff, 0xf76, 0x3f, 0x0, 0x80, 0x1, 0x8, 0x400, 0x9, 0x2, 0x1, 0x0, 0x4f, 0x50fd, 0xb90e, 0x7, 0xf2b, 0x3ff, 0x101, 0x0, 0x3, 0x800, 0x6, 0x7ff, 0xcccc, 0x6d40, 0x401, 0x7ff, 0x9, 0x3, 0x80000000, 0x5, 0xf65, 0x9, 0x2, 0x2, 0x9, 0x2, 0x0, 0x1f, 0x8, 0x6, 0x81, 0xfffffff7, 0x491, 0x4, 0x4, 0x8, 0x80, 0x7fffffff, 0x7, 0x0, 0x8, 0xffff, 0x453, 0x2, 0x8, 0x7, 0x0, 0x4c, 0x7fffffff, 0x5, 0x20, 0x0, 0x80000001, 0x7, 0xc12, 0x4, 0x4d4b, 0x8, 0x80000000, 0x4, 0x8, 0x1, 0x8, 0x2, 0x3, 0x1, 0x9, 0x400, 0x5, 0x2, 0xfffffffb, 0x7, 0xffffffff, 0x4, 0x1f, 0x8, 0x3, 0x2ccae030, 0xffffffff, 0xdade, 0x1, 0xfe000000, 0x5, 0xceb, 0x7, 0x80000001, 0xff, 0xa5, 0x8, 0x401, 0x3ff, 0x3ff, 0x8001, 0x625, 0x1000, 0x8, 0x200, 0x2, 0x3, 0x6, 0x9, 0x9, 0x7fff, 0x5, 0x9, 0x3, 0x1ff, 0x0, 0x172851af, 0x8, 0x3, 0x20, 0x100, 0x6, 0x71380, 0x1f, 0x1, 0x5c3, 0x2, 0x7, 0x1000, 0x0, 0x8, 0x7fff, 0xe7, 0xc04, 0x3, 0x8, 0x401, 0x1, 0x1, 0x3ff, 0xe0, 0x8000, 0x3f, 0xff, 0x1, 0x1, 0x7, 0x200, 0x5bda, 0xbe, 0x2, 0x3f, 0x9, 0x7, 0x4, 0x3, 0x82, 0x3, 0xfa9e, 0x1ff, 0xffff, 0x7, 0x2, 0xffff, 0x7, 0xffff, 0x2, 0xfffffffa, 0x5, 0x5, 0x400, 0x433c7307, 0x9, 0x3, 0x8001, 0xfffffff7, 0x5, 0xfffffff7, 0x4, 0x2, 0x4, 0x1795, 0x30, 0xfffffff7, 0x40, 0xffffffff, 0x9, 0x1, 0x80000001, 0x1f, 0x4, 0x2, 0x0, 0x0, 0xe10, 0x5, 0xff, 0x1, 0x7, 0x26, 0xbc, 0x10001, 0xfffffff7, 0xef, 0x5, 0x101, 0xfffffffe, 0x80000000, 0x0, 0x3f, 0x6, 0x352ae443, 0x9, 0x4, 0x7, 0x7, 0x200, 0x0, 0x0, 0x0, 0x5, 0x80000001, 0x5, 0x80000000, 0x6, 0xc935, 0x1, 0x7f, 0x101, 0x1, 0x1, 0x1f, 0x3, 0x8, 0x9, 0xc00000, 0x3f, 0x81, 0xe2000000, 0x7fffffff, 0x5, 0xfffffffc, 0x38, 0xfff, 0x7, 0x1f, 0x7fffffff, 0x6, 0x8b, 0x40, 0x6, 0x1b5, 0xca84, 0x4, 0xffffffff, 0x5, 0x207, 0x1ff, 0xfffff288, 0x6, 0x5, 0xffffc000, 0x3, 0x9, 0x7ff, 0x9, 0x5540, 0x4c91, 0x9, 0x1, 0x1, 0x5, 0x4, 0x0, 0x4, 0x274, 0x0, 0x0, 0x10001, 0x0, 0x3, 0x9, 0x7d6, 0x40a, 0x7fff, 0x100, 0x8000, 0xa6, 0x2, 0x1f, 0xf3ee, 0x7fff, 0x60, 0x5, 0x5, 0x0, 0x9, 0x2, 0xfff, 0x8000, 0x5, 0x40, 0x469, 0xffffffe1, 0x1, 0x3, 0x4, 0x992a, 0x4, 0xd78, 0x6, 0x6, 0xfff, 0x12, 0xfffffff9, 0xfffffffc, 0x2, 0x25ccbd4b, 0x1, 0x9, 0x2, 0xff, 0xffffffff, 0x22, 0x7, 0x7fffffff, 0x3, 0x400, 0x7, 0x4, 0x4, 0x4, 0x3, 0x2, 0x9, 0x6, 0x6, 0x8f1, 0x3, 0x2, 0x7, 0x7, 0xca8, 0x7, 0x9, 0x401, 0x2, 0x8, 0x3ff, 0x4, 0x5, 0x0, 0x2, 0x101, 0x40, 0x3, 0x3, 0x6, 0x2, 0x1f, 0x3, 0x2, 0x1f, 0x80, 0x9, 0x9, 0xbd, 0x9, 0x40, 0x92, 0x200, 0x7, 0x29c5, 0x0, 0x9, 0x2, 0xf88, 0x816, 0x100, 0x7, 0x0, 0x7, 0x6, 0x4, 0x3ff, 0x62, 0xf5, 0x7, 0xff, 0x7ff, 0x8, 0x0, 0x4221bb2e, 0x4, 0x0, 0x207, 0x7, 0x4, 0x82, 0x1000, 0x0, 0xa46, 0x6, 0xe137, 0x3, 0x100, 0x8011, 0x5, 0x4, 0x0, 0xffffffff, 0x8, 0x8000, 0x10000, 0x3, 0x7, 0x4, 0x69, 0x2, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000, 0x7, 0x7, 0x0, 0x3, 0xce, 0x8, 0x20, 0x1ff, 0xa1e, 0x81, 0x41, 0x5, 0x7d5786b, 0x3, 0x5, 0x9, 0x1, 0x7b2, 0xd9, 0x1, 0x7, 0x80b, 0x81, 0x4, 0x60, 0x800, 0x7fffffff, 0x2, 0x9, 0x7, 0x6, 0x7, 0x5, 0x10001, 0xffff, 0x80000001, 0x7, 0x1, 0x3, 0x1000, 0x3ff, 0x5, 0x85, 0x1, 0xfe8c, 0x7088, 0xfff, 0x9, 0x1, 0x1, 0x4, 0x5, 0x20, 0x2, 0x101, 0xdb, 0x7, 0x800, 0x4, 0xa75, 0x0, 0x80000001, 0xffff, 0x0, 0x3ff, 0x1, 0x1, 0x8, 0xfff, 0x2, 0x6, 0x5, 0x2, 0x4, 0x8, 0xfff, 0x40, 0x8, 0x9, 0x5, 0xffffffff, 0x8, 0x587, 0x0, 0x9, 0xc7, 0x8, 0x7, 0x8, 0xfffffffe, 0x2, 0x6, 0x8, 0x7fff, 0x200, 0x4, 0x2, 0x8, 0x8, 0x10001, 0x4, 0x9, 0xef3, 0x5, 0x3, 0x8, 0xffffffe1, 0x80, 0x49, 0xfffff9ab, 0x1000, 0x348, 0x400, 0x9, 0x200, 0x9, 0xf37a, 0xe000, 0x8, 0x200, 0x3, 0x1ff, 0x7, 0x88, 0x2, 0x1, 0xc, 0xf7, 0x59, 0x1, 0x8, 0x3, 0x40, 0x3, 0x9, 0x4, 0x5b, 0x80000000, 0x0, 0x7, 0xfff, 0x1cb2, 0x2430b698, 0x7, 0x8000, 0x8, 0x8001, 0x80000001, 0x8001, 0x48, 0x3, 0xa3, 0x9, 0x3, 0x5, 0x8, 0x6, 0x8, 0x346, 0x3fc3, 0x1, 0x1, 0x0, 0x400, 0xe57, 0x200, 0x1, 0x80, 0x5, 0xfa1, 0x6, 0xffffffff, 0x4, 0x400, 0xffffffc1, 0x0, 0x0, 0x7, 0x3ff, 0x2, 0xa01, 0x58, 0xe86, 0x5, 0xffff0000, 0x1ff, 0x5, 0x6, 0x2, 0x2, 0x3c, 0x7fff, 0x4, 0x1, 0x20200000, 0x4, 0x5, 0x8001, 0x2, 0x3b, 0x9, 0x0, 0xdc, 0x8, 0x6, 0x0, 0x7, 0x9ec, 0x8, 0x3, 0x1000, 0x6, 0x0, 0x10000, 0x0, 0x7f, 0x5a, 0x2, 0x2, 0x4, 0x671b, 0x0, 0x97, 0xfff, 0x2, 0x7ff, 0xfffffffc, 0xff, 0x4, 0x3, 0x5980000, 0x943d, 0xf88, 0x2, 0xfffffffe, 0x8, 0x7, 0x4, 0x8001, 0x6, 0x97d, 0x7fffffff, 0x7fff, 0x9, 0x1, 0x1, 0x3ff, 0x8000, 0x40, 0x8, 0x200, 0x4, 0x1, 0x9, 0x9, 0x5a8c, 0x6, 0x8000, 0x6, 0xffffffff, 0xffffff8d, 0x7fff, 0x81, 0xff, 0x6, 0x6, 0x8, 0x4, 0x8, 0x10000, 0x4, 0x1f, 0x3f, 0x80000000, 0x200, 0x7, 0x7, 0xb49, 0x7, 0x5, 0x1, 0xbda, 0x98da, 0xdcf7, 0x7, 0x4, 0x3, 0x9, 0x80000000, 0x1, 0x2, 0x400, 0x9e, 0x59, 0x0, 0x2, 0x0, 0x658f, 0xd6a2, 0x62772d68, 0x5, 0x5, 0x7, 0x5, 0xff, 0x1, 0x1, 0x80, 0x8000, 0x0, 0x5, 0x7fff, 0x1ff, 0x4, 0x3, 0x4, 0x26ce, 0x20, 0x5, 0x7, 0x81, 0x1f, 0x9, 0x7ff, 0x6, 0x1, 0x7, 0x4, 0x80, 0x5f, 0x2, 0x200, 0x3, 0xff, 0x80000001], 0x6, 0x400, 0xa99}) (async) openat$vcs(0xffffff9c, &(0x7f0000000140), 0x90000, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@hyper, 0x9b45}, 0x1, 0x2, 0x4}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:45:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x900}]}]}, 0x30}}, 0x0) 20:45:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000000f0007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x1, 0x0, &(0x7f0000000140)) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[], 0x2c) 20:45:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9b4}]}]}, 0x30}}, 0x0) 20:45:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000600007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 676.338533][T23822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.361968][T23821] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:46 executing program 0: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) sync_file_range(r0, 0x5, 0x8, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) syz_open_pts(r2, 0x141200) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000001c0)) r4 = syz_open_pts(r1, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000300)={0x5, 0xe, 0xafc, 0x80, 0x43, 0xa1e, &(0x7f0000000280)="fb3ff81d5b2859182ba11e738f010def14d2154564fd21aed450a4b3d42ba5d82e83bfe1fc1e1a86b3259fa36ec1807559257b93e0680722fb35a02d021a1a54846bde"}) r5 = openat$damon_monitor_on(0xffffff9c, &(0x7f0000000040), 0x2400, 0x41) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, &(0x7f0000000100)={{r5}, 0x7, &(0x7f0000000080)=[0x9, 0xfff, 0xf184, 0x2, 0x3, 0x0, 0x1000], 0x7, 0x2, 0x1}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r6, 0x10e, 0x0, 0x0, &(0x7f0000000140)) ftruncate(r6, 0xff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) (async) sync_file_range(r0, 0x5, 0x8, 0x4) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) syz_open_pts(r2, 0x141200) (async) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000001c0)) (async) syz_open_pts(r1, 0x0) (async) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000300)={0x5, 0xe, 0xafc, 0x80, 0x43, 0xa1e, &(0x7f0000000280)="fb3ff81d5b2859182ba11e738f010def14d2154564fd21aed450a4b3d42ba5d82e83bfe1fc1e1a86b3259fa36ec1807559257b93e0680722fb35a02d021a1a54846bde"}) (async) openat$damon_monitor_on(0xffffff9c, &(0x7f0000000040), 0x2400, 0x41) (async) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, &(0x7f0000000100)={{r5}, 0x7, &(0x7f0000000080)=[0x9, 0xfff, 0xf184, 0x2, 0x3, 0x0, 0x1000], 0x7, 0x2, 0x1}) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$netlink(r6, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) ftruncate(r6, 0xff) (async) 20:45:46 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@any, 0x6}, {@any, 0x6}, 0x400, "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"}, 0x418, 0xffff4d09}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:45:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe00}]}]}, 0x30}}, 0x0) [ 676.430512][T23821] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000f00007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf00}]}]}, 0x30}}, 0x0) [ 676.553258][T23843] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:46 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x12, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000307000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:46 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@any, 0x6}, {@any, 0x6}, 0x400, "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"}, 0x418, 0xffff4d09}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@any, 0x6}, {@any, 0x6}, 0x400, "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"}, 0x418, 0xffff4d09}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:45:46 executing program 0: r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) sync_file_range(r0, 0x5, 0x8, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async, rerun: 32) syz_open_pts(r2, 0x141200) (async, rerun: 32) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000001c0)) (async) r4 = syz_open_pts(r1, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000300)={0x5, 0xe, 0xafc, 0x80, 0x43, 0xa1e, &(0x7f0000000280)="fb3ff81d5b2859182ba11e738f010def14d2154564fd21aed450a4b3d42ba5d82e83bfe1fc1e1a86b3259fa36ec1807559257b93e0680722fb35a02d021a1a54846bde"}) (async) r5 = openat$damon_monitor_on(0xffffff9c, &(0x7f0000000040), 0x2400, 0x41) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, &(0x7f0000000100)={{r5}, 0x7, &(0x7f0000000080)=[0x9, 0xfff, 0xf184, 0x2, 0x3, 0x0, 0x1000], 0x7, 0x2, 0x1}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r6, 0x10e, 0x0, 0x0, &(0x7f0000000140)) ftruncate(r6, 0xff) 20:45:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f00}]}]}, 0x30}}, 0x0) 20:45:46 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffd2e549"], 0x2c) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="94004000ffffffffffff0802110000010770002017085cab924c1c4c23a6002065000c8e94e62b98e96d00f0a2ff5d9b073f422848cc00d0f7f5fe49f77d8adbf9b200a0061affbf92be01746526005023003da8c3929da1c4930090190ea7cae4d70d430179008017005624249f1f2d4fc54fa6ae14f1a6fd1472233e700f329a2221d927ff113599c0704fff6914eb96c3ba096c30a81f1c757f10f6"], 0x72) 20:45:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000ce0907000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6000}]}]}, 0x30}}, 0x0) [ 677.247263][T23864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.266947][T23858] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:47 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@any, 0x6}, {@any, 0x6}, 0x400, "94cfc8c6b2c53edb83b814236f8b641bfb48ad8beccc8907d2809e5b2eec9defdb1ee727450ec7f347328791a097bd9dfbed085b4ee6e7f27ab786ba9815144408b1c29ee521487a970fd2d480e314174b0ef844ed17387e269c1134ed53f92dace740d166ba28e93e238d4c4b9fd83a5f1c631ab11d20ce4d0a18fba6b2f79bcca431220302e8164cef605ae502596c8fe1d427c6dcd123a37c0a13d8a73378cc5b82444a175f0a6e02875bf9e69aa5e71c991e3217965182595fbcf7fde97a71e8774e21bc79bebb8f4ce22d79625ba1ff4399b57f67e58e8843644401419d86ccaffdb0141ac30be016f125af1e2b63c7fb1cd7e0a841a50084f6e8684d715f152e4e150dda0d599425d6e05f3b50f7fccb82c3f57e5029f6e044f3dd4d8468d4e3b2a1a3bd0c6e8f41c71dd544fc508bb918ca4d7653bca7f7b3c3a54c9033c1afaf27e355a87d229fbfcb43267599d0488185a0e4313a6dbb9d12d3f4431709b45c8a6748de33fec31694dd8abf2c8d841de1d0fc36cf9a42d60f18fd298691fb6c43a2a6080c029a68b064eafe22fb6ea669021d0bd49d822d5ebf5a1b39bdfec6c900e5b1a981f988672d7c9b17e7473775a747d1ad7100474b6c43adfc67a07d9f9415fe821688191dbba8f66c811de0f832f087e9f17fa0c7d26f2f4884c97ecb60e25abd2904d6019f6f11b9821bf824c4eb834312c868066daee14a7cbba4c2bf4c8570b5a55972b59bbe5b5ef79bd6adee367f2b514c33c80907d9e66204fdde8e65705ebf208979cdc2726042f0406a11c8aee08bdfe8ef16e320bd7b2ddbacb9d91f2472514daaa62d5e15ee06b7c0f0cda57e26e2d244e9bb446296fa46c37c68e94f912b2977eff08bc595a028146f1b5ed15af20232cd65de13b5c92ca8c34369572ce26eccb5f8178fed49522a9421c093bd327ec4a8f2afe59954c8b17cb41ba671021073d6a52a3201ecde017e0b4dbbb5e7db615b288258b8aef19e9086f43abe4ce624a7a3ca6081529abf6263089a122fcb1557759a9da320e2e1493d774a4c64a3203ffe111dab905a9d8485d6c83cdd7e35183b6c3bc6651084ce5986cb6dc14ea01396fee39aedbb5811cfded0719c565c300da6d2ac18574f6ca9c6cb0d7ec59523aa061c7f188364c41ceeb4c20422ca17548e215ef3055b2d1ca9c5d2b18e071b7aab1bd9520e84ed5fd9a31b5bba9a1b06428d63041491cd4a61cb5406420e95e1b70fe45aefc514a55ec993840876fb57c56e773643e621deaba09978c7472f1df0972c7f17a2fc80eb600bef88bb5ce9b9c63f142da8d311435f538976a53942c3f8661ef5ade3b622d64484d605b6eeafde8e8c5427e0b20a11d14ac4662087b607759a7eeed560213710cd64e34d2e34c6ccc5f441c76f65a303c293b5137a7009440c2200ed1ddaf978aa23fd3c78"}, 0x418, 0xffff4d09}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (rerun: 64) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:45:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9a20, 0x0, "00000000000000070000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x4) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/72) openat$dlm_control(0xffffff9c, &(0x7f00000001c0), 0x30000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000180)) [ 677.316563][T23876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000e07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb409}]}]}, 0x30}}, 0x0) [ 677.428516][T23888] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:47 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x13, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000c00e07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf000}]}]}, 0x30}}, 0x0) 20:45:47 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000057300)={{0x0, 0x8, 0x80000000, 0x2, 0x5, 0xfffffffffffffffb, 0x1, 0x80, 0x4, 0x2, 0xd6, 0x3, 0x20, 0x8, 0x246ee787}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000058300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000585c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000587c0)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}], 0x7f, "76ba40453dddc1"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000100)={{r7, 0x7f, 0x80000000, 0x30, 0x3081a7ea, 0x40, 0x2, 0x9, 0x3, 0x9, 0x2, 0x3, 0xcd, 0x0, 0x7}, 0x8, [0x0]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:45:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffd2e549"], 0x2c) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="94004000ffffffffffff0802110000010770002017085cab924c1c4c23a6002065000c8e94e62b98e96d00f0a2ff5d9b073f422848cc00d0f7f5fe49f77d8adbf9b200a0061affbf92be01746526005023003da8c3929da1c4930090190ea7cae4d70d430179008017005624249f1f2d4fc54fa6ae14f1a6fd1472233e700f329a2221d927ff113599c0704fff6914eb96c3ba096c30a81f1c757f10f6"], 0x72) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffd2e549"], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="94004000ffffffffffff0802110000010770002017085cab924c1c4c23a6002065000c8e94e62b98e96d00f0a2ff5d9b073f422848cc00d0f7f5fe49f77d8adbf9b200a0061affbf92be01746526005023003da8c3929da1c4930090190ea7cae4d70d430179008017005624249f1f2d4fc54fa6ae14f1a6fd1472233e700f329a2221d927ff113599c0704fff6914eb96c3ba096c30a81f1c757f10f6"], 0x72) (async) 20:45:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000f07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 678.171007][T23903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.193913][T23903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x30000}]}]}, 0x30}}, 0x0) 20:45:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9a20, 0x0, "00000000000000070000000000ddc1517600"}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) splice(r1, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x4) (async, rerun: 64) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/72) (async, rerun: 64) openat$dlm_control(0xffffff9c, &(0x7f00000001c0), 0x30000, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000180)) [ 678.227798][T23903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.248433][T23900] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:48 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000057300)={{0x0, 0x8, 0x80000000, 0x2, 0x5, 0xfffffffffffffffb, 0x1, 0x80, 0x4, 0x2, 0xd6, 0x3, 0x20, 0x8, 0x246ee787}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000058300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000585c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000587c0)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}], 0x7f, "76ba40453dddc1"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000100)={{r7, 0x7f, 0x80000000, 0x30, 0x3081a7ea, 0x40, 0x2, 0x9, 0x3, 0x9, 0x2, 0x3, 0xcd, 0x0, 0x7}, 0x8, [0x0]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101400) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000057300)={{0x0, 0x8, 0x80000000, 0x2, 0x5, 0xfffffffffffffffb, 0x1, 0x80, 0x4, 0x2, 0xd6, 0x3, 0x20, 0x8, 0x246ee787}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000058300)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000585c0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000587c0)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}], 0x7f, "76ba40453dddc1"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000100)={{r7, 0x7f, 0x80000000, 0x30, 0x3081a7ea, 0x40, 0x2, 0x9, 0x3, 0x9, 0x2, 0x3, 0xcd, 0x0, 0x7}, 0x8, [0x0]}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) [ 678.280595][T23904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x34000}]}]}, 0x30}}, 0x0) 20:45:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000003f07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 678.357080][T23913] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400300}]}]}, 0x30}}, 0x0) 20:45:48 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x14, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:48 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x101400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000057300)={{0x0, 0x8, 0x80000000, 0x2, 0x5, 0xfffffffffffffffb, 0x1, 0x80, 0x4, 0x2, 0xd6, 0x3, 0x20, 0x8, 0x246ee787}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000058300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000585c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000587c0)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}], 0x7f, "76ba40453dddc1"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000100)={{r7, 0x7f, 0x80000000, 0x30, 0x3081a7ea, 0x40, 0x2, 0x9, 0x3, 0x9, 0x2, 0x3, 0xcd, 0x0, 0x7}, 0x8, [0x0]}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:45:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9a20, 0x0, "00000000000000070000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x4) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/72) openat$dlm_control(0xffffff9c, &(0x7f00000001c0), 0x30000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000180)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9a20, 0x0, "00000000000000070000000000ddc1517600"}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r1, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000140)=0x4) (async) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/72) (async) openat$dlm_control(0xffffff9c, &(0x7f00000001c0), 0x30000, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) (async) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000180)) (async) 20:45:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb7aaaa}]}]}, 0x30}}, 0x0) 20:45:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000006007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:48 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffd2e549"], 0x2c) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="94004000ffffffffffff0802110000010770002017085cab924c1c4c23a6002065000c8e94e62b98e96d00f0a2ff5d9b073f422848cc00d0f7f5fe49f77d8adbf9b200a0061affbf92be01746526005023003da8c3929da1c4930090190ea7cae4d70d430179008017005624249f1f2d4fc54fa6ae14f1a6fd1472233e700f329a2221d927ff113599c0704fff6914eb96c3ba096c30a81f1c757f10f6"], 0x72) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffd2e549"], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="94004000ffffffffffff0802110000010770002017085cab924c1c4c23a6002065000c8e94e62b98e96d00f0a2ff5d9b073f422848cc00d0f7f5fe49f77d8adbf9b200a0061affbf92be01746526005023003da8c3929da1c4930090190ea7cae4d70d430179008017005624249f1f2d4fc54fa6ae14f1a6fd1472233e700f329a2221d927ff113599c0704fff6914eb96c3ba096c30a81f1c757f10f6"], 0x72) (async) 20:45:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf0ffff}]}]}, 0x30}}, 0x0) [ 679.129043][T23945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000000ec007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 679.181946][T23953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:48 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@any, 0xfffffff9}, @my=0x1, 0x88a7fa0dd05c39b4, 0x8001, 0x100, 0x7, 0xfffffffffffffffc, 0x4433, 0x7fffffff}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0x10000) [ 679.232529][T23953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000000}]}]}, 0x30}}, 0x0) 20:45:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000009ce07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:49 executing program 0: syz_usb_connect(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001f96d240dc170282917d0102030109023b001000000031bfffceac93f2c52a208bc69bd0001d040000010e010080ff00000000000007240a00", @ANYRES16=0x0], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x8000, 0x20, 0x100, 0xd244, 0xb, "5141639cdcc50128759249037596dde05ee0a0"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 679.290728][T23955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.318904][T23976] Failed to get privilege flags for destination (handle=0x0:0x0) [ 679.680060][T18772] usb 1-1: new high-speed USB device number 14 using dummy_hcd 20:45:49 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x15, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2000000}]}]}, 0x30}}, 0x0) 20:45:49 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@any, 0xfffffff9}, @my=0x1, 0x88a7fa0dd05c39b4, 0x8001, 0x100, 0x7, 0xfffffffffffffffc, 0x4433, 0x7fffffff}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async, rerun: 64) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async, rerun: 64) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async, rerun: 64) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0x10000) 20:45:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000f007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) bind(r0, &(0x7f0000000080)=@xdp={0x2c, 0x9, r3, 0x25}, 0x80) [ 680.039778][T18772] usb 1-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 680.077502][T18772] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 16 20:45:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3000000}]}]}, 0x30}}, 0x0) 20:45:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000207000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 680.097753][T23991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:49 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@any, 0xfffffff9}, @my=0x1, 0x88a7fa0dd05c39b4, 0x8001, 0x100, 0x7, 0xfffffffffffffffc, 0x4433, 0x7fffffff}) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0x10000) 20:45:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4000000}]}]}, 0x30}}, 0x0) 20:45:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000307000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:49 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@local}}) [ 680.259901][T18772] usb 1-1: New USB device found, idVendor=17dc, idProduct=8202, bcdDevice=7d.91 [ 680.279185][T18772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.314936][T18772] usb 1-1: Product: syz [ 680.332256][T18772] usb 1-1: Manufacturer: syz [ 680.348114][T18772] usb 1-1: SerialNumber: syz [ 680.366764][T18772] usb 1-1: config 0 descriptor?? [ 680.648951][T18772] usb 1-1: USB disconnect, device number 14 20:45:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000407000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5000000}]}]}, 0x30}}, 0x0) 20:45:50 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async, rerun: 64) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@local}}) 20:45:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) bind(r0, &(0x7f0000000080)=@xdp={0x2c, 0x9, r3, 0x25}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x2c) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) (async) socket(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) (async) bind(r0, &(0x7f0000000080)=@xdp={0x2c, 0x9, r3, 0x25}, 0x80) (async) 20:45:50 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x16, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:50 executing program 0: syz_usb_connect(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001f96d240dc170282917d0102030109023b001000000031bfffceac93f2c52a208bc69bd0001d040000010e010080ff00000000000007240a00", @ANYRES16=0x0], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x8000, 0x20, 0x100, 0xd244, 0xb, "5141639cdcc50128759249037596dde05ee0a0"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) syz_usb_connect(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001f96d240dc170282917d0102030109023b001000000031bfffceac93f2c52a208bc69bd0001d040000010e010080ff00000000000007240a00", @ANYRES16=0x0], 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x8000, 0x20, 0x100, 0xd244, 0xb, "5141639cdcc50128759249037596dde05ee0a0"}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) 20:45:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000807000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:50 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async, rerun: 32) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@local}}) (rerun: 32) [ 681.202670][T24019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6000000}]}]}, 0x30}}, 0x0) 20:45:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000e07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x2c) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) (async) bind(r0, &(0x7f0000000080)=@xdp={0x2c, 0x9, r3, 0x25}, 0x80) 20:45:51 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@my=0x0, 0x2}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@my=0x1, 0x2}, @my=0x1, 0xf, 0x30, 0x6, 0xfff, 0x1, 0xb4, 0x6}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@any, 0x3}, {@hyper, 0x81}, 0x400, "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"}, 0x418, 0x4}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:45:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000f07000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7000000}]}]}, 0x30}}, 0x0) 20:45:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000380)=ANY=[@ANYBLOB="c00000000802110000000802110000314eb7154f01ff01ffffffff9a833286432c8152ccede6cd8b4b0ab0d4e5c716a196c9140376b01e4de4a37f2d22f454a093a0d8e583e6e40c06de000000000000000000"], 0x2c) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000140)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x37f}, @broadcast, @device_b, @initial, {0x6, 0xf80}}, 0x100000000, @random=0xffff, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x3, 0x40, 0x3f, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x3, 0x3, 0x0, 0xb6, 0x0, 0x0, 0x1, 0x2}, 0x8, 0x4, 0x8}}, @void, @void, [{0xdd, 0xf3, "4209348dfd3e664707f642778b551791af6e20f3772cf29093bb711ffbccb9f9e6f5b7681d98c5203f73e5acfae692019b2575aeb07571ecb152687936da5c92af9e778f45737ec3be539c4522bef5dc9e6aa9c81490a61d3f00674d6e84e04efe96e6c3644cae11e789a2b8b037b8cee0d0a31ab2c90dd4ac9d7558a51ff2aaf1b711ad6f6df68f86dcf3f5a2945fa300be28f9e1961286e720ae99e6a39a189675e61f2655d43bf44d2cbd6f1f95383ab576a0517c56cb05c1533d7eda6dc9a5bbd79e924ddda23e4f667bba833abd6664b8b909a58fe72f62e7f879772e88853a1cbfec89f1cca2cd04aad525a8e746f800"}, {0xdd, 0x5f, "f49fee28bca823e6c096dc3f9e41cb8aaeb1146085ec27b88c0f002cb23a5bf028489e20be486418d53345c3b854f54018e689ec58136e9e4f5095ac1f823111f5da316588c1213553a4c81da7789ae0b03120bc1374ab44d94293c4ffbe65"}, {0xdd, 0x61, "88e59fcf277a7121395b792409d783dc97566ee499b7d149b2b68951c6c2c7bde547aab0a95364b8b3a1fc8a9233567ecdbdaec77defccd6cc07f000cf9fd28ac882665305aca8eada20f21325c35b53acdebb56dd0da2bb2d09e34baa2674762f"}]}, 0x209) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000000c0)=ANY=[@ANYBLOB="50106600ffffffffffff0802110000005050505050501600010000000100000064002020000d2f80e09519a9f156c43bb5966e0301af04060801010001002d1a10001509000000000000000200020003000000010001000000037206030303030303710701ff0100003f01"], 0x6b) 20:45:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000}]}]}, 0x30}}, 0x0) [ 681.430651][T24053] Failed to get privilege flags for destination (handle=0x0:0x0) [ 681.527191][T14837] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 681.542501][T24063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.569994][T24063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.592594][T24063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.929891][T14837] usb 1-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 681.940479][T14837] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 16 20:45:51 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x17, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) [ 682.129906][T14837] usb 1-1: New USB device found, idVendor=17dc, idProduct=8202, bcdDevice=7d.91 [ 682.142832][T14837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.150926][T14837] usb 1-1: Product: syz [ 682.155713][T14837] usb 1-1: Manufacturer: syz [ 682.164311][T14837] usb 1-1: SerialNumber: syz [ 682.171296][T14837] usb 1-1: config 0 descriptor?? 20:45:52 executing program 0: syz_usb_connect(0x0, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001f96d240dc170282917d0102030109023b001000000031bfffceac93f2c52a208bc69bd0001d040000010e010080ff00000000000007240a00", @ANYRES16=0x0], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x8000, 0x20, 0x100, 0xd244, 0xb, "5141639cdcc50128759249037596dde05ee0a0"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:45:52 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@my=0x0, 0x2}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@my=0x1, 0x2}, @my=0x1, 0xf, 0x30, 0x6, 0xfff, 0x1, 0xb4, 0x6}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@any, 0x3}, {@hyper, 0x81}, 0x400, "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"}, 0x418, 0x4}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@my=0x0, 0x2}) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@my=0x1, 0x2}, @my=0x1, 0xf, 0x30, 0x6, 0xfff, 0x1, 0xb4, 0x6}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@any, 0x3}, {@hyper, 0x81}, 0x400, "a7615c827ae03fd96e46976329c9da327cd12eb2b1e99dfe6f72fe393b045f135840677dcd55ee0830eb7c5e23a3ac9e9d25e0fa435c2c3dd0e5f1a8e3fa08b9edce731f25ef555aa6978b1014e4c79a9e5c11339070269411b55dfc038a278f09a66318eae57cc89f9851e1b4d94ecc8d81e585f64128c374e2c87f21929bd98df0afd165e205c279e246a0e94bd4981b5a16577236ee4f3d52f15e74c66f8fc1ee5fc2dc048582525eec22f9db55a3dbcdc330edd842b1b0f3449b3399faff0da8baeeeab96da07f7a15d5dc4dd18603c309522a22c7e40a820a25a598d97cd1204412bb1004f8d1eae89e3aa32ccd87f57c7ba78b584a78947c0580fd34422510d7db764a12f24a26508d0fadb17ffcbe01ed89a69d049e16dca6a6c845602f2f81bb379e09c63a8d93bba6a358e748b01ab55b772975f79d962659909e86999586864a65470ab5b06f082a3e3f6c13c281e77bc977acae0cfa7a6db24bac0452a052381f7d16c2e0f78360142c106cfe22043fd1f2ae590fce460b66ccedf339234ad17b4f7898c36b02555297b8c344faddabf69942199fcb1017b0a070493625571f603f363494dbbd2cae39ee62c2ffce2709f425c7efd87a1db9aadd1d2c97c64742c314a0f4dfb36138187ab9eb6620fd657cd780acff8594c98cd732808ec364f7a46e95932d6d9aa7be4bcd33294b8a50e4d21f9cae848d0a7ffdd67beeeff0b4cb9a3ee1c9d0baa3c7f10c6962f5afa1929b3c7e49619a75a7d2af9e8be27c04a233494073163738d1a8cc23cbe84f3e750a39e034ef4c13de274516c426892bd0eb89a233d106b272583fc95133f00de833fc994162d4396ce6cd6f45fbc7bba3e6f34570244448e5c87d3205523cd51dec89c11a3288bf288550d37cef592ed9229ad66df1eab7046a12d43367a6feb9205e896c4ffd5e0c8487366320cc00503fd9a5b0e0f4df4a3ecc5b6ab6c745f551ec9290de48543e4294c6dbe9b3a3d294be19d08d536b85385f02b28e08700537f668740045fc11a66a69bccb030328f5b9c64ce9d06962a83249d700f95247e2c186f2a1340a377f392df5064f0fd237310bbfa75fe3ad5bcb99acdbc833667c8e827dfc69b5a3d599c7584dae1c411115515325af6cfcab96b9f1b50543e8adb5546519ae11b5a2c9103587f9533646f5227e6e9278e1651cc2926cb2e176497f06a7b3cf3af5976816a5c87d03ff325a4d27501085b968a4ce5dcea165bf42fdcfec16ec89a914f8ffed3cf0469c587a1c7dc0d5e0a671356a89d76683a3d0c030fcc782883e9dff995a7ecded086fd0cd92978e3cca1f47081ddfea44adff4cd31f1e93408b4e906dada3d5455cb831e315f0f37564aa40b7ca1bbaa6522ba38c60dcf320587971834c840958e99dfb616bca53ddb5d4ea654667c29c45419585d7639971daab"}, 0x418, 0x4}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:45:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000006007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9000000}]}]}, 0x30}}, 0x0) 20:45:52 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000380)=ANY=[@ANYBLOB="c00000000802110000000802110000314eb7154f01ff01ffffffff9a833286432c8152ccede6cd8b4b0ab0d4e5c716a196c9140376b01e4de4a37f2d22f454a093a0d8e583e6e40c06de000000000000000000"], 0x2c) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000140)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x37f}, @broadcast, @device_b, @initial, {0x6, 0xf80}}, 0x100000000, @random=0xffff, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x3, 0x40, 0x3f, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x3, 0x3, 0x0, 0xb6, 0x0, 0x0, 0x1, 0x2}, 0x8, 0x4, 0x8}}, @void, @void, [{0xdd, 0xf3, "4209348dfd3e664707f642778b551791af6e20f3772cf29093bb711ffbccb9f9e6f5b7681d98c5203f73e5acfae692019b2575aeb07571ecb152687936da5c92af9e778f45737ec3be539c4522bef5dc9e6aa9c81490a61d3f00674d6e84e04efe96e6c3644cae11e789a2b8b037b8cee0d0a31ab2c90dd4ac9d7558a51ff2aaf1b711ad6f6df68f86dcf3f5a2945fa300be28f9e1961286e720ae99e6a39a189675e61f2655d43bf44d2cbd6f1f95383ab576a0517c56cb05c1533d7eda6dc9a5bbd79e924ddda23e4f667bba833abd6664b8b909a58fe72f62e7f879772e88853a1cbfec89f1cca2cd04aad525a8e746f800"}, {0xdd, 0x5f, "f49fee28bca823e6c096dc3f9e41cb8aaeb1146085ec27b88c0f002cb23a5bf028489e20be486418d53345c3b854f54018e689ec58136e9e4f5095ac1f823111f5da316588c1213553a4c81da7789ae0b03120bc1374ab44d94293c4ffbe65"}, {0xdd, 0x61, "88e59fcf277a7121395b792409d783dc97566ee499b7d149b2b68951c6c2c7bde547aab0a95364b8b3a1fc8a9233567ecdbdaec77defccd6cc07f000cf9fd28ac882665305aca8eada20f21325c35b53acdebb56dd0da2bb2d09e34baa2674762f"}]}, 0x209) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000000c0)=ANY=[@ANYBLOB="50106600ffffffffffff0802110000005050505050501600010000000100000064002020000d2f80e09519a9f156c43bb5966e0301af04060801010001002d1a10001509000000000000000200020003000000010001000000037206030303030303710701ff0100003f01"], 0x6b) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000380)=ANY=[@ANYBLOB="c00000000802110000000802110000314eb7154f01ff01ffffffff9a833286432c8152ccede6cd8b4b0ab0d4e5c716a196c9140376b01e4de4a37f2d22f454a093a0d8e583e6e40c06de000000000000000000"], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000140)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x37f}, @broadcast, @device_b, @initial, {0x6, 0xf80}}, 0x100000000, @random=0xffff, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x3, 0x40, 0x3f, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x3, 0x3, 0x0, 0xb6, 0x0, 0x0, 0x1, 0x2}, 0x8, 0x4, 0x8}}, @void, @void, [{0xdd, 0xf3, "4209348dfd3e664707f642778b551791af6e20f3772cf29093bb711ffbccb9f9e6f5b7681d98c5203f73e5acfae692019b2575aeb07571ecb152687936da5c92af9e778f45737ec3be539c4522bef5dc9e6aa9c81490a61d3f00674d6e84e04efe96e6c3644cae11e789a2b8b037b8cee0d0a31ab2c90dd4ac9d7558a51ff2aaf1b711ad6f6df68f86dcf3f5a2945fa300be28f9e1961286e720ae99e6a39a189675e61f2655d43bf44d2cbd6f1f95383ab576a0517c56cb05c1533d7eda6dc9a5bbd79e924ddda23e4f667bba833abd6664b8b909a58fe72f62e7f879772e88853a1cbfec89f1cca2cd04aad525a8e746f800"}, {0xdd, 0x5f, "f49fee28bca823e6c096dc3f9e41cb8aaeb1146085ec27b88c0f002cb23a5bf028489e20be486418d53345c3b854f54018e689ec58136e9e4f5095ac1f823111f5da316588c1213553a4c81da7789ae0b03120bc1374ab44d94293c4ffbe65"}, {0xdd, 0x61, "88e59fcf277a7121395b792409d783dc97566ee499b7d149b2b68951c6c2c7bde547aab0a95364b8b3a1fc8a9233567ecdbdaec77defccd6cc07f000cf9fd28ac882665305aca8eada20f21325c35b53acdebb56dd0da2bb2d09e34baa2674762f"}]}, 0x209) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000000c0)=ANY=[@ANYBLOB="50106600ffffffffffff0802110000005050505050501600010000000100000064002020000d2f80e09519a9f156c43bb5966e0301af04060801010001002d1a10001509000000000000000200020003000000010001000000037206030303030303710701ff0100003f01"], 0x6b) (async) [ 682.428286][ T3678] usb 1-1: USB disconnect, device number 15 [ 682.463746][T24078] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000f000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 682.468705][T24081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe000000}]}]}, 0x30}}, 0x0) 20:45:52 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@my=0x0, 0x2}) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@my=0x1, 0x2}, @my=0x1, 0xf, 0x30, 0x6, 0xfff, 0x1, 0xb4, 0x6}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@any, 0x3}, {@hyper, 0x81}, 0x400, "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"}, 0x418, 0x4}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) [ 682.511746][T24091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.546465][T24081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000f000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 682.584897][T24091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf000000}]}]}, 0x30}}, 0x0) [ 682.642698][T24102] Failed to get privilege flags for destination (handle=0x0:0x0) [ 682.650466][T24081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.655549][T24096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f000000}]}]}, 0x30}}, 0x0) 20:45:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007020005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 682.948808][ T3678] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 683.309893][ T3678] usb 1-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 683.320239][ T3678] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 683.480783][ T3678] usb 1-1: New USB device found, idVendor=17dc, idProduct=8202, bcdDevice=7d.91 [ 683.493500][ T3678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.501834][ T3678] usb 1-1: Product: syz [ 683.506024][ T3678] usb 1-1: Manufacturer: syz [ 683.510976][ T3678] usb 1-1: SerialNumber: syz [ 683.519850][ T3678] usb 1-1: config 0 descriptor?? [ 683.765851][T14837] usb 1-1: USB disconnect, device number 16 20:45:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fadvise64(r0, 0x9e9, 0x10001, 0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x6, [0x8, 0x5, 0x41, 0x8000, 0xfffffffffffffc9e, 0x81]}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) 20:45:53 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x18, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x60000000}]}]}, 0x30}}, 0x0) 20:45:53 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000180)={{@any, 0xfffffffc}, @local, 0x4, 0x1, 0x6, 0xcdbb, 0x6, 0x5, 0x80}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:45:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007030005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:53 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000380)=ANY=[@ANYBLOB="c00000000802110000000802110000314eb7154f01ff01ffffffff9a833286432c8152ccede6cd8b4b0ab0d4e5c716a196c9140376b01e4de4a37f2d22f454a093a0d8e583e6e40c06de000000000000000000"], 0x2c) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000140)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x37f}, @broadcast, @device_b, @initial, {0x6, 0xf80}}, 0x100000000, @random=0xffff, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x3, 0x40, 0x3f, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x0, 0x0, {0x3, 0x3, 0x0, 0xb6, 0x0, 0x0, 0x1, 0x2}, 0x8, 0x4, 0x8}}, @void, @void, [{0xdd, 0xf3, "4209348dfd3e664707f642778b551791af6e20f3772cf29093bb711ffbccb9f9e6f5b7681d98c5203f73e5acfae692019b2575aeb07571ecb152687936da5c92af9e778f45737ec3be539c4522bef5dc9e6aa9c81490a61d3f00674d6e84e04efe96e6c3644cae11e789a2b8b037b8cee0d0a31ab2c90dd4ac9d7558a51ff2aaf1b711ad6f6df68f86dcf3f5a2945fa300be28f9e1961286e720ae99e6a39a189675e61f2655d43bf44d2cbd6f1f95383ab576a0517c56cb05c1533d7eda6dc9a5bbd79e924ddda23e4f667bba833abd6664b8b909a58fe72f62e7f879772e88853a1cbfec89f1cca2cd04aad525a8e746f800"}, {0xdd, 0x5f, "f49fee28bca823e6c096dc3f9e41cb8aaeb1146085ec27b88c0f002cb23a5bf028489e20be486418d53345c3b854f54018e689ec58136e9e4f5095ac1f823111f5da316588c1213553a4c81da7789ae0b03120bc1374ab44d94293c4ffbe65"}, {0xdd, 0x61, "88e59fcf277a7121395b792409d783dc97566ee499b7d149b2b68951c6c2c7bde547aab0a95364b8b3a1fc8a9233567ecdbdaec77defccd6cc07f000cf9fd28ac882665305aca8eada20f21325c35b53acdebb56dd0da2bb2d09e34baa2674762f"}]}, 0x209) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000000c0)=ANY=[@ANYBLOB="50106600ffffffffffff0802110000005050505050501600010000000100000064002020000d2f80e09519a9f156c43bb5966e0301af04060801010001002d1a10001509000000000000000200020003000000010001000000037206030303030303710701ff0100003f01"], 0x6b) 20:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007040005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9effffff}]}]}, 0x30}}, 0x0) [ 684.301620][T24120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.322670][T24120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xaaaab700}]}]}, 0x30}}, 0x0) [ 684.350178][T24120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.364414][T24125] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb4090000}]}]}, 0x30}}, 0x0) 20:45:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fadvise64(r0, 0x9e9, 0x10001, 0x3) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) socket$qrtr(0x2a, 0x2, 0x0) (async) r1 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x6, [0x8, 0x5, 0x41, 0x8000, 0xfffffffffffffc9e, 0x81]}) (async) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) 20:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007080005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf0ffffff}]}]}, 0x30}}, 0x0) 20:45:54 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x19, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fadvise64(r0, 0x9e9, 0x10001, 0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x6, [0x8, 0x5, 0x41, 0x8000, 0xfffffffffffffc9e, 0x81]}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) fadvise64(r0, 0x9e9, 0x10001, 0x3) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x6, [0x8, 0x5, 0x41, 0x8000, 0xfffffffffffffc9e, 0x81]}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) (async) 20:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000000000070e0005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffff000}]}]}, 0x30}}, 0x0) 20:45:54 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @initial, {0xf, 0x40}}, @random="3b54ffdd2950adff032008d03636e5a2d9827b75449735734e6291de65c88811fb89475584e907a3cbe09a53142c2adabd5ba15114cc489759375cffd14694cc30b5bdb46780cd90d764e0da45ca758fe145d278cdda7d85922a3b373c7626c6e6"}, 0x79) 20:45:54 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000180)={{@any, 0xfffffffc}, @local, 0x4, 0x1, 0x6, 0xcdbb, 0x6, 0x5, 0x80}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000180)={{@any, 0xfffffffc}, @local, 0x4, 0x1, 0x6, 0xcdbb, 0x6, 0x5, 0x80}) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) (async) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:45:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000000000070f0005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffff7f}]}]}, 0x30}}, 0x0) [ 685.216647][T24148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:54 executing program 0: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 685.259061][T24162] Failed to get privilege flags for destination (handle=0x0:0x0) 20:45:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffff9e}]}]}, 0x30}}, 0x0) 20:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007600005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:45:55 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000180)={{@any, 0xfffffffc}, @local, 0x4, 0x1, 0x6, 0xcdbb, 0x6, 0x5, 0x80}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) [ 685.601377][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.607707][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 20:45:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffff0}]}]}, 0x30}}, 0x0) 20:45:55 executing program 0: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:45:55 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1a, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:45:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007f00005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 686.293055][ T9488] device hsr_slave_0 left promiscuous mode [ 686.299328][ T9488] device hsr_slave_1 left promiscuous mode [ 686.306973][ T9488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.314970][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.324853][ T9488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.333676][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.343794][ T9488] device bridge_slave_1 left promiscuous mode [ 686.350185][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.358480][ T9488] device bridge_slave_0 left promiscuous mode [ 686.365310][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.377399][ T9488] device veth1_macvtap left promiscuous mode [ 686.383599][ T9488] device veth0_macvtap left promiscuous mode [ 686.389966][ T9488] device veth1_vlan left promiscuous mode [ 686.395745][ T9488] device veth0_vlan left promiscuous mode [ 686.587881][ T9488] team0 (unregistering): Port device team_slave_1 removed [ 686.603856][ T9488] team0 (unregistering): Port device team_slave_0 removed [ 686.617405][ T9488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.633200][ T9488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.718643][ T9488] bond0 (unregistering): Released all slaves [ 690.249858][ T47] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 692.649073][ T3640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 692.659163][ T3640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 692.669118][ T3640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 692.677281][ T3640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 692.685029][ T3640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 692.692460][ T3640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 692.782352][T24205] chnl_net:caif_netlink_parms(): no params data found [ 692.825900][T24205] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.833278][T24205] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.846553][T24205] device bridge_slave_0 entered promiscuous mode [ 692.854631][T24205] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.862854][T24205] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.870831][T24205] device bridge_slave_1 entered promiscuous mode [ 692.900703][T24205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.911989][T24205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.937376][T24205] team0: Port device team_slave_0 added [ 692.945510][T24205] team0: Port device team_slave_1 added [ 692.967512][T24205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.974573][T24205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.001917][T24205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.014484][T24205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.021858][T24205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.048810][T24205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.079496][T24205] device hsr_slave_0 entered promiscuous mode [ 693.086604][T24205] device hsr_slave_1 entered promiscuous mode [ 693.162825][T24205] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.169991][T24205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.177333][T24205] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.184479][T24205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.234380][T24205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.247120][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 693.256311][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.264388][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.273858][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 693.287857][T24205] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.300843][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 693.309250][T14837] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.316391][T14837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.330570][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 693.339773][T18772] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.346857][T18772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.368221][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 693.378845][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 693.397323][T24205] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 693.408068][T24205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.423068][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 693.432028][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 693.440810][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 693.452447][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 693.470865][T24205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.480176][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 693.487628][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 693.505179][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 693.526085][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 693.534967][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 693.543174][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 693.553784][T24205] device veth0_vlan entered promiscuous mode [ 693.567136][T24205] device veth1_vlan entered promiscuous mode [ 693.592453][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 693.604973][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 693.613501][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 693.628786][T24205] device veth0_macvtap entered promiscuous mode [ 693.638254][T24205] device veth1_macvtap entered promiscuous mode [ 693.654257][T24205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 693.664978][T24205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.679404][T24205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 693.690072][T24205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.700048][T24205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 693.710794][T24205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.720752][T24205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 693.731341][T24205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.741266][T24205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 693.751959][T24205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.765202][T24205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.775303][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 693.786666][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 693.799029][T24205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 693.810268][T24205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.820394][T24205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 693.831130][T24205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.841372][T24205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 693.851973][T24205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.865201][T24205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 693.875935][T24205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.886582][T24205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 693.898393][T24205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.909430][T24205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.917330][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 693.926016][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 693.997030][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.008317][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.038272][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 694.038427][ T9298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.055612][ T9298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.065932][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 694.126729][T24211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.139387][T24211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:04 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @initial, {0xf, 0x40}}, @random="3b54ffdd2950adff032008d03636e5a2d9827b75449735734e6291de65c88811fb89475584e907a3cbe09a53142c2adabd5ba15114cc489759375cffd14694cc30b5bdb46780cd90d764e0da45ca758fe145d278cdda7d85922a3b373c7626c6e6"}, 0x79) 20:46:04 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3000000000000}]}]}, 0x30}}, 0x0) 20:46:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000305ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:04 executing program 0: setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async, rerun: 32) r1 = syz_open_pts(r0, 0x0) (rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:46:04 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1b, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:04 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007ce0905ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40030000000000}]}]}, 0x30}}, 0x0) 20:46:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:46:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf0ffffffffffff}]}]}, 0x30}}, 0x0) 20:46:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000e05ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 694.631525][T24225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.725704][T18772] Bluetooth: hci0: command 0x0409 tx timeout [ 695.530299][ T9488] device hsr_slave_0 left promiscuous mode [ 695.536509][ T9488] device hsr_slave_1 left promiscuous mode [ 695.543871][ T9488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.551874][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.561703][ T9488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.569116][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.578003][ T9488] device bridge_slave_1 left promiscuous mode [ 695.584509][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.597150][ T9488] device bridge_slave_0 left promiscuous mode [ 695.604641][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.618844][ T9488] device veth1_macvtap left promiscuous mode [ 695.625304][ T9488] device veth0_macvtap left promiscuous mode [ 695.631852][ T9488] device veth1_vlan left promiscuous mode [ 695.637628][ T9488] device veth0_vlan left promiscuous mode [ 695.809010][ T9488] team0 (unregistering): Port device team_slave_1 removed [ 695.825768][ T9488] team0 (unregistering): Port device team_slave_0 removed [ 695.846981][ T9488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.861230][ T9488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.920646][ T9488] bond0 (unregistering): Released all slaves [ 699.529879][ T3640] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 701.932136][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 701.941191][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 701.948953][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 701.956873][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 701.964440][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 701.972997][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 702.059079][T24244] chnl_net:caif_netlink_parms(): no params data found [ 702.106138][T24244] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.114072][T24244] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.123490][T24244] device bridge_slave_0 entered promiscuous mode [ 702.133711][T24244] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.141009][T24244] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.148809][T24244] device bridge_slave_1 entered promiscuous mode [ 702.173109][T24244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.184834][T24244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.211773][T24244] team0: Port device team_slave_0 added [ 702.219009][T24244] team0: Port device team_slave_1 added [ 702.239756][T24244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.246707][T24244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.280285][T24244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.296466][T24244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.303572][T24244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.330174][T24244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.359366][T24244] device hsr_slave_0 entered promiscuous mode [ 702.366368][T24244] device hsr_slave_1 entered promiscuous mode [ 702.443588][T24244] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.450692][T24244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.457985][T24244] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.465114][T24244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.517737][T24244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.529766][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 702.538617][T14838] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.547162][T14838] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.556143][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 702.569901][T24244] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.581337][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 702.590231][T14838] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.597323][T14838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.610827][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 702.619186][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.626291][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.651214][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 702.664059][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 702.676005][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 702.689832][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 702.703217][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 702.713272][T24244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 702.735732][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 702.747374][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 702.759988][T24244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.775267][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 702.798038][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 702.807183][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 702.815729][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 702.826709][T24244] device veth0_vlan entered promiscuous mode [ 702.843776][T24244] device veth1_vlan entered promiscuous mode [ 702.865732][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 702.873890][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 702.883472][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 702.895257][T24244] device veth0_macvtap entered promiscuous mode [ 702.906591][T24244] device veth1_macvtap entered promiscuous mode [ 702.923336][T24244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 702.936189][T24244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.946177][T24244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 702.959203][T24244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.970355][T24244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 702.980892][T24244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.994157][T24244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 703.006410][T24244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.016805][T24244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 703.027358][T24244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.038678][T24244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.048522][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 703.057875][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 703.067620][T24244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 703.080834][T24244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.091135][T24244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 703.102194][T24244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.112062][T24244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 703.123023][T24244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.132870][T24244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 703.143403][T24244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.153331][T24244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 703.164067][T24244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.174993][T24244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.184813][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 703.193703][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 703.266418][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.282247][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.298128][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 703.312275][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.320735][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.332270][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 703.398653][T24250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.412522][T24250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:13 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @initial, {0xf, 0x40}}, @random="3b54ffdd2950adff032008d03636e5a2d9827b75449735734e6291de65c88811fb89475584e907a3cbe09a53142c2adabd5ba15114cc489759375cffd14694cc30b5bdb46780cd90d764e0da45ca758fe145d278cdda7d85922a3b373c7626c6e6"}, 0x79) 20:46:13 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000000000}]}]}, 0x30}}, 0x0) 20:46:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) (async) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:46:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007c00e05ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:13 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1c, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200000000000000}]}]}, 0x30}}, 0x0) 20:46:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:46:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000f05ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:13 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x300000000000000}]}]}, 0x30}}, 0x0) [ 703.828053][T24265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007003f05ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 703.936249][T24274] Failed to get privilege flags for destination (handle=0x0:0x0) [ 703.999959][T14841] Bluetooth: hci0: command 0x0409 tx timeout 20:46:13 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x80) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:46:13 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:46:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007006005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400000000000000}]}]}, 0x30}}, 0x0) 20:46:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) write(r2, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(r2, 0x407, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000100)=""/249) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000000)={0x81, 0x5, 0x3, 0x7f, 0x1a, "1d25b63146f4e7b7"}) [ 704.211120][T24290] Failed to get privilege flags for destination (handle=0x0:0x0) [ 704.268471][T24292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:14 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1d, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000000000070ec005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x500000000000000}]}]}, 0x30}}, 0x0) 20:46:14 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) openat$vmci(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:46:14 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x80) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) socket(0x11, 0x800000003, 0x0) (async) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x80) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) (async) 20:46:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x600000000000000}]}]}, 0x30}}, 0x0) 20:46:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000709ce05ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 704.619787][T24306] Failed to get privilege flags for destination (handle=0x0:0x0) 20:46:14 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x700000000000000}]}]}, 0x30}}, 0x0) 20:46:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800000000000000}]}]}, 0x30}}, 0x0) 20:46:14 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) [ 704.775658][T24318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) write(r2, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(r2, 0x407, 0x0) (async) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000100)=""/249) (async, rerun: 32) r3 = syz_open_pts(r0, 0x0) (rerun: 32) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000000)={0x81, 0x5, 0x3, 0x7f, 0x1a, "1d25b63146f4e7b7"}) 20:46:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x900000000000000}]}]}, 0x30}}, 0x0) 20:46:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000700f005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:15 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x1e, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:15 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x80) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:46:15 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async, rerun: 64) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) (async) write(r2, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(r2, 0x407, 0x0) (async) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000100)=""/249) (async) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000000)={0x81, 0x5, 0x3, 0x7f, 0x1a, "1d25b63146f4e7b7"}) 20:46:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe00000000000000}]}]}, 0x30}}, 0x0) [ 705.572565][T24353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000003ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:15 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000100), 0x4002, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@hyper, 0xe38}, @host, 0x0, 0x7f, 0x9, 0x3, 0xff, 0x2ad1, 0x8}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@my=0x0, 0x4}, {@hyper, 0x1}, 0x400, "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"}, 0x418, 0x3}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf00000000000000}]}]}, 0x30}}, 0x0) 20:46:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r3, 0xc}, 0x10) splice(r7, 0x0, r6, 0x0, 0x3, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0xe) r8 = syz_open_pts(r6, 0x0) sendto$inet6(r4, &(0x7f0000000100)="eb8de0eb5cbc6f2bddbb762cfbdb37e32cb70290f28793ce50cbf3b64651f071ee889f094ded6ebd76048f66423e4625eac058ce406c2f0e4c6d269d81ce", 0x3e, 0x4000001, &(0x7f0000000140)={0xa, 0x4e21, 0x348, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8f83}, 0x1c) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x11) write(0xffffffffffffffff, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xc5c7242f8a05a191}, 0x10) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000001c0)={0x800, 0x5, 0x1, 0x6, 0x4e3, 0xffff}) 20:46:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000205ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f00000000000000}]}]}, 0x30}}, 0x0) 20:46:15 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000100), 0x4002, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@hyper, 0xe38}, @host, 0x0, 0x7f, 0x9, 0x3, 0xff, 0x2ad1, 0x8}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@my=0x0, 0x4}, {@hyper, 0x1}, 0x400, "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"}, 0x418, 0x3}) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) [ 705.759214][T24372] Failed to get privilege flags for destination (handle=0x0:0x0) [ 706.079776][ T14] Bluetooth: hci0: command 0x041b tx timeout 20:46:16 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x21, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000305ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:16 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000100), 0x4002, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@hyper, 0xe38}, @host, 0x0, 0x7f, 0x9, 0x3, 0xff, 0x2ad1, 0x8}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@my=0x0, 0x4}, {@hyper, 0x1}, 0x400, "b21ee86925585c33140a10de2393ee7d5cee98cf1f48fdf7f652598cf21a9d94a5ad0e88d3ca9fa9d4b4287b9b1b4ce98ad5e4c2b66785c362d947054e7b5af60b84a683a455c12a1c3baa9c6993bb44fc03f3a54c15b07684ff50f3176ce3c8d5e70f83fb1c8dc34d920f4a091f5dc30bbfee3f25d661e723eef3eafa87a87da964ee02c0306688cf4255bcafd8c40fd5449cfc825344e79f8b549923fff069ec79f60dda17c952254566c1373a0b11299c858c0c9d4bd9e4a1c54679990075dfe3172e92143b0c366312eb37332cdc3f50f4aac22b276566ceb385a6046eb41cbd7afcd2141675822b3187160551d7177cfed22f97f2ffbedf3531b67aab5cd2011ec61e3784d7057ea8107627d587a4c9c469c2713a0fc64c4a462c66fc3d0b0b460f4ad33d95c1ee93b65615231642ad84c8c30d91e93c2fc689ee5bdcf0a2d457a04b0d58cc7ddd32ffc12b538b37e9c2cfc4634e549c5457e660accafec0fe7880d9359f651f4144f503f560e32308b9824db939fc1c2b0714f45e697bf3ac64fab9f38c64102b4786e33cdda6607ee3a2be51ae0dd6e0cca77e500310f9699f6df664845ee33a7481523762146049f30de5e24918c0f473d8bb2474eeb1f0eca3b6f6b6258ced2ddb78fa4c0135ad6e85178f8fdaed45c70ae8477d82126c3ccf531b8bed8e6ccaea4fffc61cc41421370f951f504e618c27ad7332bf751c8d9b9a82162ac34afd9d67a911771265c1106cd57571099561fbc73f1e94d4283c712823fd6eade0689cafbd8018d4a0deb328fbd77e983e494a13afa5006f06065a002baef8bfd9a895ea18cb326632aec1c489f1711eab09321450fe06aa2052e8282197635ead337a794f2927ed59cd97c9d72c95b878ce370fa089059032918c4cec620eb144a6a2304148f350d76e1a613fb6ef3d573195013e32e82b070188f8807cca48807c353a3994ff14ec0eec83a7db095d342d8cee36ff38fc70cdee2a73a597aacf3f7cf818e880aea02f117a17ddda1380d727632078f66624b02eb57d185f1c420277e2ad5753c7ae68bf2397022b78e206eee94068b395bb21fb4fd8e84496b422c462b9845b5bfba89a39e65bfbcb88917737681ef05a2a935325a8e2abd51c81982ff41c5de5c8d2fe9c5089643d60650ea11e719cd54e9db0c83e715aaac9c660506586bc7d6dd836f1f22b6dd8f50b5f1095759e3484f9cdf84860f6f0c7bb7f5ae9d8a3d06f8a155963305eafa9f35fe1768d35323369186a076ced844c2f244c32b6ccb315fa549aded69f3d77ce95fd0c31eac8a878ba28ba0b33cc7057f2c155ca69d1edd7c6ec46d4181fa066dce2043855fd8c6de821220dfa4ba22931814f192341b5f21aa86370c1c2b1e434db6293dc2d129ae904067bee055a06ba6340c7d9744ac76e80648bee3fe9ea80c7e6be51"}, 0x418, 0x3}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6000000000000000}]}]}, 0x30}}, 0x0) 20:46:16 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000180)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffffd3bac52f642b7829e0cb000700fcd8aa4a9d0cdfe73ebbb13acde595567fc28b2e9e90d2b49e41636ac69c409f5b0b9ba3261e395484b043faab2682e38192389038d87788c8561dc0bb553326802e4566d71bfe2c5258df2acd44de727fa4e297474248adf98facb11c54eb6b2ac983c56c5b7798cb60c82a1eb00fbc9bafa7fd9645493960d16cef506a0279291995535d267e87dd60c329b510db22a77299a0c50293f6f93d10d451c98bb33b732604788397f322f9458efff321b85b01fa0c90e53e821e09a4c0d761ec5904636b4eb7363837192d89e5f7d301"], 0x2c) 20:46:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9effffff00000000}]}]}, 0x30}}, 0x0) 20:46:16 executing program 5: ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@host, 0x2}) [ 706.496296][T24391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.507369][T24388] Failed to get privilege flags for destination (handle=0x0:0x0) 20:46:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000405ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r3, 0xc}, 0x10) splice(r7, 0x0, r6, 0x0, 0x3, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0xe) r8 = syz_open_pts(r6, 0x0) sendto$inet6(r4, &(0x7f0000000100)="eb8de0eb5cbc6f2bddbb762cfbdb37e32cb70290f28793ce50cbf3b64651f071ee889f094ded6ebd76048f66423e4625eac058ce406c2f0e4c6d269d81ce", 0x3e, 0x4000001, &(0x7f0000000140)={0xa, 0x4e21, 0x348, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8f83}, 0x1c) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x11) write(0xffffffffffffffff, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xc5c7242f8a05a191}, 0x10) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000001c0)={0x800, 0x5, 0x1, 0x6, 0x4e3, 0xffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x4) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r3, 0xc}, 0x10) (async) splice(r7, 0x0, r6, 0x0, 0x3, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0xe) (async) syz_open_pts(r6, 0x0) (async) sendto$inet6(r4, &(0x7f0000000100)="eb8de0eb5cbc6f2bddbb762cfbdb37e32cb70290f28793ce50cbf3b64651f071ee889f094ded6ebd76048f66423e4625eac058ce406c2f0e4c6d269d81ce", 0x3e, 0x4000001, &(0x7f0000000140)={0xa, 0x4e21, 0x348, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8f83}, 0x1c) (async) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x11) (async) write(0xffffffffffffffff, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xc5c7242f8a05a191}, 0x10) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000001c0)={0x800, 0x5, 0x1, 0x6, 0x4e3, 0xffff}) (async) 20:46:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000805ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xaaaab70000000000}]}]}, 0x30}}, 0x0) [ 706.637211][T24401] Failed to get privilege flags for destination (handle=0x0:0x0) 20:46:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb409000000000000}]}]}, 0x30}}, 0x0) 20:46:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x4) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r3, 0xc}, 0x10) (rerun: 64) splice(r7, 0x0, r6, 0x0, 0x3, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0xe) r8 = syz_open_pts(r6, 0x0) sendto$inet6(r4, &(0x7f0000000100)="eb8de0eb5cbc6f2bddbb762cfbdb37e32cb70290f28793ce50cbf3b64651f071ee889f094ded6ebd76048f66423e4625eac058ce406c2f0e4c6d269d81ce", 0x3e, 0x4000001, &(0x7f0000000140)={0xa, 0x4e21, 0x348, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8f83}, 0x1c) (async, rerun: 32) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x11) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xc5c7242f8a05a191}, 0x10) (async, rerun: 64) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000001c0)={0x800, 0x5, 0x1, 0x6, 0x4e3, 0xffff}) (rerun: 64) 20:46:17 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x22, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000e05ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:17 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000180)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffffd3bac52f642b7829e0cb000700fcd8aa4a9d0cdfe73ebbb13acde595567fc28b2e9e90d2b49e41636ac69c409f5b0b9ba3261e395484b043faab2682e38192389038d87788c8561dc0bb553326802e4566d71bfe2c5258df2acd44de727fa4e297474248adf98facb11c54eb6b2ac983c56c5b7798cb60c82a1eb00fbc9bafa7fd9645493960d16cef506a0279291995535d267e87dd60c329b510db22a77299a0c50293f6f93d10d451c98bb33b732604788397f322f9458efff321b85b01fa0c90e53e821e09a4c0d761ec5904636b4eb7363837192d89e5f7d301"], 0x2c) 20:46:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf0ffffff00000000}]}]}, 0x30}}, 0x0) 20:46:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000f05ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 707.403215][T24425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:17 executing program 5: ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) (async) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@host, 0x2}) 20:46:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/connector\x00') ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x8, 0x4, 0x1, 0x4c8f, 0xe, "f961db67889e6531c34e27a68ec54ed51b9f74"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r3 = openat$null(0xffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x9) 20:46:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffff7f00000000}]}]}, 0x30}}, 0x0) 20:46:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007006005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff00000000}]}]}, 0x30}}, 0x0) 20:46:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/connector\x00') ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x8, 0x4, 0x1, 0x4c8f, 0xe, "f961db67889e6531c34e27a68ec54ed51b9f74"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) r3 = openat$null(0xffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x9) [ 707.565802][T24440] Failed to get privilege flags for destination (handle=0x0:0x0) 20:46:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff000}]}]}, 0x30}}, 0x0) [ 708.161108][ T14] Bluetooth: hci0: command 0x040f tx timeout 20:46:18 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x23, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000002ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/connector\x00') ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x8, 0x4, 0x1, 0x4c8f, 0xe, "f961db67889e6531c34e27a68ec54ed51b9f74"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) r3 = openat$null(0xffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x9) 20:46:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0xf}}, 0x0) 20:46:18 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000180)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffffd3bac52f642b7829e0cb000700fcd8aa4a9d0cdfe73ebbb13acde595567fc28b2e9e90d2b49e41636ac69c409f5b0b9ba3261e395484b043faab2682e38192389038d87788c8561dc0bb553326802e4566d71bfe2c5258df2acd44de727fa4e297474248adf98facb11c54eb6b2ac983c56c5b7798cb60c82a1eb00fbc9bafa7fd9645493960d16cef506a0279291995535d267e87dd60c329b510db22a77299a0c50293f6f93d10d451c98bb33b732604788397f322f9458efff321b85b01fa0c90e53e821e09a4c0d761ec5904636b4eb7363837192d89e5f7d301"], 0x2c) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000180)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffffd3bac52f642b7829e0cb000700fcd8aa4a9d0cdfe73ebbb13acde595567fc28b2e9e90d2b49e41636ac69c409f5b0b9ba3261e395484b043faab2682e38192389038d87788c8561dc0bb553326802e4566d71bfe2c5258df2acd44de727fa4e297474248adf98facb11c54eb6b2ac983c56c5b7798cb60c82a1eb00fbc9bafa7fd9645493960d16cef506a0279291995535d267e87dd60c329b510db22a77299a0c50293f6f93d10d451c98bb33b732604788397f322f9458efff321b85b01fa0c90e53e821e09a4c0d761ec5904636b4eb7363837192d89e5f7d301"], 0x2c) (async) [ 708.332835][T24456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:18 executing program 5: ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) (async) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async, rerun: 32) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@host, 0x2}) 20:46:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x14}}, 0x0) 20:46:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2d7}}, './file0\x00'}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) syz_open_pts(r0, 0x494900) r2 = syz_open_pts(r0, 0xfa9801) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000100)={0x2, 0x1, 0x19, 0x1e, 0x6f, &(0x7f0000000280)="25b44f2840fa0bdb5111deb193e2ab9682ee3a014e7312f4bcae3d76e5267536a9bef72e130c832739682582033c787928ffa367928e9938900c0e0bac9abec731029ac8caa9effa67d75554bfb97f2c6371810da7d8bb47ca4925e50e83c8145a9fe9118da5f5761a608219150cd9d9957886200d50fa6abead8405cc93aaccdbc77a886c6082bb0c3812a0c7d0f0d36ae7fc79735ebe05a15009eea8d6b96d382b4b1c400c555869d4daa3f0044cc04c2d17d41a0dba5bb434d18eda45dc0476b9190f639970b7b165644984a41d1caa473c91f06872d554948a551de30bb58a8c464f03a81b05814c43e553d2a4c2615735760e77ccfd2594616a659bf4db058b178e926cfbf891637e201a77aa679f724f76391d1d714336c3754bb52b54cb4840bafb9a5deba5850f24e4b8ac812795e0c1a79f6aed0a88f48aa4b36ce94ad1e03ad07c2eafac8fb3d3ef92d22966b16c211a677cd56d6f87c50b95b2e108cbfa1f73d89b0a6f70d8eb33e49e6888d9618aa2460da60caba315cd02d2477a228ccac8103f238029dcc758d1bb902c23a9e13f94e760b05456ab260aea547f9c9a4881df063f8d0d85baad2feab4d0d3782fac11efe08a27d24e4b481a8558b7254da5e1d2e8f5c6d002c939e95c05f167f569d27eefabfd50b9a5df2362d1561a5c8e4668cf6d9a68f8b374ec04f7683b2cc1d09a6b52785957b4b476fb8aa22ff5203b59d415bb33a3fd35e138be9e2f17ae174976c03822ce76912d3bca7c6d379597ceafd55da831f027de32fe340f6d75e6cf00db9eacfced778f99c3cc53e1ecf42164448fe7534040663a64fd4e05b235520db4b53ba15f26eef7deb6daad1c2543cee64c211ba7b62c35cf42cc499386cc58b8ade7be11a81b472780087496256e470f312ea752467cfb471e891f596249cf2f8e3588621798ec92c6eb748a2e8e4f3806a91564a6374dc600aa41213d27d088b2f2943d76434554bae405d5a1870a410d41e75a2421affdded8329da04c909679cb9c967306c5248079d355ec8d8a28bd9d178996b38e4acdcf8ebb4c4c091f768811ce6de1242f42857c391728043f2d1c4a5c0074c328a2774903da970d09e74a0de9d93a57f1d8ad92b11fcffbdc2482a77294add782070e5e9f086c224360b2c514fbdc69bf4584131691ec514c1e8300ce9239f1f0f9426259b8f147f9a5fa4dee351b6bc67c8ce171ad2ee37033d65619098e8d6a2d2c13ca39978604aac16dd1d30af77d0ffcc8e4f17172dec7d1cb76be2a42dd0742af14011378cf03bbd25abe2fc6cc27585a9b8711f55ee361241b3440ff9dffe806db0603fcbebfcbb4ab16873f18c0201d1abc479641619e2578dbdecc1fb544864be24894b6e5220fea2d6c9cd18aa9a143dcc3ccba7241246d510433e8cd62b9683d4d3ede7e69c42274ea32"}) 20:46:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000003ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 708.396796][T24456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0xc0}}, 0x0) 20:46:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2d7}}, './file0\x00'}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) syz_open_pts(r0, 0x494900) r2 = syz_open_pts(r0, 0xfa9801) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000100)={0x2, 0x1, 0x19, 0x1e, 0x6f, &(0x7f0000000280)="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"}) 20:46:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000004ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:18 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x24, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0xec0}}, 0x0) 20:46:18 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@local, 0x3f}, 0x0, 0x1, 0x24a}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2d7}}, './file0\x00'}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(r0, 0x494900) (async) r2 = syz_open_pts(r0, 0xfa9801) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000100)={0x2, 0x1, 0x19, 0x1e, 0x6f, &(0x7f0000000280)="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"}) 20:46:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe103000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:18 executing program 3: syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:46:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1f00d0300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x33fe0}}, 0x0) [ 709.315238][T24492] Failed to get privilege flags for destination (handle=0x0:0x0) [ 709.321452][T24491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:19 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@local, 0x3f}, 0x0, 0x1, 0x24a}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x406900, 0x114) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x5, 0x100, 0x5, 0x8, 0x1a, "b28d07022c49f783d06dda0af5933bf8bb24ee"}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) read$eventfd(r3, &(0x7f0000000080), 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:46:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1f80d0300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x7ffff000}}, 0x0) [ 709.497739][T24506] Failed to get privilege flags for destination (handle=0x0:0x0) 20:46:19 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x25, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1000e0300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0xfffffdef}}, 0x0) 20:46:19 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@local, 0x3f}, 0x0, 0x1, 0x24a}) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:19 executing program 3: syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:46:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x2}, 0x0) [ 710.239819][T18772] Bluetooth: hci0: command 0x0419 tx timeout [ 710.246288][T24523] Failed to get privilege flags for destination (handle=0x0:0x0) 20:46:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe12c0e0300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x406900, 0x114) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x5, 0x100, 0x5, 0x8, 0x1a, "b28d07022c49f783d06dda0af5933bf8bb24ee"}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) read$eventfd(r3, &(0x7f0000000080), 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x406900, 0x114) (async) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x5, 0x100, 0x5, 0x8, 0x1a, "b28d07022c49f783d06dda0af5933bf8bb24ee"}) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) (async) read$eventfd(r3, &(0x7f0000000080), 0x8) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) [ 710.283249][T24524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:20 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f00000000c0)) 20:46:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x8}, 0x0) 20:46:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x18}, 0x0) 20:46:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1400e0300", @ANYRES32=r3], 0x1c}}, 0x0) [ 710.447749][T24537] Failed to get privilege flags for destination (handle=0x0:0x0) [ 710.578050][T24543] ptm ptm1: ldisc open failed (-12), clearing slot 1 20:46:20 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x26, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:20 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f00000000c0)) 20:46:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x300}, 0x0) 20:46:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) (async) r2 = openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000000), 0x406900, 0x114) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x5, 0x100, 0x5, 0x8, 0x1a, "b28d07022c49f783d06dda0af5933bf8bb24ee"}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) (async) read$eventfd(r3, &(0x7f0000000080), 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 711.199466][T24561] Failed to get privilege flags for destination (handle=0x0:0x0) [ 711.214508][ T9488] device hsr_slave_0 left promiscuous mode [ 711.242100][ T9488] device hsr_slave_1 left promiscuous mode [ 711.249123][ T9488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.257138][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.267716][ T9488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.277142][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.303291][ T9488] device bridge_slave_1 left promiscuous mode [ 711.310481][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.322279][ T9488] device bridge_slave_0 left promiscuous mode [ 711.328508][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.343392][ T9488] device veth1_macvtap left promiscuous mode [ 711.349816][ T9488] device veth0_macvtap left promiscuous mode [ 711.355976][ T9488] device veth1_vlan left promiscuous mode [ 711.363198][ T9488] device veth0_vlan left promiscuous mode [ 711.560267][ T9488] team0 (unregistering): Port device team_slave_1 removed [ 711.578311][ T9488] team0 (unregistering): Port device team_slave_0 removed [ 711.592461][ T9488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.610625][ T9488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.687863][ T9488] bond0 (unregistering): Released all slaves [ 715.359840][ T47] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 717.773050][ T3640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 717.781814][ T3640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 717.790252][ T3640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 717.798074][ T3640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 717.805929][ T3640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 717.814166][ T3640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 717.893945][T24572] chnl_net:caif_netlink_parms(): no params data found [ 717.947522][T24572] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.955493][T24572] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.965047][T24572] device bridge_slave_0 entered promiscuous mode [ 717.973473][T24572] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.980762][T24572] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.988489][T24572] device bridge_slave_1 entered promiscuous mode [ 718.014604][T24572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.025588][T24572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.053900][T24572] team0: Port device team_slave_0 added [ 718.063450][T24572] team0: Port device team_slave_1 added [ 718.080196][T24572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.087172][T24572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.113421][T24572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.126858][T24572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.134216][T24572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.162296][T24572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.191743][T24572] device hsr_slave_0 entered promiscuous mode [ 718.198328][T24572] device hsr_slave_1 entered promiscuous mode [ 718.269253][T24572] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.276365][T24572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.283745][T24572] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.290892][T24572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.339709][T24572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.359064][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 718.367832][T18772] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.375808][T18772] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.384312][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 718.398422][T24572] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.411682][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 718.420148][T14841] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.427203][T14841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.451599][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 718.460625][T14841] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.467674][T14841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.478464][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 718.487529][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 718.496699][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 718.510641][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 718.521797][T24572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 718.535976][T24572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 718.543997][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 718.560350][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 718.568072][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 718.579812][T24572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.601737][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 718.616875][T24572] device veth0_vlan entered promiscuous mode [ 718.624623][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 718.634441][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 718.642907][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 718.657137][T24572] device veth1_vlan entered promiscuous mode [ 718.678180][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 718.686627][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 718.695241][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 718.706249][T24572] device veth0_macvtap entered promiscuous mode [ 718.717521][T24572] device veth1_macvtap entered promiscuous mode [ 718.735161][T24572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 718.745800][T24572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.756049][T24572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 718.767630][T24572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.777677][T24572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 718.788411][T24572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.798631][T24572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 718.810973][T24572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.821384][T24572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 718.832114][T24572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.843961][T24572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.853959][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 718.864025][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 718.875393][T24572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 718.886560][T24572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.896692][T24572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 718.907317][T24572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.917204][T24572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 718.927739][T24572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.937613][T24572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 718.952459][T24572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.964082][T24572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 718.976527][T24572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 718.988156][T24572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.996457][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 719.064030][ T9298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.079235][ T9298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.097540][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.100336][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 719.106723][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.123629][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 719.182700][T24578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:46:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0xffffff1f}, 0x0) 20:46:29 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f00000000c0)) 20:46:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe15c0e0300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "004f4d0000dd0000dd00"}) r1 = syz_open_pts(r0, 0x8000) r2 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:46:29 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x27, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "004f4d0000dd0000dd00"}) r1 = syz_open_pts(r0, 0x8000) r2 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "004f4d0000dd0000dd00"}) (async) syz_open_pts(r0, 0x8000) (async) socket$caif_stream(0x25, 0x1, 0x1) (async) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) 20:46:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1640e0300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 719.524238][T24589] Failed to get privilege flags for destination (handle=0x0:0x0) 20:46:29 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000100)={&(0x7f0000000300)={{@any, 0xfffffc01}, {@host, 0x7}, 0x400, "b18f84dd93f51e92e610b7e829ff9412528940f64aafb1112be308845668aeebc4a1aa53803cea8cc391b3acd2dc88f74f7d884ac437e53dd201b455f2a3c146ce95b4531f036e71482474e6d88678007d4b510b5ae0aef85e79276c9a36f92bbf203d0fd7eeda7f6dd539b93a5b964a5a5b7054e3106dcd841535ea5944f4f9830a629c1434f723586e5b736601569eccde7e69ffa8ac245afb51d10be3a147507376b753265216be18778c25534e3120a407ce2749e1024dfae4d4983c04bb47433e1dd4a2e34d1529781ae27be1b17e75849704b4f079575f946e969527940651feeaadc9dfa3ae44e86d6d00cdb6b049e9e1b6e2e5615a0db12efa5230f9043a3f33d20f4387f95fbb4a2972feab9ef27c47e94da22676e3507672efacb5010ec0ed2eada51e33a3567695b0105666ab85d85f89a872c7de1b3fa7afb1eb8e14191a4ac683b82c97b2774e0f50793a22577a56af8d64332bf474bb5d56721348f72519df3a155e7dc95ce0b4b0f934f83e1bebd747207ee5aa80e939a92ed24ce37c0bfbd611fb5d837a8dcb04f437376c0488cd9600c6ddc892deb6814f0aba159db689c1c9a451faf570db13869490abfaf3bb6f32cf190531e8d6010db51476cb89c7d6769b17a126516c961307bbe6f14b8f60aab366159ca61a43981de75d25be603573d50bdc46b9c34995d15ebc6d768148f9cd37dbf8ed7afacdad40adf0de00474befac2d312635885c5793ab8a684004bec3456d913d966fdd944f4390cf2e891ecff5591d58a272e19e5eb598adc25316141ee1d99d601b4e4d8058e39dc98f5ed45739b387e28db339667d1bd30db7660fb001dde9dcc40109bfffeb6f74427474ea141d734f6fa8fc543f41d4cbf166f966011fc58f9f759ade4bbf57d6640bb232927d5c7130f8ab5b97a7b3f139a913b0b3761d4f11d389eb8a8c08f63fde253ac4a11857b6ff9b5bc6707e64812042cbbe952c6907d3a7d2a082e8ce3bdd0809d2408c7e205b6826685adbf7955a8bd002fb6b4566191e6958fa2543b3b9180fd97b9dfcb90f779c505ccd6a858f6f26dde8295b0b9a0848161093c998061245c3014b3bab1a71b40ed43abf039546d380c66e2af1cfa095b0802c4c8d19e73b60500d1e47ee5218e64744c0a8e07e6463efb27f3779329c4862618d65015bfc8c4fda6b17cc9736620ec5832ae96c86863305b8dc92ee799a502b1794b1c5cafb2a4fe88762f38507e938129bb857c461870d200571b7bc416eee7aea240950dc96d0d6e5062120b7ab4800482beacd713a2c0d5dbe0dc576e16e36a96540c52702856ec94cf5e166e13b955a720a19af7ffe6fc9ca489281e050b87adf9d0b289e49dc633bcbe6ed8c5a30efb9c3b289bb7935adf3a84ba27356b20891b80f4a8fc66f399e518a6de0c8bc447996e1a2b8321f4bc3"}, 0x418, 0x8000}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) [ 719.628265][T24594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.667920][T24596] ptm ptm1: ldisc open failed (-12), clearing slot 1 20:46:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x2}, 0x0) 20:46:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe16c0e0300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1980e0300", @ANYRES32=r3], 0x1c}}, 0x0) [ 719.850128][ T14] Bluetooth: hci0: command 0x0409 tx timeout 20:46:29 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xf, "68877826347a9d6dffddbb531da206bd05ac3c9a105fae0e870cfc253c8c2a1a", 0xffffffffffffffff}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @broadcast, @broadcast, @device_a, {0x2, 0xff}, @broadcast}, {0x7, 0x0, 0x0, 0x0, 0x5}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @initial, {0x0, 0x3}}, {0x0, 0x0, 0x2, 0x1, 0x4}}}, @random="b0582890d7f9da93e4da659ea7230d8f9979816419ecfcfeac39d9e386b7f3929546421f785b84934fb01a7135782676dafe0443e29da0e5d00f8c2a9d193f699ef7890472bd5f70f59c98d975493b56ead576b52da4e9685240157c75afca667101dfae6a12ce66485fe4df387dae01bc03a9e84d539bbc1dad7f16b0031064faf8db804197b170ce200f70a4362f1506cd5afe79b37597e9f064430e1105d144c8e13e8a864e3bf18ae3733fe2430e8e3f3fdd0d3277971038b4d4af6331b67c0517c33b9d7c1b7f008edab05050f0b1e51af3f8aaa255d82b0d96330560572ced8a1105ebee8deac41a340f9174bb094fc2341307c71ca19956da250f734e4171bfe0fea961d0c97a3f5180e58120d5111c5146e7d5fc3b5773066da9b60389d78a55b6e277af3a1f60de5b0a4ee6b58e8cd11e6b7c3cee51ab27011bb6a895e4a2c51b448af9e9337adbe1d4517782cc806ffc46bf16daad062872335a4f1178f8285964c4102b9cb9f4d22cba77229efaac289fff96d04770f4e243226d9afbfa4dbe879d72724649412b37818cda036ffad9e45640e2728896e8cb6aaab273cd37b9cdd1189da6f61180a82164805250ed3ab0c2db650b93fdf6c77566ecf755547df1a5db791909d1a758acf0c418b159f5e9e06e8b5fd20f6c84f3b484121e2d0e84f7ef93fe00ca1754072e8d44f52ddeaea3e840868b74afc702f33f9029ce2b7cd199f95a4a8cb883ad4e99c1ceeadd7646ca1761e2e2a8e1e9b51d741d5bc9d13c3a9d7612df9b640e786fe9ccb8a894263f3429e6b7f245a7af587f9f1a6e2177c2351250fb0f63fce3cfbbf98e5102b91545e3f539dd7bcc02cfab5c5868d6d9a3f03f4cae4b7fc2f3c892dd11145563714a047f40acc5bf4fbe65bd7207ac324f46ebb8a66c09bafd6c9f3eddea5e6d6d81fe70e75a6ba020836407e1b838544cdd7a4cfedf2421557f2928fbdba3352359b2236cc14a0f93665f01ba0009170a3a4aeacb7ba5c9316996dfa2a819adc388f82fbad4b7bca7e8a099f3f1a759ae8e9bd077459b99fa82de1098e1841be1e0f7420edb1c264cf76e8280b32de9957224faca56f3d591327e6e3701a314e1d2ad2efaf0ea3a2954b1840a885a91c5cba53c9333f8d19b9a376716066b261566ab0c45e5fcbc3a65f9fbd1a4962110034e5df5486601b0fe1bb4b321363e185b8cec760b82b13e558e9bf838b3d2828f8534751e5f9ba113ebfca23f3dd215fb6345ba5802834bcb53e893f48c059d91aae3da4bfaab75dd4a36dcde84e921a0f112bac123b250e20f645a21755857a1fcd952bbabe223ec04d30327784f2efae3a2be31397333cd7751825fa0b360bf13a7f6987bc23131600b2a59ff9fe852ab3ecd0f9d13632d63e39e2a458b1f09d23a5bf1564496aa579b72d848e83c201731b942b0454b6d4f16ca65b29cb988d609c2b7fd81a69e485cbd3176084fa00521f192cb59c18888d3eb28a77e8dfbdc7ed6529cdafe42060a7af368c81d259eb5a81727ac55adb965769bfd5bba146675249aed2a497e5b26d97f487e61978fc20dbd4b59404128eadf30f3cf3772a619a5f9b8d14bff2479786e7f7eeae47268dc560814b9153147c5747c77708b0d43e11f667af335970c90271acb39c77762d520f2a904f47d64a4fd55471e33f0ed221ebe07810bdc9eb65cda8a9e3a9735b7ce87aeb2ce495c3bda001c3f6e4792ee3ef42d3cc5aa8966d8c311fd653e5353bb58cb8096efd313d68c4ee6d30b51abd6ca9b7f026c40cefd97b30c1e7ab994c69276c7fbb13853ab2d95c5b66c1511dd6405c575964af16e9bd6f56cab43cb0dc690e805a0025dc74880439a8ad19c965bfdc257682a7b04d66a07862b96538d0e43c39fdbfafb224d1757b8f615fb44b0212f34be5146fab7df3bb256755041c03922b701dcda0769ddf185915a190092dd8cbfb05feb8344d4a1e5a1a0098f33e225fc832f02d20045499021059bd528a3aff17d474d319b91de1c985329dddba0e0ed3068b027482acf87246dab3b22a3a81fa83186db3c6da3ab1f67f8a4d0fc5d10a6d4d6692f5d1a236e0c54176928c19ecbec9c78ad1617a3b401eaf0c23ff88fae3e7df3dd61a3a848199e4e67cda9cbcccbb198bfadefd7e6c613cf881a7e8e67c6624355ee5509f8cd7440a9b663ccceb560ccfa5b8fa9592b474b5097d33dc618aa9221fc950814a1db46d0f8c24811ca5c5d6630d3eed958e13aaabf2a263b0755c190f674d9c08688aad1a5ee1b3a4dd2430a89386eeaaf57ab8afc8e7e4a89b7f896706712bb192d4ec366d86a14bf0d5010b97df7a782ede55a546515929b889202d2d07d6477f2a56a32242c06fe226a9a1d6ae846ca1dc3827e516957f3e24b8c56a64491bded1608251f3c140ae8f8a6aac25e4a322af69562e5d109886279aa74e049c4c460b0761bfb818a1f4355e71a418d8c4b635c2c233ef2e5916019f01da124e69520506bb574909b3e6597be17281b0a1e3991f86cc2273071c906dfdee0e0c408e4d1d60a265a2c1d223dcef328ec3eb09bfcee5b84ac29098f61e83aca"}, 0x768) 20:46:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "004f4d0000dd0000dd00"}) r1 = syz_open_pts(r0, 0x8000) r2 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "004f4d0000dd0000dd00"}) (async) syz_open_pts(r0, 0x8000) (async) socket$caif_stream(0x25, 0x1, 0x1) (async) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) 20:46:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x3}, 0x0) 20:46:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1ac0e0300", @ANYRES32=r3], 0x1c}}, 0x0) [ 720.027556][T24622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.046795][T24619] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 720.074675][T24622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:30 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x28, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108480100", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x4}, 0x0) 20:46:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000140)) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {}, {}, {0x20, 'x-'}], 0xa, "57b7134232050997de1d17d91750054e73b883c4e6accce4d40b3cd439d2a1bebfce7b68bf0a76ba03e55ec4a70469808ad8400f527f91c6b93db95a755c3898539d846d4febc9c048ae26cd6bf8eb23dbe940178cf2afe30a7ff311b3afe14e95cafa26f45c4c2f784b1daa7c8c3564d4b81b55b3a5977919c564c891a3c5ef0a7f5b7cebe1390317c0cd2479ae0d70c1b88c421f5b7a62dfdacef73e0e1280ed6620593cd7c488df1a39bbe2b4c341cb1f88b3a9a1c2273c124cd8fbbc01723668b852ad2003526cd5404096"}, 0xe8) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x810001, 0x0) 20:46:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000100)={&(0x7f0000000300)={{@any, 0xfffffc01}, {@host, 0x7}, 0x400, "b18f84dd93f51e92e610b7e829ff9412528940f64aafb1112be308845668aeebc4a1aa53803cea8cc391b3acd2dc88f74f7d884ac437e53dd201b455f2a3c146ce95b4531f036e71482474e6d88678007d4b510b5ae0aef85e79276c9a36f92bbf203d0fd7eeda7f6dd539b93a5b964a5a5b7054e3106dcd841535ea5944f4f9830a629c1434f723586e5b736601569eccde7e69ffa8ac245afb51d10be3a147507376b753265216be18778c25534e3120a407ce2749e1024dfae4d4983c04bb47433e1dd4a2e34d1529781ae27be1b17e75849704b4f079575f946e969527940651feeaadc9dfa3ae44e86d6d00cdb6b049e9e1b6e2e5615a0db12efa5230f9043a3f33d20f4387f95fbb4a2972feab9ef27c47e94da22676e3507672efacb5010ec0ed2eada51e33a3567695b0105666ab85d85f89a872c7de1b3fa7afb1eb8e14191a4ac683b82c97b2774e0f50793a22577a56af8d64332bf474bb5d56721348f72519df3a155e7dc95ce0b4b0f934f83e1bebd747207ee5aa80e939a92ed24ce37c0bfbd611fb5d837a8dcb04f437376c0488cd9600c6ddc892deb6814f0aba159db689c1c9a451faf570db13869490abfaf3bb6f32cf190531e8d6010db51476cb89c7d6769b17a126516c961307bbe6f14b8f60aab366159ca61a43981de75d25be603573d50bdc46b9c34995d15ebc6d768148f9cd37dbf8ed7afacdad40adf0de00474befac2d312635885c5793ab8a684004bec3456d913d966fdd944f4390cf2e891ecff5591d58a272e19e5eb598adc25316141ee1d99d601b4e4d8058e39dc98f5ed45739b387e28db339667d1bd30db7660fb001dde9dcc40109bfffeb6f74427474ea141d734f6fa8fc543f41d4cbf166f966011fc58f9f759ade4bbf57d6640bb232927d5c7130f8ab5b97a7b3f139a913b0b3761d4f11d389eb8a8c08f63fde253ac4a11857b6ff9b5bc6707e64812042cbbe952c6907d3a7d2a082e8ce3bdd0809d2408c7e205b6826685adbf7955a8bd002fb6b4566191e6958fa2543b3b9180fd97b9dfcb90f779c505ccd6a858f6f26dde8295b0b9a0848161093c998061245c3014b3bab1a71b40ed43abf039546d380c66e2af1cfa095b0802c4c8d19e73b60500d1e47ee5218e64744c0a8e07e6463efb27f3779329c4862618d65015bfc8c4fda6b17cc9736620ec5832ae96c86863305b8dc92ee799a502b1794b1c5cafb2a4fe88762f38507e938129bb857c461870d200571b7bc416eee7aea240950dc96d0d6e5062120b7ab4800482beacd713a2c0d5dbe0dc576e16e36a96540c52702856ec94cf5e166e13b955a720a19af7ffe6fc9ca489281e050b87adf9d0b289e49dc633bcbe6ed8c5a30efb9c3b289bb7935adf3a84ba27356b20891b80f4a8fc66f399e518a6de0c8bc447996e1a2b8321f4bc3"}, 0x418, 0x8000}) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)) (async, rerun: 64) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (rerun: 64) 20:46:30 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xf, "68877826347a9d6dffddbb531da206bd05ac3c9a105fae0e870cfc253c8c2a1a", 0xffffffffffffffff}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @broadcast, @broadcast, @device_a, {0x2, 0xff}, @broadcast}, {0x7, 0x0, 0x0, 0x0, 0x5}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @initial, {0x0, 0x3}}, {0x0, 0x0, 0x2, 0x1, 0x4}}}, @random="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"}, 0x768) (rerun: 32) 20:46:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x5}, 0x0) 20:46:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {}, {}, {0x20, 'x-'}], 0xa, "57b7134232050997de1d17d91750054e73b883c4e6accce4d40b3cd439d2a1bebfce7b68bf0a76ba03e55ec4a70469808ad8400f527f91c6b93db95a755c3898539d846d4febc9c048ae26cd6bf8eb23dbe940178cf2afe30a7ff311b3afe14e95cafa26f45c4c2f784b1daa7c8c3564d4b81b55b3a5977919c564c891a3c5ef0a7f5b7cebe1390317c0cd2479ae0d70c1b88c421f5b7a62dfdacef73e0e1280ed6620593cd7c488df1a39bbe2b4c341cb1f88b3a9a1c2273c124cd8fbbc01723668b852ad2003526cd5404096"}, 0xe8) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x810001, 0x0) 20:46:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108020300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108030300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000140)) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {}, {}, {0x20, 'x-'}], 0xa, "57b7134232050997de1d17d91750054e73b883c4e6accce4d40b3cd439d2a1bebfce7b68bf0a76ba03e55ec4a70469808ad8400f527f91c6b93db95a755c3898539d846d4febc9c048ae26cd6bf8eb23dbe940178cf2afe30a7ff311b3afe14e95cafa26f45c4c2f784b1daa7c8c3564d4b81b55b3a5977919c564c891a3c5ef0a7f5b7cebe1390317c0cd2479ae0d70c1b88c421f5b7a62dfdacef73e0e1280ed6620593cd7c488df1a39bbe2b4c341cb1f88b3a9a1c2273c124cd8fbbc01723668b852ad2003526cd5404096"}, 0xe8) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) (async, rerun: 64) openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x810001, 0x0) (rerun: 64) 20:46:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x6}, 0x0) [ 720.584606][T24644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:30 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x29, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:30 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000100)={&(0x7f0000000300)={{@any, 0xfffffc01}, {@host, 0x7}, 0x400, "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"}, 0x418, 0x8000}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000100)={&(0x7f0000000300)={{@any, 0xfffffc01}, {@host, 0x7}, 0x400, "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"}, 0x418, 0x8000}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:46:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x7}, 0x0) 20:46:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108040300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4280, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x3f, 0x8, 0x9, 0x9, 0x2, 0x3e, 0x2, 0x88, 0x40, 0x6c, 0x5be, 0x0, 0x38, 0x1, 0xd69, 0x40, 0x9}, [{0x2, 0x3, 0x5, 0x7, 0x8, 0x8000000000000000, 0x6, 0x5}, {0x6, 0x39, 0x66, 0x2, 0x80, 0x1, 0x7, 0x1}], "a56c08c3e39947bcc1fc6430d7c6ebfaebb4b4e92a328535f880b5d5bf2dd11fc03415ba22b5b7ed07322a8faff694362d5a9740d485eb5ad6ed54baa87f2510cee7f539f2b48e217a488f2b28ad33852b2d22696f2b408cff88e23b02567dcb4f7a4ecb", ['\x00', '\x00', '\x00']}, 0x414) fsync(r1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1f, 0x2, 0xffff, 0x7ff, 0xb, "65ae92f5360c509a909b45cc7757debe9e79e0"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x13) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000100)) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) openat(r3, &(0x7f0000000040)='./file0\x00', 0x101, 0xcf) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) write$qrtrtun(r4, &(0x7f00000006c0)="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", 0xfb) [ 721.496432][ T9298] device hsr_slave_0 left promiscuous mode [ 721.503791][ T9298] device hsr_slave_1 left promiscuous mode [ 721.510631][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.518077][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.529951][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.537423][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.546501][ T9298] device bridge_slave_1 left promiscuous mode [ 721.553088][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.562388][ T9298] device bridge_slave_0 left promiscuous mode [ 721.568595][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.583646][ T9298] device veth1_macvtap left promiscuous mode [ 721.589920][ T9298] device veth0_macvtap left promiscuous mode [ 721.596060][ T9298] device veth1_vlan left promiscuous mode [ 721.603589][ T9298] device veth0_vlan left promiscuous mode [ 721.809452][ T9298] team0 (unregistering): Port device team_slave_1 removed [ 721.825611][ T9298] team0 (unregistering): Port device team_slave_0 removed [ 721.841126][ T9298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.858514][ T9298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.932867][ T9298] bond0 (unregistering): Released all slaves [ 725.519783][ T47] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 727.937732][ T3640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 727.946820][ T3640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 727.955256][ T3640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 727.963579][ T3640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 727.971999][ T3640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 727.979215][ T3640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 728.066505][T24686] chnl_net:caif_netlink_parms(): no params data found [ 728.113583][T24686] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.120988][T24686] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.128751][T24686] device bridge_slave_0 entered promiscuous mode [ 728.137327][T24686] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.144775][T24686] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.153136][T24686] device bridge_slave_1 entered promiscuous mode [ 728.176470][T24686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.188583][T24686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.216915][T24686] team0: Port device team_slave_0 added [ 728.225253][T24686] team0: Port device team_slave_1 added [ 728.244761][T24686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.252078][T24686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.278736][T24686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.292641][T24686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.299811][T24686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.325899][T24686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.361069][T24686] device hsr_slave_0 entered promiscuous mode [ 728.367851][T24686] device hsr_slave_1 entered promiscuous mode [ 728.444330][T24686] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.451434][T24686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.458730][T24686] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.465820][T24686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.516829][T24686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.528377][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 728.537441][T14838] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.545482][T14838] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.554908][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 728.570362][T24686] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.581239][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 728.589718][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.596793][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.608760][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 728.621430][T14838] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.628478][T14838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.652424][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 728.662456][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 728.675750][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 728.686944][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 728.704379][T24686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 728.716693][T24686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 728.724870][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 728.744844][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 728.753785][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 728.765941][T24686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.786498][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 728.808795][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 728.818453][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 728.826522][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 728.838934][T24686] device veth0_vlan entered promiscuous mode [ 728.853527][T24686] device veth1_vlan entered promiscuous mode [ 728.874629][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 728.883955][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 728.893013][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 728.904460][T24686] device veth0_macvtap entered promiscuous mode [ 728.917213][T24686] device veth1_macvtap entered promiscuous mode [ 728.932727][T24686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 728.944062][T24686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.954133][T24686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 728.965277][T24686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.975275][T24686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 728.986029][T24686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.995883][T24686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 729.006926][T24686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.016791][T24686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 729.027493][T24686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.041599][T24686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.050018][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 729.059283][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 729.075114][T24686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 729.085746][T24686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.095860][T24686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 729.106563][T24686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.117636][T24686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 729.129017][T24686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.139329][T24686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 729.150654][T24686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.160911][T24686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 729.171708][T24686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.188832][T24686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.197776][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 729.206969][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 729.276013][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.284773][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.298106][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 729.318419][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.328142][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.339076][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 729.401886][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.412948][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.419162][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.428274][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.441207][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.454759][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.461917][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.465887][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.487066][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.491289][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.498651][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.518347][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.523724][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.530811][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.548897][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.550295][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.570342][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.581469][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.592748][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.593895][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.614159][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.616630][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.636370][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.637162][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.647777][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.665081][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.667547][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.688474][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.688557][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.709941][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.716476][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.723964][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.741110][T24695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.741821][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.762815][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.773600][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.788888][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.800416][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.812052][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.822827][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.835589][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.847495][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.861757][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.872886][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.884430][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.895608][T24694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.080342][ T14] Bluetooth: hci0: command 0x0409 tx timeout 20:46:39 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0xf, "68877826347a9d6dffddbb531da206bd05ac3c9a105fae0e870cfc253c8c2a1a", 0xffffffffffffffff}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @broadcast, @broadcast, @device_a, {0x2, 0xff}, @broadcast}, {0x7, 0x0, 0x0, 0x0, 0x5}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @initial, {0x0, 0x3}}, {0x0, 0x0, 0x2, 0x1, 0x4}}}, @random="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"}, 0x768) 20:46:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x8}, 0x0) 20:46:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108080300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:39 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = dup3(r0, r0, 0x80000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@my=0x0, 0x1f}, 0x0, 0x1, 0x3}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@my=0x0}, 0x1, 0x1}) 20:46:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4280, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x3f, 0x8, 0x9, 0x9, 0x2, 0x3e, 0x2, 0x88, 0x40, 0x6c, 0x5be, 0x0, 0x38, 0x1, 0xd69, 0x40, 0x9}, [{0x2, 0x3, 0x5, 0x7, 0x8, 0x8000000000000000, 0x6, 0x5}, {0x6, 0x39, 0x66, 0x2, 0x80, 0x1, 0x7, 0x1}], "a56c08c3e39947bcc1fc6430d7c6ebfaebb4b4e92a328535f880b5d5bf2dd11fc03415ba22b5b7ed07322a8faff694362d5a9740d485eb5ad6ed54baa87f2510cee7f539f2b48e217a488f2b28ad33852b2d22696f2b408cff88e23b02567dcb4f7a4ecb", ['\x00', '\x00', '\x00']}, 0x414) (async) fsync(r1) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1f, 0x2, 0xffff, 0x7ff, 0xb, "65ae92f5360c509a909b45cc7757debe9e79e0"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x13) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000100)) (async) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) openat(r3, &(0x7f0000000040)='./file0\x00', 0x101, 0xcf) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) (async) write$qrtrtun(r4, &(0x7f00000006c0)="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", 0xfb) 20:46:39 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x2a, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x9}, 0x0) 20:46:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1080e0300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:39 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) r1 = dup3(r0, r0, 0x80000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@my=0x0, 0x1f}, 0x0, 0x1, 0x3}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@my=0x0}, 0x1, 0x1}) 20:46:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4280, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) (async) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x3f, 0x8, 0x9, 0x9, 0x2, 0x3e, 0x2, 0x88, 0x40, 0x6c, 0x5be, 0x0, 0x38, 0x1, 0xd69, 0x40, 0x9}, [{0x2, 0x3, 0x5, 0x7, 0x8, 0x8000000000000000, 0x6, 0x5}, {0x6, 0x39, 0x66, 0x2, 0x80, 0x1, 0x7, 0x1}], "a56c08c3e39947bcc1fc6430d7c6ebfaebb4b4e92a328535f880b5d5bf2dd11fc03415ba22b5b7ed07322a8faff694362d5a9740d485eb5ad6ed54baa87f2510cee7f539f2b48e217a488f2b28ad33852b2d22696f2b408cff88e23b02567dcb4f7a4ecb", ['\x00', '\x00', '\x00']}, 0x414) fsync(r1) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1f, 0x2, 0xffff, 0x7ff, 0xb, "65ae92f5360c509a909b45cc7757debe9e79e0"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x13) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000100)) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) openat(r3, &(0x7f0000000040)='./file0\x00', 0x101, 0xcf) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) write$qrtrtun(r4, &(0x7f00000006c0)="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", 0xfb) [ 730.299283][T24714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xe}, 0x0) 20:46:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1080f0300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xf}, 0x0) 20:46:40 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = dup3(r0, r0, 0x80000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@my=0x0, 0x1f}, 0x0, 0x1, 0x3}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@my=0x0}, 0x1, 0x1}) 20:46:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000140)) write(r1, &(0x7f0000000000)="6c9fae60894979243a5d8b9af66ce694e6bb2ab0d14165885dee1a0d171c3436b971c15c7b5f6b93fe44bcd5e7b1f86a6bb98c365a7065f5c19811df1b4b91237dc6042d6f3b3320cc1fb1c8eb46b8d2b315f2dde51badac29610c0372b280a12d28638e38043c66b3f683af859d9868ff6223de8a4ab31b73044f2c048dbb0fb93fffea47aedbd86c6a469d24266e23e20355dfa88bbdbd05150a", 0x9b) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) 20:46:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108600300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xa15, 0x4) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) [ 730.786792][T24745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:40 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x2b, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000500", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:40 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x60}, 0x0) 20:46:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000140)) write(r1, &(0x7f0000000000)="6c9fae60894979243a5d8b9af66ce694e6bb2ab0d14165885dee1a0d171c3436b971c15c7b5f6b93fe44bcd5e7b1f86a6bb98c365a7065f5c19811df1b4b91237dc6042d6f3b3320cc1fb1c8eb46b8d2b315f2dde51badac29610c0372b280a12d28638e38043c66b3f683af859d9868ff6223de8a4ab31b73044f2c048dbb0fb93fffea47aedbd86c6a469d24266e23e20355dfa88bbdbd05150a", 0x9b) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) write(r1, &(0x7f0000000000)="6c9fae60894979243a5d8b9af66ce694e6bb2ab0d14165885dee1a0d171c3436b971c15c7b5f6b93fe44bcd5e7b1f86a6bb98c365a7065f5c19811df1b4b91237dc6042d6f3b3320cc1fb1c8eb46b8d2b315f2dde51badac29610c0372b280a12d28638e38043c66b3f683af859d9868ff6223de8a4ab31b73044f2c048dbb0fb93fffea47aedbd86c6a469d24266e23e20355dfa88bbdbd05150a", 0x9b) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) (async) 20:46:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xa15, 0x4) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) socket(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xa15, 0x4) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) (async) 20:46:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xf0}, 0x0) 20:46:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108001200", @ANYRES32=r3], 0x1c}}, 0x0) [ 731.113400][T24752] Failed to get privilege flags for destination (handle=0x0:0x0) 20:46:40 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) write(r1, &(0x7f0000000000)="6c9fae60894979243a5d8b9af66ce694e6bb2ab0d14165885dee1a0d171c3436b971c15c7b5f6b93fe44bcd5e7b1f86a6bb98c365a7065f5c19811df1b4b91237dc6042d6f3b3320cc1fb1c8eb46b8d2b315f2dde51badac29610c0372b280a12d28638e38043c66b3f683af859d9868ff6223de8a4ab31b73044f2c048dbb0fb93fffea47aedbd86c6a469d24266e23e20355dfa88bbdbd05150a", 0x9b) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) [ 731.207490][T24761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x300}, 0x0) 20:46:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000200", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:41 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x2c, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:41 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 32) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x7ff, 0xfffffffe, 0xfffffffc, 0x8000, 0x13, "8100000000cfa06d815e874a4a517600"}) r1 = syz_open_pts(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) syz_open_pts(r2, 0x85400) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x10) 20:46:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xa15, 0x4) (async) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:46:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000500", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x500}, 0x0) 20:46:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x600}, 0x0) 20:46:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108001200", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:41 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x0, 0x2}) [ 732.131049][T24804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.159800][ T14] Bluetooth: hci0: command 0x041b tx timeout 20:46:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x700}, 0x0) 20:46:41 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async, rerun: 64) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x0, 0x2}) 20:46:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000148", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:42 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x2d, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x900}, 0x0) 20:46:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000302", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:42 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x0, 0x2}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x0, 0x2}) (async) 20:46:42 executing program 3: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_80211_inject_frame(&(0x7f0000000940)=@broadcast, &(0x7f0000000180)=ANY=[@ANYBLOB="c0ff7f00000000000000080211000001ffffabb96bbce0e19eae091d989c2688ffd28f9ecc7b53498fb8967c0f4ecf76c11c8d18aecf613102f667b44363f24ab8880d7c65d419ce9d6461ac4b5e854de41c2ed50f338425e409343a9bbcd3493fdae54fd6ad9fc0cc7c5eeae88fe34727490b83c96770ce524d9c85706f3421a6c08301b05da17fe595fda2346eee2823afa117968d3ee11bd2fd0a15dfd6633a76de1e9e711740b52f5547b0311e0ef58d52d0a3426feec4d2133cbad199bacc8a776d1764e0b069b6c7493988a0"], 0x2c) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@rts={{}, {0xc9}, @broadcast, @device_b}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) 20:46:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x7ff, 0xfffffffe, 0xfffffffc, 0x8000, 0x13, "8100000000cfa06d815e874a4a517600"}) (async) r1 = syz_open_pts(r0, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) syz_open_pts(r2, 0x85400) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x10) 20:46:42 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000, 0x50) fcntl$dupfd(r1, 0x406, r0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x9b4}, 0x0) 20:46:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000303", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x7ff, 0xfffffffe, 0xfffffffc, 0x8000, 0x13, "8100000000cfa06d815e874a4a517600"}) (async) r1 = syz_open_pts(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) syz_open_pts(r2, 0x85400) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x10) [ 733.074238][T24837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.124961][T24848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000304", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xe00}, 0x0) 20:46:43 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x2e, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:43 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000, 0x50) (async) fcntl$dupfd(r1, 0x406, r0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000308", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xf00}, 0x0) 20:46:43 executing program 3: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_80211_inject_frame(&(0x7f0000000940)=@broadcast, &(0x7f0000000180)=ANY=[@ANYBLOB="c0ff7f00000000000000080211000001ffffabb96bbce0e19eae091d989c2688ffd28f9ecc7b53498fb8967c0f4ecf76c11c8d18aecf613102f667b44363f24ab8880d7c65d419ce9d6461ac4b5e854de41c2ed50f338425e409343a9bbcd3493fdae54fd6ad9fc0cc7c5eeae88fe34727490b83c96770ce524d9c85706f3421a6c08301b05da17fe595fda2346eee2823afa117968d3ee11bd2fd0a15dfd6633a76de1e9e711740b52f5547b0311e0ef58d52d0a3426feec4d2133cbad199bacc8a776d1764e0b069b6c7493988a0"], 0x2c) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@rts={{}, {0xc9}, @broadcast, @device_b}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000940)=@broadcast, &(0x7f0000000180)=ANY=[@ANYBLOB="c0ff7f00000000000000080211000001ffffabb96bbce0e19eae091d989c2688ffd28f9ecc7b53498fb8967c0f4ecf76c11c8d18aecf613102f667b44363f24ab8880d7c65d419ce9d6461ac4b5e854de41c2ed50f338425e409343a9bbcd3493fdae54fd6ad9fc0cc7c5eeae88fe34727490b83c96770ce524d9c85706f3421a6c08301b05da17fe595fda2346eee2823afa117968d3ee11bd2fd0a15dfd6633a76de1e9e711740b52f5547b0311e0ef58d52d0a3426feec4d2133cbad199bacc8a776d1764e0b069b6c7493988a0"], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@rts={{}, {0xc9}, @broadcast, @device_b}, 0x10) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) 20:46:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x3f00}, 0x0) 20:46:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x7, 0x1c6, &(0x7f0000000280)="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"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 733.964266][T24871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:43 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async, rerun: 64) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async, rerun: 64) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000, 0x50) fcntl$dupfd(r1, 0x406, r0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe10800030e", @ANYRES32=r3], 0x1c}}, 0x0) [ 734.100286][T24871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.133662][T24877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x6000}, 0x0) 20:46:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async, rerun: 32) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x7, 0x1c6, &(0x7f0000000280)="bbce54c7eb933da25f578e1f4f7a8edad66d896e4de0469f09e3139cfc664281f1f02213c465e6e6558ee475c4e90766745461b6c7b8aea3c5e15f797fd40e5f423a7d04b51f95f8b66e8bb6cf94bb0f40369369a599eeb8bd9fbb2051df5f7abc7c44706639d680e8fc5d737b1d9ba12a266111a9b4d9e81266c9a04f4fa8ad625f48468a17c866deaac20bf7c0937dac3e829bc47a87dbd90f1ac782464272401549ddb81ab82a0bc3dd34a0e2ed83783e39f22e90fc7409919e125b7d8677d0c6f0504a6e368295b1ecdfdf71d7024f44f3ae251ec7ec544684a93c0f284a9ea6d6aa6a7989019316017232aaa71ab8d293a98c836ca10fa3a1a82608021026883dc8b83705f1b93d4ccd587647dbc8bde61569cb354a544b68e6c16569c8392495d6b5f25cc14768386670447ef7de0c3d0dafe44d8310327d432a8d7fc42a1e04b71c5bd83339c378c71de018d6f91c15bf5978658fecf34548df2f920ea7c19c7669731856e1ea1c5416ee6733374164213fca299e9e19177005d147085eb952ab90299e2fac797e06ff9a742d6f0357afa020b48da447aa4e7bd137bf837562f064e21a3a8bad9e7e970c86a1f362ac8348677a3686d5616df5e0b495bffaa47eecff02726162235db0192c92f1d353be906d775f5ca9fb9219ce9928f21bb646713c745704f38b15e25b6eac79183c7918252ddb49d20331571f786cf00928e823eb692a7fe6c8ca92ab33fa0a842e280c9fd5962e2858d609a4e11eeed4f03cd2b64cde87638f6fa347aba3817ee90e68730054d8922c3677f57fd249202ffcc9aea1b37473f3eabf0fa126700e7b73e53be27720178ecc101c40d4a54de30052961bc4e67a1395c26e0a687b312fe956af122239f58719bb586f59245954298626b07e2d828fdc590c38bc5cc06f1a633fcc64110bf2feda0efab768ec080ccf36196bfb2ffe7ae336e178f616de088a529bd7d946ceef5df786421e38d313bc1ee76232e448dd8a9182debb200c4d33c6e815d82a0273ad59c68ff13a1aded559d4550a1fb5f352ad4c456675b67bc1f8174e671fbb0e5c24ceaec2c2f5f594d14f389e2706a41444a3f1ab2afb57781f6073bc1ef92348182204c0fad4789742226b481b083747e0a73062e283165a9aa3a1250c0ccc7ecb92494a58285488f174946bd9055ee01f1037a4ddc9bb7f364fb056161c19f3c120c7aeaed733abeb2c9bb56ce4e64257f809918b624ccc87e1700f4f61d4fb2b37438d1107e5dbb2715a8b725bf75e39504d666167040ed4a9c0b1aac6b969d8d163da60778c753c7206278ad30fdff3e4f3d37dab618534c5055e4178dda975458839928d487ca3a97cc2f69ae4ddc42bbe83835913dde5bd867c4a544eaed29ae1980dcb9d77d2f5958e5630020d2287369348e9bbff8ae6789db46d30c4896dd0"}) (rerun: 32) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe10800030f", @ANYRES32=r3], 0x1c}}, 0x0) [ 734.151449][T24881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.240495][ T6] Bluetooth: hci0: command 0x040f tx timeout 20:46:44 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x2f, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:44 executing program 3: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000940)=@broadcast, &(0x7f0000000180)=ANY=[@ANYBLOB="c0ff7f00000000000000080211000001ffffabb96bbce0e19eae091d989c2688ffd28f9ecc7b53498fb8967c0f4ecf76c11c8d18aecf613102f667b44363f24ab8880d7c65d419ce9d6461ac4b5e854de41c2ed50f338425e409343a9bbcd3493fdae54fd6ad9fc0cc7c5eeae88fe34727490b83c96770ce524d9c85706f3421a6c08301b05da17fe595fda2346eee2823afa117968d3ee11bd2fd0a15dfd6633a76de1e9e711740b52f5547b0311e0ef58d52d0a3426feec4d2133cbad199bacc8a776d1764e0b069b6c7493988a0"], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@rts={{}, {0xc9}, @broadcast, @device_b}, 0x10) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) 20:46:44 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000200)={{@local, 0x1}, 0x1, 0x1, 0xa19c}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) r4 = openat$bsg(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000140)={0x3, 0xa9c, 0x9, 0x7fff, 0x2f4d, 0x4}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000360", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xb409}, 0x0) 20:46:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x7, 0x1c6, &(0x7f0000000280)="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"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x7, 0x1c6, &(0x7f0000000280)="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"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) [ 734.932910][T24905] Failed to get privilege flags for destination (handle=0x0:0x0) [ 734.952057][T24911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1080003f0", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xf000}, 0x0) [ 734.977430][T24908] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 734.989839][T24913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:44 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r1 = openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000200)={{@local, 0x1}, 0x1, 0x1, 0xa19c}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) r4 = openat$bsg(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000140)={0x3, 0xa9c, 0x9, 0x7fff, 0x2f4d, 0x4}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x30000}, 0x0) 20:46:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) syz_open_pts(0xffffffffffffffff, 0x10001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0x1, 0x5, 0x9, 0x0, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(r1, 0x407, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000180)) openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) splice(r3, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000140)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) 20:46:45 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r1 = openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000200)={{@local, 0x1}, 0x1, 0x1, 0xa19c}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) (async) r4 = openat$bsg(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000140)={0x3, 0xa9c, 0x9, 0x7fff, 0x2f4d, 0x4}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:45 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x30, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1080003ce", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000140)) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000080), 0x12000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000180), 0x2040, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}]]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0xb}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000800) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x70, 0x1405, 0x20, 0x70bd2b, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x7}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) syz_80211_inject_frame(&(0x7f0000000940)=@broadcast, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1], 0x2c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}]]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x5}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40842}, 0x40005) fcntl$setpipe(r3, 0x407, 0xb4d) 20:46:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x34000}, 0x0) 20:46:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x400300}, 0x0) [ 735.877596][T24946] Failed to get privilege flags for destination (handle=0x0:0x0) [ 735.885662][T24943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:45 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x80000) 20:46:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) syz_open_pts(0xffffffffffffffff, 0x10001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0x1, 0x5, 0x9, 0x0, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(r1, 0x407, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000180)) openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) splice(r3, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000140)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(0xffffffffffffffff, 0x10001) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0x1, 0x5, 0x9, 0x0, 0x9}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) pipe(&(0x7f0000000080)) (async) write(r1, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(r1, 0x407, 0x0) (async) ioctl$TCXONC(r1, 0x540a, 0x0) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000180)) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) (async) splice(r3, 0x0, r5, 0x0, 0x10000, 0x0) (async) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000140)) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) (async) 20:46:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xb7aaaa}, 0x0) 20:46:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1080003c0", @ANYRES32=r3], 0x1c}}, 0x0) [ 736.034955][T24958] Failed to get privilege flags for destination (handle=0x0:0x0) 20:46:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xf0ffff}, 0x0) 20:46:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 736.208673][T24970] ptm ptm1: ldisc open failed (-12), clearing slot 1 20:46:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000140)) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000080), 0x12000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) (async) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000180), 0x2040, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}]]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0xb}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000800) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x70, 0x1405, 0x20, 0x70bd2b, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x7}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) (async) syz_80211_inject_frame(&(0x7f0000000940)=@broadcast, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1], 0x2c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}]]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x5}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40842}, 0x40005) (async) fcntl$setpipe(r3, 0x407, 0xb4d) [ 736.316705][T24983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.319866][ T6] Bluetooth: hci0: command 0x0419 tx timeout 20:46:46 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x31, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x1000000}, 0x0) 20:46:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) syz_open_pts(0xffffffffffffffff, 0x10001) (async, rerun: 32) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) (async, rerun: 32) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0x1, 0x5, 0x9, 0x0, 0x9}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(r1, 0x407, 0x0) (async) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000180)) openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) (async) splice(r3, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000140)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) 20:46:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000140)) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000080), 0x12000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000180), 0x2040, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}]]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0xb}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000800) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x70, 0x1405, 0x20, 0x70bd2b, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x7}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) syz_80211_inject_frame(&(0x7f0000000940)=@broadcast, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1], 0x2c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}]]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x5}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40842}, 0x40005) fcntl$setpipe(r3, 0x407, 0xb4d) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) openat$dlm_control(0xffffff9c, &(0x7f0000000080), 0x12000, 0x0) (async) pipe2(&(0x7f00000000c0), 0x80) (async) openat$pfkey(0xffffff9c, &(0x7f0000000180), 0x2040, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}]]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0xb}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000800) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x70, 0x1405, 0x20, 0x70bd2b, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x7}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) (async) syz_80211_inject_frame(&(0x7f0000000940)=@broadcast, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1], 0x2c) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}]]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x5}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40842}, 0x40005) (async) fcntl$setpipe(r3, 0x407, 0xb4d) (async) 20:46:46 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x80000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x80000) (async) 20:46:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x2000000}, 0x0) 20:46:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 736.821836][T24990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:46 executing program 0: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x2}, &(0x7f0000000100)=0x28) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r2, &(0x7f00000002c0)="a6aae392360de70beefaef4487ee19216a23c63a75e41060748168c0c73821e6506f35d7437ebc350a322ca6b3409d1f6a7885079543393e6c952b14233e8c7f28d6d23df0deb83e0a4c26fdb0c5434d04d8f5a8246c41b25f0858c2385519b6b636afe68faf9fad07d0e43640bf5597eb91b0ba9b4f0c98022d2bcabbfb9a569e7e6b54ad89405faf89eebe77ade6a9e7ca1e4ab21a969bde184e94d85d5856240917c5c4", 0xa5) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000140)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x8, 0x101200) fcntl$getflags(r3, 0xb) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x2) write(r2, &(0x7f0000000000)="0634ba362c22af3238060164dd26014f56dd7ef7fb59d7c18fd234aad59258b2ab41b82d751ad3a35840177af334db4e4e9e4de9ee383a930eab58a89873b0233e6d3c5886a0ed21f94a496a8f677524f7bea29d058a6299ef8f2ee44c2cf2f680e16447e3094afb7349a77eb22d1b3eb27e0d58363b93307292a5", 0x7b) 20:46:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe10800030e", @ANYRES32=r3], 0x1c}}, 0x0) [ 736.921181][T25015] Failed to get privilege flags for destination (handle=0x0:0x0) 20:46:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x3000000}, 0x0) 20:46:46 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c01b09f8c90211000000080211000001ffffffffffff"], 0x2c) [ 737.091215][T25037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:47 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x32, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000309", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:47 executing program 0: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x2}, &(0x7f0000000100)=0x28) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r2, &(0x7f00000002c0)="a6aae392360de70beefaef4487ee19216a23c63a75e41060748168c0c73821e6506f35d7437ebc350a322ca6b3409d1f6a7885079543393e6c952b14233e8c7f28d6d23df0deb83e0a4c26fdb0c5434d04d8f5a8246c41b25f0858c2385519b6b636afe68faf9fad07d0e43640bf5597eb91b0ba9b4f0c98022d2bcabbfb9a569e7e6b54ad89405faf89eebe77ade6a9e7ca1e4ab21a969bde184e94d85d5856240917c5c4", 0xa5) (async, rerun: 32) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async, rerun: 32) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x8, 0x101200) fcntl$getflags(r3, 0xb) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x2) (async) write(r2, &(0x7f0000000000)="0634ba362c22af3238060164dd26014f56dd7ef7fb59d7c18fd234aad59258b2ab41b82d751ad3a35840177af334db4e4e9e4de9ee383a930eab58a89873b0233e6d3c5886a0ed21f94a496a8f677524f7bea29d058a6299ef8f2ee44c2cf2f680e16447e3094afb7349a77eb22d1b3eb27e0d58363b93307292a5", 0x7b) 20:46:47 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0x80000) 20:46:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x4000000}, 0x0) 20:46:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c01b09f8c90211000000080211000001ffffffffffff"], 0x2c) 20:46:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x5000000}, 0x0) [ 737.748454][T25047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:47 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x3ff, 0xfffffffffffffffd, 0x5, 0x7fffffff}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:47 executing program 0: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x2}, &(0x7f0000000100)=0x28) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r2, &(0x7f00000002c0)="a6aae392360de70beefaef4487ee19216a23c63a75e41060748168c0c73821e6506f35d7437ebc350a322ca6b3409d1f6a7885079543393e6c952b14233e8c7f28d6d23df0deb83e0a4c26fdb0c5434d04d8f5a8246c41b25f0858c2385519b6b636afe68faf9fad07d0e43640bf5597eb91b0ba9b4f0c98022d2bcabbfb9a569e7e6b54ad89405faf89eebe77ade6a9e7ca1e4ab21a969bde184e94d85d5856240917c5c4", 0xa5) (async) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, &(0x7f0000000140)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x8, 0x101200) fcntl$getflags(r3, 0xb) (async) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x2) (async) write(r2, &(0x7f0000000000)="0634ba362c22af3238060164dd26014f56dd7ef7fb59d7c18fd234aad59258b2ab41b82d751ad3a35840177af334db4e4e9e4de9ee383a930eab58a89873b0233e6d3c5886a0ed21f94a496a8f677524f7bea29d058a6299ef8f2ee44c2cf2f680e16447e3094afb7349a77eb22d1b3eb27e0d58363b93307292a5", 0x7b) 20:46:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x6000000}, 0x0) 20:46:47 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x3ff, 0xfffffffffffffffd, 0x5, 0x7fffffff}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x3ff, 0xfffffffffffffffd, 0x5, 0x7fffffff}) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) [ 737.844135][T25059] Failed to get privilege flags for destination (handle=0x0:0x0) [ 737.983695][T25070] Failed to get privilege flags for destination (handle=0x0:0x0) 20:46:48 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x33, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x7000000}, 0x0) 20:46:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0xfffffffe, 0x7ff, 0x0, 0x5, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) ioctl$TIOCCBRK(r3, 0x5428) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x10000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r8, 0x10e, 0x0, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f0000000040)) 20:46:48 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x3ff, 0xfffffffffffffffd, 0x5, 0x7fffffff}) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:48 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c01b09f8c90211000000080211000001ffffffffffff"], 0x2c) 20:46:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x8000000}, 0x0) [ 738.646186][T25084] Failed to get privilege flags for destination (handle=0x0:0x0) [ 738.670507][T25080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:48 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x50003, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000140)='./file0\x00', 0x109040, 0x168) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@host}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) write(r5, &(0x7f0000000100)="b1", 0x19000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000200)={r6, 0x3}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000280)={&(0x7f0000000780)=[0x7fff, 0x6, 0x1000, 0x3, 0x775a, 0x100, 0x8, 0x5, 0x6, 0x80000001, 0x9, 0x5, 0x400, 0x2, 0x1, 0x2, 0x7, 0x5, 0x9, 0x3, 0x6, 0x8, 0xd1be, 0x4, 0x6, 0x9, 0x2, 0x7, 0x0, 0x4, 0x4, 0x0, 0x3ff, 0x100, 0x4, 0x3, 0xda, 0x81, 0x9, 0x8000, 0x1ff, 0x8, 0x1ff, 0x6, 0x4b6, 0x3, 0x7, 0x8, 0x2, 0x3, 0x6000, 0x9, 0x0, 0x8000, 0x0, 0x3, 0x3, 0x400, 0x2, 0x8, 0x80, 0x69a6, 0x0, 0x7, 0x1f, 0xfff, 0x7, 0x7, 0x0, 0x2, 0x3f, 0xea, 0x1f, 0x6, 0xfc5, 0xd, 0x6, 0x1f, 0xbb, 0x2, 0x2, 0x0, 0x117, 0x5, 0x9, 0x509a8b54, 0x193f, 0x1f, 0x7f, 0x9, 0x6594, 0x0, 0x0, 0x300000, 0x1, 0x3, 0x4, 0x4a08, 0x8, 0x401, 0x1, 0x529, 0x7, 0x4, 0xef, 0x3ff, 0x20, 0x2, 0x16c0, 0x6, 0x10001, 0xf1a6, 0xffffff01, 0xd0, 0x7, 0x5, 0x8, 0x3ff, 0x6, 0xf9d, 0x9, 0x4, 0x2, 0xfffff001, 0xf0a, 0xffffffff, 0xffffffff, 0x400, 0x9, 0xfffffffd, 0x7, 0x5, 0x1, 0x40, 0x7, 0x7, 0x7, 0xfffffff8, 0x1ff, 0x3bf, 0x7fff, 0x4, 0x5, 0x7, 0x1ff, 0xffffffff, 0x1, 0x5, 0x9, 0x85, 0x800, 0x7, 0x9, 0x1, 0x73c, 0x9, 0x9, 0x3, 0x401, 0x7607, 0xff, 0xffffffee, 0xffffffff, 0x0, 0x3f, 0x80000000, 0x401, 0xa63, 0xfffffffa, 0x2, 0xe095, 0x5, 0x79, 0xff, 0xfffff800, 0x479, 0x93, 0x1, 0x3f, 0x81, 0x3, 0x1f, 0x270, 0x1, 0x101, 0x81, 0x7fffffff, 0x3, 0x5, 0x4, 0x6, 0xff, 0x2, 0x7a6f, 0x4eb, 0x10001, 0x4b4, 0x64, 0x6, 0x5, 0x1, 0x6, 0x1, 0x7, 0x1, 0x25c, 0x0, 0x5, 0x0, 0x6, 0x9, 0x4, 0x17, 0x9, 0xffff, 0x6, 0x2000000, 0x8000, 0x6, 0x8, 0x1, 0xfff, 0x401, 0x8, 0x4, 0x3ff, 0x7fff, 0x9, 0x4, 0x165, 0x4, 0x8, 0xd7, 0x0, 0x27326e9c, 0x7ff, 0x8, 0x7, 0x3f, 0x3e, 0x80, 0xa1, 0xd7, 0x7, 0x10001, 0x2, 0x6, 0xcc8, 0x10000, 0x9e76e70f, 0xfff, 0x7fffffff, 0x89, 0x1000, 0x7, 0x4, 0xfa7, 0x4, 0x6, 0x4, 0x5aff, 0x3ff, 0x7, 0x81, 0x4, 0x3, 0x6, 0xfff, 0x200, 0x5, 0x1, 0x5, 0xd0, 0x8, 0x56, 0x8, 0x7fff, 0x8, 0x1, 0xfffffffc, 0x5, 0x6, 0xfffffffc, 0x0, 0x0, 0x9, 0x1, 0x9, 0x6, 0xfff, 0x401, 0xfff, 0x3, 0xfffffffd, 0x1000, 0x2, 0xffffffff, 0x80, 0x0, 0x2, 0xff, 0x0, 0x6, 0x9, 0x4, 0x9, 0x5, 0x10000, 0x8001, 0x8, 0xffffffff, 0x9, 0xffff, 0x0, 0x6, 0x4, 0xfffffff8, 0x8, 0x101, 0x3, 0x0, 0x9, 0x10001, 0x543, 0x3, 0x1, 0x4, 0x5, 0x1, 0x8, 0x7f, 0xfffffffb, 0x2, 0x5, 0x93, 0xfff, 0x3ff, 0x1, 0x7, 0x81, 0x2, 0x73, 0x4, 0x25, 0x8, 0xffffffff, 0x0, 0x2, 0xf212, 0x1, 0x1, 0x7, 0x8, 0x7d, 0x2, 0x3, 0xb7, 0x25, 0x3, 0x7d, 0xff, 0x1, 0x3, 0x7, 0x0, 0x8001, 0x3, 0x7, 0xfff, 0x14f2, 0x6, 0x10001, 0x7ff, 0xfffffff7, 0x7c9, 0x5623d46e, 0x4, 0x9, 0x5, 0xc08e, 0x4, 0x7ff, 0x200, 0x6885, 0x0, 0x401, 0x400, 0x100, 0x902, 0x8, 0x3, 0x100, 0x8, 0x2, 0x4, 0x1, 0x9, 0x760, 0x4, 0x7, 0x1ff, 0x5e, 0x81, 0x1, 0x5, 0x3, 0xdf9, 0x10001, 0x4, 0x3b, 0x7fff, 0x6, 0xf8, 0x59a, 0x9, 0x2, 0x3, 0x10000, 0x2, 0x4844, 0x6, 0x1f, 0xfffffffb, 0x7a, 0x0, 0x1ff, 0x3, 0x638, 0x9, 0x4, 0x7, 0xffffffff, 0x1ff, 0x9, 0x67, 0x2, 0x7, 0x3, 0x7ff, 0xe1d, 0xf1, 0x3, 0x3b5, 0x6, 0x3f, 0x1f, 0x1, 0x0, 0x0, 0x8, 0x1, 0x7, 0x3ff, 0xe01, 0x0, 0x9f, 0x7, 0xffff, 0xfb3, 0x6, 0xff, 0x1000, 0x100, 0xfffff800, 0x1, 0x8, 0x6, 0x9, 0x3, 0x3, 0x1, 0x400, 0xfff, 0x5e0, 0x2ef9, 0x6, 0x0, 0x80000000, 0x10000, 0x1, 0x66b02a2c, 0x2, 0x6, 0x5, 0x4, 0x9, 0x2628, 0x7ff, 0x10000, 0x380000, 0x26a116b1, 0x80000000, 0x3, 0x80000000, 0x10000, 0x6, 0x29c, 0x9, 0x3, 0x8000, 0x80000000, 0x9, 0x7fffffff, 0x1, 0x3, 0x1, 0x5, 0x8000, 0x5, 0x4, 0x20, 0x5, 0x9, 0x2, 0x2, 0xfff, 0x3, 0xfff, 0x100, 0x1000, 0x7a64, 0x2, 0xf3, 0x8000, 0x8, 0xe91, 0x7, 0x1fa, 0x80000001, 0x1, 0x3, 0x7fffffff, 0x3ff, 0x80000001, 0x10001, 0x5, 0xc9, 0x401, 0x1, 0x2, 0x2, 0x6, 0x9e, 0x0, 0x10001, 0x5, 0x54042b39, 0xa6, 0x4, 0x1, 0x6, 0xfffffff7, 0x6b3e, 0x1, 0x80000001, 0x8, 0x40, 0x5b, 0x0, 0xdcad, 0xfffffffb, 0x2, 0x0, 0x2, 0x9e, 0x2, 0x5, 0x2, 0x8, 0xffff, 0x5, 0xff, 0x3, 0x80000000, 0x40, 0x80000001, 0x4, 0xffe00, 0x7, 0x9, 0x8, 0x5, 0x2, 0xc439, 0x0, 0xcb96, 0x8000, 0x1ff, 0x4, 0x1, 0x3, 0x4, 0x4000, 0x9305, 0x7, 0x1, 0x9, 0x3ff, 0x5945, 0x1ff, 0x7c0, 0xffffff9b, 0x4, 0xce, 0x18ee, 0x2, 0x1ff, 0x3, 0x7, 0x0, 0x3, 0x8001, 0x4, 0xffffffff, 0x7, 0x8000, 0x0, 0x7f, 0x3, 0x3, 0x7, 0x7, 0xdff0, 0x9, 0x5, 0x8, 0x5, 0xfff, 0x5, 0xfffffff7, 0x340, 0xdf3, 0x17c, 0xdb7a, 0xaa07, 0xff, 0x2, 0x1, 0x1, 0x3, 0x80000001, 0xfffffff9, 0x1, 0x7fff, 0x1f, 0x4, 0x6, 0x7ff, 0xff800000, 0x3, 0x5, 0x7f, 0x800, 0x80000000, 0xbf, 0x0, 0x3, 0x6, 0x2, 0x8, 0x2800, 0x0, 0x1, 0xffffff81, 0x7, 0xfffffffd, 0x1, 0xff, 0x400, 0x81, 0x5, 0xffff, 0x7, 0x7, 0x4, 0x9, 0xffff, 0x101, 0x3, 0x1, 0x7, 0xe4c5, 0x315, 0x4, 0x3, 0x200, 0x1, 0xffffffff, 0xffff, 0x20, 0xdfc1, 0x0, 0x3f, 0x3465, 0x100, 0x7fff, 0x1, 0xd1d, 0xffff8000, 0x2, 0x6, 0xee6c, 0x401, 0x8, 0x4, 0x7, 0x2, 0x7fff, 0x2, 0x4, 0x8, 0x2, 0x0, 0x1d, 0xff, 0x1, 0x4042, 0x9c9, 0x6, 0x5, 0x5, 0x8, 0xff, 0x80, 0x10000, 0x800, 0x1, 0x3106, 0x23, 0x11b, 0x8, 0x0, 0x3, 0x519, 0x9, 0x101, 0x8, 0x4, 0x3f, 0x2, 0x20, 0xfffffffe, 0x3ff, 0x0, 0x100, 0x101, 0x2, 0x85, 0x1, 0x90, 0x8000, 0x8, 0x80000001, 0x1, 0x0, 0x666a8419, 0x2, 0x1ff, 0x101, 0x6, 0x3, 0x52, 0x4, 0xfffffff8, 0x1edaeb00, 0x4, 0x8e0, 0x101, 0xffff, 0x7f, 0xa754, 0x16d, 0x10001, 0x5, 0xffffab93, 0x0, 0x7, 0x90000000, 0xf2, 0x6, 0x3, 0x0, 0x4, 0xc45, 0x3, 0x101, 0x80000000, 0x1, 0x7, 0xe6c0, 0x8, 0x7fff, 0x8001, 0x9, 0x16, 0x401, 0x8001, 0x1ff, 0xcf1, 0x9, 0x2, 0x2, 0x8, 0xa6, 0xc26, 0x1f, 0x4, 0x4, 0x1, 0x1, 0xaf, 0xfff, 0x6, 0x96, 0xffffffff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x2, 0x7f, 0x7ff, 0x3, 0x1, 0x9, 0x80000001, 0x81, 0x3, 0x2, 0x7fffffff, 0xee, 0x3, 0x9, 0x3, 0x8, 0x2, 0x3, 0x43cb32dd, 0x3f, 0x3, 0x7fff, 0x2, 0xfff, 0x457, 0x5, 0xe13, 0x6, 0xffffffff, 0x6, 0x7fff, 0x4, 0x0, 0x6, 0x40, 0x3ff, 0x6, 0xfff, 0x4, 0x7, 0x4, 0x5, 0xf4, 0xffffffff, 0x0, 0x62a7, 0x2, 0xe25, 0x80, 0x5, 0x7, 0x8, 0x6, 0xff, 0xb2b2, 0x3ff, 0x9a, 0x3, 0xfffffff7, 0x7f, 0x0, 0x7, 0x3ff, 0x4, 0x7b7f, 0xff4, 0x5, 0x0, 0x22, 0x4, 0x711, 0x1, 0x40, 0x7, 0xffff, 0x0, 0x4, 0x6, 0x0, 0x0, 0x5, 0x7fff, 0x5, 0x100, 0x7, 0x7, 0xffffff00, 0x589, 0x6, 0x4, 0x2, 0x20, 0x0, 0xfffffe01, 0x4, 0x9, 0x1, 0xfffffffb, 0x81, 0x8, 0x101, 0x7, 0x6, 0x0, 0x9, 0x81, 0x7, 0x8, 0x2, 0x0, 0x0, 0x3, 0x2, 0xe18, 0x4, 0x7, 0xfffffff7, 0x3f, 0x0, 0x100, 0xffffffff, 0x40, 0x40, 0x7f, 0x0, 0x1161, 0x9, 0xfffffc00, 0x1f, 0x9, 0x9, 0x7, 0x80, 0x222, 0xffff, 0x2c1a, 0x5, 0x3, 0x1, 0x7, 0x7fff, 0x81, 0xfffffffe, 0x1ff, 0x0, 0x2, 0x0, 0x6bb7, 0x60000000, 0x3, 0x8, 0x5, 0x400, 0x800, 0x1ec, 0x1, 0x2, 0x952, 0x401, 0x5, 0x0, 0x6, 0x2, 0x1, 0x1, 0x3ff, 0x9, 0x4, 0x400, 0x9, 0x4db, 0x3, 0x7, 0x3f, 0x6, 0x3, 0x8001, 0x2, 0xcc56, 0x5, 0x1, 0x0, 0x3, 0x8, 0x9, 0x7f, 0x7, 0x80000001, 0x5, 0xee, 0x2, 0x0, 0x1, 0x903f, 0x6, 0x39, 0x9, 0x3, 0xc4d, 0x0, 0x1, 0x2, 0x7, 0x1], 0x5, 0x400}) 20:46:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x9000000}, 0x0) 20:46:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1080003ff", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xe000000}, 0x0) 20:46:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xf000000}, 0x0) 20:46:49 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x34, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0xfffffffe, 0x7ff, 0x0, 0x5, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) (async) ioctl$TIOCCBRK(r3, 0x5428) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x10000, 0x0) (async) ioctl$TCXONC(r5, 0x540a, 0x1) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x10000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r8, 0x10e, 0x0, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f0000000040)) 20:46:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x3f000000}, 0x0) [ 739.574982][ T5934] device hsr_slave_0 left promiscuous mode [ 739.617055][ T5934] device hsr_slave_1 left promiscuous mode [ 739.643379][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.697227][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.709693][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.717104][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.728725][ T5934] device bridge_slave_1 left promiscuous mode [ 739.736740][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.748667][ T5934] device bridge_slave_0 left promiscuous mode [ 739.755303][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.770535][ T5934] device veth1_macvtap left promiscuous mode [ 739.776594][ T5934] device veth0_macvtap left promiscuous mode [ 739.783365][ T5934] device veth1_vlan left promiscuous mode [ 739.789190][ T5934] device veth0_vlan left promiscuous mode [ 739.998153][ T5934] team0 (unregistering): Port device team_slave_1 removed [ 740.018702][ T5934] team0 (unregistering): Port device team_slave_0 removed [ 740.034254][ T5934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.051152][ T5934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.137631][ T5934] bond0 (unregistering): Released all slaves [ 741.689904][ T3641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 741.698937][ T3641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 741.707572][ T3641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.718637][ T3641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.726470][ T3641] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 741.734578][ T3641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 741.823139][T25128] chnl_net:caif_netlink_parms(): no params data found [ 741.867472][T25128] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.874913][T25128] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.884665][T25128] device bridge_slave_0 entered promiscuous mode [ 741.896056][T25128] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.903475][T25128] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.912698][T25128] device bridge_slave_1 entered promiscuous mode [ 741.957825][T25128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.974013][T25128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.033086][T25128] team0: Port device team_slave_0 added [ 742.041827][T25128] team0: Port device team_slave_1 added [ 742.085875][T25128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.093640][T25128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.122738][T25128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.144911][T25128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.157823][T25128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.196449][T25128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.260139][T25128] device hsr_slave_0 entered promiscuous mode [ 742.267059][T25128] device hsr_slave_1 entered promiscuous mode [ 742.401935][T25128] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.409068][T25128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.416498][T25128] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.423641][T25128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.497450][T25128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.513180][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 742.523724][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.534963][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.545189][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 742.562321][T25128] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.579174][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 742.587880][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.595007][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.610172][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 742.618562][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.625700][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.640369][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 742.651665][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 742.665386][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 742.682869][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 742.691694][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 742.705749][T25128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 742.724848][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 742.733182][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 742.747563][T25128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.764091][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 742.782825][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 742.792071][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 742.799991][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 742.811529][T25128] device veth0_vlan entered promiscuous mode [ 742.824920][T25128] device veth1_vlan entered promiscuous mode [ 742.845518][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 742.854264][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 742.865678][T25128] device veth0_macvtap entered promiscuous mode [ 742.876728][T25128] device veth1_macvtap entered promiscuous mode [ 742.897648][T25128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 742.909201][T25128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.921333][T25128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 742.932503][T25128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.944947][T25128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 742.955783][T25128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.965828][T25128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 742.976546][T25128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.986523][T25128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 742.997599][T25128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.008603][T25128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.017611][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 743.026181][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 743.034975][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 743.048887][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 743.060465][T25128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 743.071260][T25128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.081138][T25128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 743.091616][T25128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.101501][T25128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 743.112080][T25128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.122410][T25128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 743.132888][T25128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.143493][T25128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 743.154645][T25128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.170693][T25128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.178693][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 743.187420][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 743.256911][ T985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.267329][ T985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.288224][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 743.310781][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.319057][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.330266][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 743.382102][T25134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:53 executing program 3: sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000d060300009dd06e4e00000003000002114f674c3562c2585b7728e47b8baeccab000300686134"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4040000) 20:46:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0xfffffffe, 0x7ff, 0x0, 0x5, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) ioctl$TIOCCBRK(r3, 0x5428) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x10000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r8, 0x10e, 0x0, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0xfffffffe, 0x7ff, 0x0, 0x5, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r3, 0x0, r4, 0x0, 0x10000, 0x0) (async) ioctl$TIOCCBRK(r3, 0x5428) (async) pipe(&(0x7f0000000000)) (async) splice(r2, 0x0, r5, 0x0, 0x10000, 0x0) (async) ioctl$TCXONC(r5, 0x540a, 0x1) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r6, 0x0, r7, 0x0, 0x10000, 0x0) (async) ioctl$TCXONC(r6, 0x540a, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$netlink(r8, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x80049367, &(0x7f0000000040)) (async) 20:46:53 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x50003, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) open(&(0x7f0000000140)='./file0\x00', 0x109040, 0x168) (rerun: 32) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@host}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) (async) write(r5, &(0x7f0000000100)="b1", 0x19000) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000200)={r6, 0x3}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000280)={&(0x7f0000000780)=[0x7fff, 0x6, 0x1000, 0x3, 0x775a, 0x100, 0x8, 0x5, 0x6, 0x80000001, 0x9, 0x5, 0x400, 0x2, 0x1, 0x2, 0x7, 0x5, 0x9, 0x3, 0x6, 0x8, 0xd1be, 0x4, 0x6, 0x9, 0x2, 0x7, 0x0, 0x4, 0x4, 0x0, 0x3ff, 0x100, 0x4, 0x3, 0xda, 0x81, 0x9, 0x8000, 0x1ff, 0x8, 0x1ff, 0x6, 0x4b6, 0x3, 0x7, 0x8, 0x2, 0x3, 0x6000, 0x9, 0x0, 0x8000, 0x0, 0x3, 0x3, 0x400, 0x2, 0x8, 0x80, 0x69a6, 0x0, 0x7, 0x1f, 0xfff, 0x7, 0x7, 0x0, 0x2, 0x3f, 0xea, 0x1f, 0x6, 0xfc5, 0xd, 0x6, 0x1f, 0xbb, 0x2, 0x2, 0x0, 0x117, 0x5, 0x9, 0x509a8b54, 0x193f, 0x1f, 0x7f, 0x9, 0x6594, 0x0, 0x0, 0x300000, 0x1, 0x3, 0x4, 0x4a08, 0x8, 0x401, 0x1, 0x529, 0x7, 0x4, 0xef, 0x3ff, 0x20, 0x2, 0x16c0, 0x6, 0x10001, 0xf1a6, 0xffffff01, 0xd0, 0x7, 0x5, 0x8, 0x3ff, 0x6, 0xf9d, 0x9, 0x4, 0x2, 0xfffff001, 0xf0a, 0xffffffff, 0xffffffff, 0x400, 0x9, 0xfffffffd, 0x7, 0x5, 0x1, 0x40, 0x7, 0x7, 0x7, 0xfffffff8, 0x1ff, 0x3bf, 0x7fff, 0x4, 0x5, 0x7, 0x1ff, 0xffffffff, 0x1, 0x5, 0x9, 0x85, 0x800, 0x7, 0x9, 0x1, 0x73c, 0x9, 0x9, 0x3, 0x401, 0x7607, 0xff, 0xffffffee, 0xffffffff, 0x0, 0x3f, 0x80000000, 0x401, 0xa63, 0xfffffffa, 0x2, 0xe095, 0x5, 0x79, 0xff, 0xfffff800, 0x479, 0x93, 0x1, 0x3f, 0x81, 0x3, 0x1f, 0x270, 0x1, 0x101, 0x81, 0x7fffffff, 0x3, 0x5, 0x4, 0x6, 0xff, 0x2, 0x7a6f, 0x4eb, 0x10001, 0x4b4, 0x64, 0x6, 0x5, 0x1, 0x6, 0x1, 0x7, 0x1, 0x25c, 0x0, 0x5, 0x0, 0x6, 0x9, 0x4, 0x17, 0x9, 0xffff, 0x6, 0x2000000, 0x8000, 0x6, 0x8, 0x1, 0xfff, 0x401, 0x8, 0x4, 0x3ff, 0x7fff, 0x9, 0x4, 0x165, 0x4, 0x8, 0xd7, 0x0, 0x27326e9c, 0x7ff, 0x8, 0x7, 0x3f, 0x3e, 0x80, 0xa1, 0xd7, 0x7, 0x10001, 0x2, 0x6, 0xcc8, 0x10000, 0x9e76e70f, 0xfff, 0x7fffffff, 0x89, 0x1000, 0x7, 0x4, 0xfa7, 0x4, 0x6, 0x4, 0x5aff, 0x3ff, 0x7, 0x81, 0x4, 0x3, 0x6, 0xfff, 0x200, 0x5, 0x1, 0x5, 0xd0, 0x8, 0x56, 0x8, 0x7fff, 0x8, 0x1, 0xfffffffc, 0x5, 0x6, 0xfffffffc, 0x0, 0x0, 0x9, 0x1, 0x9, 0x6, 0xfff, 0x401, 0xfff, 0x3, 0xfffffffd, 0x1000, 0x2, 0xffffffff, 0x80, 0x0, 0x2, 0xff, 0x0, 0x6, 0x9, 0x4, 0x9, 0x5, 0x10000, 0x8001, 0x8, 0xffffffff, 0x9, 0xffff, 0x0, 0x6, 0x4, 0xfffffff8, 0x8, 0x101, 0x3, 0x0, 0x9, 0x10001, 0x543, 0x3, 0x1, 0x4, 0x5, 0x1, 0x8, 0x7f, 0xfffffffb, 0x2, 0x5, 0x93, 0xfff, 0x3ff, 0x1, 0x7, 0x81, 0x2, 0x73, 0x4, 0x25, 0x8, 0xffffffff, 0x0, 0x2, 0xf212, 0x1, 0x1, 0x7, 0x8, 0x7d, 0x2, 0x3, 0xb7, 0x25, 0x3, 0x7d, 0xff, 0x1, 0x3, 0x7, 0x0, 0x8001, 0x3, 0x7, 0xfff, 0x14f2, 0x6, 0x10001, 0x7ff, 0xfffffff7, 0x7c9, 0x5623d46e, 0x4, 0x9, 0x5, 0xc08e, 0x4, 0x7ff, 0x200, 0x6885, 0x0, 0x401, 0x400, 0x100, 0x902, 0x8, 0x3, 0x100, 0x8, 0x2, 0x4, 0x1, 0x9, 0x760, 0x4, 0x7, 0x1ff, 0x5e, 0x81, 0x1, 0x5, 0x3, 0xdf9, 0x10001, 0x4, 0x3b, 0x7fff, 0x6, 0xf8, 0x59a, 0x9, 0x2, 0x3, 0x10000, 0x2, 0x4844, 0x6, 0x1f, 0xfffffffb, 0x7a, 0x0, 0x1ff, 0x3, 0x638, 0x9, 0x4, 0x7, 0xffffffff, 0x1ff, 0x9, 0x67, 0x2, 0x7, 0x3, 0x7ff, 0xe1d, 0xf1, 0x3, 0x3b5, 0x6, 0x3f, 0x1f, 0x1, 0x0, 0x0, 0x8, 0x1, 0x7, 0x3ff, 0xe01, 0x0, 0x9f, 0x7, 0xffff, 0xfb3, 0x6, 0xff, 0x1000, 0x100, 0xfffff800, 0x1, 0x8, 0x6, 0x9, 0x3, 0x3, 0x1, 0x400, 0xfff, 0x5e0, 0x2ef9, 0x6, 0x0, 0x80000000, 0x10000, 0x1, 0x66b02a2c, 0x2, 0x6, 0x5, 0x4, 0x9, 0x2628, 0x7ff, 0x10000, 0x380000, 0x26a116b1, 0x80000000, 0x3, 0x80000000, 0x10000, 0x6, 0x29c, 0x9, 0x3, 0x8000, 0x80000000, 0x9, 0x7fffffff, 0x1, 0x3, 0x1, 0x5, 0x8000, 0x5, 0x4, 0x20, 0x5, 0x9, 0x2, 0x2, 0xfff, 0x3, 0xfff, 0x100, 0x1000, 0x7a64, 0x2, 0xf3, 0x8000, 0x8, 0xe91, 0x7, 0x1fa, 0x80000001, 0x1, 0x3, 0x7fffffff, 0x3ff, 0x80000001, 0x10001, 0x5, 0xc9, 0x401, 0x1, 0x2, 0x2, 0x6, 0x9e, 0x0, 0x10001, 0x5, 0x54042b39, 0xa6, 0x4, 0x1, 0x6, 0xfffffff7, 0x6b3e, 0x1, 0x80000001, 0x8, 0x40, 0x5b, 0x0, 0xdcad, 0xfffffffb, 0x2, 0x0, 0x2, 0x9e, 0x2, 0x5, 0x2, 0x8, 0xffff, 0x5, 0xff, 0x3, 0x80000000, 0x40, 0x80000001, 0x4, 0xffe00, 0x7, 0x9, 0x8, 0x5, 0x2, 0xc439, 0x0, 0xcb96, 0x8000, 0x1ff, 0x4, 0x1, 0x3, 0x4, 0x4000, 0x9305, 0x7, 0x1, 0x9, 0x3ff, 0x5945, 0x1ff, 0x7c0, 0xffffff9b, 0x4, 0xce, 0x18ee, 0x2, 0x1ff, 0x3, 0x7, 0x0, 0x3, 0x8001, 0x4, 0xffffffff, 0x7, 0x8000, 0x0, 0x7f, 0x3, 0x3, 0x7, 0x7, 0xdff0, 0x9, 0x5, 0x8, 0x5, 0xfff, 0x5, 0xfffffff7, 0x340, 0xdf3, 0x17c, 0xdb7a, 0xaa07, 0xff, 0x2, 0x1, 0x1, 0x3, 0x80000001, 0xfffffff9, 0x1, 0x7fff, 0x1f, 0x4, 0x6, 0x7ff, 0xff800000, 0x3, 0x5, 0x7f, 0x800, 0x80000000, 0xbf, 0x0, 0x3, 0x6, 0x2, 0x8, 0x2800, 0x0, 0x1, 0xffffff81, 0x7, 0xfffffffd, 0x1, 0xff, 0x400, 0x81, 0x5, 0xffff, 0x7, 0x7, 0x4, 0x9, 0xffff, 0x101, 0x3, 0x1, 0x7, 0xe4c5, 0x315, 0x4, 0x3, 0x200, 0x1, 0xffffffff, 0xffff, 0x20, 0xdfc1, 0x0, 0x3f, 0x3465, 0x100, 0x7fff, 0x1, 0xd1d, 0xffff8000, 0x2, 0x6, 0xee6c, 0x401, 0x8, 0x4, 0x7, 0x2, 0x7fff, 0x2, 0x4, 0x8, 0x2, 0x0, 0x1d, 0xff, 0x1, 0x4042, 0x9c9, 0x6, 0x5, 0x5, 0x8, 0xff, 0x80, 0x10000, 0x800, 0x1, 0x3106, 0x23, 0x11b, 0x8, 0x0, 0x3, 0x519, 0x9, 0x101, 0x8, 0x4, 0x3f, 0x2, 0x20, 0xfffffffe, 0x3ff, 0x0, 0x100, 0x101, 0x2, 0x85, 0x1, 0x90, 0x8000, 0x8, 0x80000001, 0x1, 0x0, 0x666a8419, 0x2, 0x1ff, 0x101, 0x6, 0x3, 0x52, 0x4, 0xfffffff8, 0x1edaeb00, 0x4, 0x8e0, 0x101, 0xffff, 0x7f, 0xa754, 0x16d, 0x10001, 0x5, 0xffffab93, 0x0, 0x7, 0x90000000, 0xf2, 0x6, 0x3, 0x0, 0x4, 0xc45, 0x3, 0x101, 0x80000000, 0x1, 0x7, 0xe6c0, 0x8, 0x7fff, 0x8001, 0x9, 0x16, 0x401, 0x8001, 0x1ff, 0xcf1, 0x9, 0x2, 0x2, 0x8, 0xa6, 0xc26, 0x1f, 0x4, 0x4, 0x1, 0x1, 0xaf, 0xfff, 0x6, 0x96, 0xffffffff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x2, 0x7f, 0x7ff, 0x3, 0x1, 0x9, 0x80000001, 0x81, 0x3, 0x2, 0x7fffffff, 0xee, 0x3, 0x9, 0x3, 0x8, 0x2, 0x3, 0x43cb32dd, 0x3f, 0x3, 0x7fff, 0x2, 0xfff, 0x457, 0x5, 0xe13, 0x6, 0xffffffff, 0x6, 0x7fff, 0x4, 0x0, 0x6, 0x40, 0x3ff, 0x6, 0xfff, 0x4, 0x7, 0x4, 0x5, 0xf4, 0xffffffff, 0x0, 0x62a7, 0x2, 0xe25, 0x80, 0x5, 0x7, 0x8, 0x6, 0xff, 0xb2b2, 0x3ff, 0x9a, 0x3, 0xfffffff7, 0x7f, 0x0, 0x7, 0x3ff, 0x4, 0x7b7f, 0xff4, 0x5, 0x0, 0x22, 0x4, 0x711, 0x1, 0x40, 0x7, 0xffff, 0x0, 0x4, 0x6, 0x0, 0x0, 0x5, 0x7fff, 0x5, 0x100, 0x7, 0x7, 0xffffff00, 0x589, 0x6, 0x4, 0x2, 0x20, 0x0, 0xfffffe01, 0x4, 0x9, 0x1, 0xfffffffb, 0x81, 0x8, 0x101, 0x7, 0x6, 0x0, 0x9, 0x81, 0x7, 0x8, 0x2, 0x0, 0x0, 0x3, 0x2, 0xe18, 0x4, 0x7, 0xfffffff7, 0x3f, 0x0, 0x100, 0xffffffff, 0x40, 0x40, 0x7f, 0x0, 0x1161, 0x9, 0xfffffc00, 0x1f, 0x9, 0x9, 0x7, 0x80, 0x222, 0xffff, 0x2c1a, 0x5, 0x3, 0x1, 0x7, 0x7fff, 0x81, 0xfffffffe, 0x1ff, 0x0, 0x2, 0x0, 0x6bb7, 0x60000000, 0x3, 0x8, 0x5, 0x400, 0x800, 0x1ec, 0x1, 0x2, 0x952, 0x401, 0x5, 0x0, 0x6, 0x2, 0x1, 0x1, 0x3ff, 0x9, 0x4, 0x400, 0x9, 0x4db, 0x3, 0x7, 0x3f, 0x6, 0x3, 0x8001, 0x2, 0xcc56, 0x5, 0x1, 0x0, 0x3, 0x8, 0x9, 0x7f, 0x7, 0x80000001, 0x5, 0xee, 0x2, 0x0, 0x1, 0x903f, 0x6, 0x39, 0x9, 0x3, 0xc4d, 0x0, 0x1, 0x2, 0x7, 0x1], 0x5, 0x400}) 20:46:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x60000000}, 0x0) 20:46:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:53 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x35, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x9effffff}, 0x0) 20:46:53 executing program 3: sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000d060300009dd06e4e00000003000002114f674c3562c2585b7728e47b8baeccab000300686134"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4040000) 20:46:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:53 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async, rerun: 32) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 32) openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x50003, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000140)='./file0\x00', 0x109040, 0x168) (async) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@host}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) (async) write(r5, &(0x7f0000000100)="b1", 0x19000) (async, rerun: 64) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{}, {}, {0x0}]}) (rerun: 64) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000200)={r6, 0x3}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000280)={&(0x7f0000000780)=[0x7fff, 0x6, 0x1000, 0x3, 0x775a, 0x100, 0x8, 0x5, 0x6, 0x80000001, 0x9, 0x5, 0x400, 0x2, 0x1, 0x2, 0x7, 0x5, 0x9, 0x3, 0x6, 0x8, 0xd1be, 0x4, 0x6, 0x9, 0x2, 0x7, 0x0, 0x4, 0x4, 0x0, 0x3ff, 0x100, 0x4, 0x3, 0xda, 0x81, 0x9, 0x8000, 0x1ff, 0x8, 0x1ff, 0x6, 0x4b6, 0x3, 0x7, 0x8, 0x2, 0x3, 0x6000, 0x9, 0x0, 0x8000, 0x0, 0x3, 0x3, 0x400, 0x2, 0x8, 0x80, 0x69a6, 0x0, 0x7, 0x1f, 0xfff, 0x7, 0x7, 0x0, 0x2, 0x3f, 0xea, 0x1f, 0x6, 0xfc5, 0xd, 0x6, 0x1f, 0xbb, 0x2, 0x2, 0x0, 0x117, 0x5, 0x9, 0x509a8b54, 0x193f, 0x1f, 0x7f, 0x9, 0x6594, 0x0, 0x0, 0x300000, 0x1, 0x3, 0x4, 0x4a08, 0x8, 0x401, 0x1, 0x529, 0x7, 0x4, 0xef, 0x3ff, 0x20, 0x2, 0x16c0, 0x6, 0x10001, 0xf1a6, 0xffffff01, 0xd0, 0x7, 0x5, 0x8, 0x3ff, 0x6, 0xf9d, 0x9, 0x4, 0x2, 0xfffff001, 0xf0a, 0xffffffff, 0xffffffff, 0x400, 0x9, 0xfffffffd, 0x7, 0x5, 0x1, 0x40, 0x7, 0x7, 0x7, 0xfffffff8, 0x1ff, 0x3bf, 0x7fff, 0x4, 0x5, 0x7, 0x1ff, 0xffffffff, 0x1, 0x5, 0x9, 0x85, 0x800, 0x7, 0x9, 0x1, 0x73c, 0x9, 0x9, 0x3, 0x401, 0x7607, 0xff, 0xffffffee, 0xffffffff, 0x0, 0x3f, 0x80000000, 0x401, 0xa63, 0xfffffffa, 0x2, 0xe095, 0x5, 0x79, 0xff, 0xfffff800, 0x479, 0x93, 0x1, 0x3f, 0x81, 0x3, 0x1f, 0x270, 0x1, 0x101, 0x81, 0x7fffffff, 0x3, 0x5, 0x4, 0x6, 0xff, 0x2, 0x7a6f, 0x4eb, 0x10001, 0x4b4, 0x64, 0x6, 0x5, 0x1, 0x6, 0x1, 0x7, 0x1, 0x25c, 0x0, 0x5, 0x0, 0x6, 0x9, 0x4, 0x17, 0x9, 0xffff, 0x6, 0x2000000, 0x8000, 0x6, 0x8, 0x1, 0xfff, 0x401, 0x8, 0x4, 0x3ff, 0x7fff, 0x9, 0x4, 0x165, 0x4, 0x8, 0xd7, 0x0, 0x27326e9c, 0x7ff, 0x8, 0x7, 0x3f, 0x3e, 0x80, 0xa1, 0xd7, 0x7, 0x10001, 0x2, 0x6, 0xcc8, 0x10000, 0x9e76e70f, 0xfff, 0x7fffffff, 0x89, 0x1000, 0x7, 0x4, 0xfa7, 0x4, 0x6, 0x4, 0x5aff, 0x3ff, 0x7, 0x81, 0x4, 0x3, 0x6, 0xfff, 0x200, 0x5, 0x1, 0x5, 0xd0, 0x8, 0x56, 0x8, 0x7fff, 0x8, 0x1, 0xfffffffc, 0x5, 0x6, 0xfffffffc, 0x0, 0x0, 0x9, 0x1, 0x9, 0x6, 0xfff, 0x401, 0xfff, 0x3, 0xfffffffd, 0x1000, 0x2, 0xffffffff, 0x80, 0x0, 0x2, 0xff, 0x0, 0x6, 0x9, 0x4, 0x9, 0x5, 0x10000, 0x8001, 0x8, 0xffffffff, 0x9, 0xffff, 0x0, 0x6, 0x4, 0xfffffff8, 0x8, 0x101, 0x3, 0x0, 0x9, 0x10001, 0x543, 0x3, 0x1, 0x4, 0x5, 0x1, 0x8, 0x7f, 0xfffffffb, 0x2, 0x5, 0x93, 0xfff, 0x3ff, 0x1, 0x7, 0x81, 0x2, 0x73, 0x4, 0x25, 0x8, 0xffffffff, 0x0, 0x2, 0xf212, 0x1, 0x1, 0x7, 0x8, 0x7d, 0x2, 0x3, 0xb7, 0x25, 0x3, 0x7d, 0xff, 0x1, 0x3, 0x7, 0x0, 0x8001, 0x3, 0x7, 0xfff, 0x14f2, 0x6, 0x10001, 0x7ff, 0xfffffff7, 0x7c9, 0x5623d46e, 0x4, 0x9, 0x5, 0xc08e, 0x4, 0x7ff, 0x200, 0x6885, 0x0, 0x401, 0x400, 0x100, 0x902, 0x8, 0x3, 0x100, 0x8, 0x2, 0x4, 0x1, 0x9, 0x760, 0x4, 0x7, 0x1ff, 0x5e, 0x81, 0x1, 0x5, 0x3, 0xdf9, 0x10001, 0x4, 0x3b, 0x7fff, 0x6, 0xf8, 0x59a, 0x9, 0x2, 0x3, 0x10000, 0x2, 0x4844, 0x6, 0x1f, 0xfffffffb, 0x7a, 0x0, 0x1ff, 0x3, 0x638, 0x9, 0x4, 0x7, 0xffffffff, 0x1ff, 0x9, 0x67, 0x2, 0x7, 0x3, 0x7ff, 0xe1d, 0xf1, 0x3, 0x3b5, 0x6, 0x3f, 0x1f, 0x1, 0x0, 0x0, 0x8, 0x1, 0x7, 0x3ff, 0xe01, 0x0, 0x9f, 0x7, 0xffff, 0xfb3, 0x6, 0xff, 0x1000, 0x100, 0xfffff800, 0x1, 0x8, 0x6, 0x9, 0x3, 0x3, 0x1, 0x400, 0xfff, 0x5e0, 0x2ef9, 0x6, 0x0, 0x80000000, 0x10000, 0x1, 0x66b02a2c, 0x2, 0x6, 0x5, 0x4, 0x9, 0x2628, 0x7ff, 0x10000, 0x380000, 0x26a116b1, 0x80000000, 0x3, 0x80000000, 0x10000, 0x6, 0x29c, 0x9, 0x3, 0x8000, 0x80000000, 0x9, 0x7fffffff, 0x1, 0x3, 0x1, 0x5, 0x8000, 0x5, 0x4, 0x20, 0x5, 0x9, 0x2, 0x2, 0xfff, 0x3, 0xfff, 0x100, 0x1000, 0x7a64, 0x2, 0xf3, 0x8000, 0x8, 0xe91, 0x7, 0x1fa, 0x80000001, 0x1, 0x3, 0x7fffffff, 0x3ff, 0x80000001, 0x10001, 0x5, 0xc9, 0x401, 0x1, 0x2, 0x2, 0x6, 0x9e, 0x0, 0x10001, 0x5, 0x54042b39, 0xa6, 0x4, 0x1, 0x6, 0xfffffff7, 0x6b3e, 0x1, 0x80000001, 0x8, 0x40, 0x5b, 0x0, 0xdcad, 0xfffffffb, 0x2, 0x0, 0x2, 0x9e, 0x2, 0x5, 0x2, 0x8, 0xffff, 0x5, 0xff, 0x3, 0x80000000, 0x40, 0x80000001, 0x4, 0xffe00, 0x7, 0x9, 0x8, 0x5, 0x2, 0xc439, 0x0, 0xcb96, 0x8000, 0x1ff, 0x4, 0x1, 0x3, 0x4, 0x4000, 0x9305, 0x7, 0x1, 0x9, 0x3ff, 0x5945, 0x1ff, 0x7c0, 0xffffff9b, 0x4, 0xce, 0x18ee, 0x2, 0x1ff, 0x3, 0x7, 0x0, 0x3, 0x8001, 0x4, 0xffffffff, 0x7, 0x8000, 0x0, 0x7f, 0x3, 0x3, 0x7, 0x7, 0xdff0, 0x9, 0x5, 0x8, 0x5, 0xfff, 0x5, 0xfffffff7, 0x340, 0xdf3, 0x17c, 0xdb7a, 0xaa07, 0xff, 0x2, 0x1, 0x1, 0x3, 0x80000001, 0xfffffff9, 0x1, 0x7fff, 0x1f, 0x4, 0x6, 0x7ff, 0xff800000, 0x3, 0x5, 0x7f, 0x800, 0x80000000, 0xbf, 0x0, 0x3, 0x6, 0x2, 0x8, 0x2800, 0x0, 0x1, 0xffffff81, 0x7, 0xfffffffd, 0x1, 0xff, 0x400, 0x81, 0x5, 0xffff, 0x7, 0x7, 0x4, 0x9, 0xffff, 0x101, 0x3, 0x1, 0x7, 0xe4c5, 0x315, 0x4, 0x3, 0x200, 0x1, 0xffffffff, 0xffff, 0x20, 0xdfc1, 0x0, 0x3f, 0x3465, 0x100, 0x7fff, 0x1, 0xd1d, 0xffff8000, 0x2, 0x6, 0xee6c, 0x401, 0x8, 0x4, 0x7, 0x2, 0x7fff, 0x2, 0x4, 0x8, 0x2, 0x0, 0x1d, 0xff, 0x1, 0x4042, 0x9c9, 0x6, 0x5, 0x5, 0x8, 0xff, 0x80, 0x10000, 0x800, 0x1, 0x3106, 0x23, 0x11b, 0x8, 0x0, 0x3, 0x519, 0x9, 0x101, 0x8, 0x4, 0x3f, 0x2, 0x20, 0xfffffffe, 0x3ff, 0x0, 0x100, 0x101, 0x2, 0x85, 0x1, 0x90, 0x8000, 0x8, 0x80000001, 0x1, 0x0, 0x666a8419, 0x2, 0x1ff, 0x101, 0x6, 0x3, 0x52, 0x4, 0xfffffff8, 0x1edaeb00, 0x4, 0x8e0, 0x101, 0xffff, 0x7f, 0xa754, 0x16d, 0x10001, 0x5, 0xffffab93, 0x0, 0x7, 0x90000000, 0xf2, 0x6, 0x3, 0x0, 0x4, 0xc45, 0x3, 0x101, 0x80000000, 0x1, 0x7, 0xe6c0, 0x8, 0x7fff, 0x8001, 0x9, 0x16, 0x401, 0x8001, 0x1ff, 0xcf1, 0x9, 0x2, 0x2, 0x8, 0xa6, 0xc26, 0x1f, 0x4, 0x4, 0x1, 0x1, 0xaf, 0xfff, 0x6, 0x96, 0xffffffff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x2, 0x7f, 0x7ff, 0x3, 0x1, 0x9, 0x80000001, 0x81, 0x3, 0x2, 0x7fffffff, 0xee, 0x3, 0x9, 0x3, 0x8, 0x2, 0x3, 0x43cb32dd, 0x3f, 0x3, 0x7fff, 0x2, 0xfff, 0x457, 0x5, 0xe13, 0x6, 0xffffffff, 0x6, 0x7fff, 0x4, 0x0, 0x6, 0x40, 0x3ff, 0x6, 0xfff, 0x4, 0x7, 0x4, 0x5, 0xf4, 0xffffffff, 0x0, 0x62a7, 0x2, 0xe25, 0x80, 0x5, 0x7, 0x8, 0x6, 0xff, 0xb2b2, 0x3ff, 0x9a, 0x3, 0xfffffff7, 0x7f, 0x0, 0x7, 0x3ff, 0x4, 0x7b7f, 0xff4, 0x5, 0x0, 0x22, 0x4, 0x711, 0x1, 0x40, 0x7, 0xffff, 0x0, 0x4, 0x6, 0x0, 0x0, 0x5, 0x7fff, 0x5, 0x100, 0x7, 0x7, 0xffffff00, 0x589, 0x6, 0x4, 0x2, 0x20, 0x0, 0xfffffe01, 0x4, 0x9, 0x1, 0xfffffffb, 0x81, 0x8, 0x101, 0x7, 0x6, 0x0, 0x9, 0x81, 0x7, 0x8, 0x2, 0x0, 0x0, 0x3, 0x2, 0xe18, 0x4, 0x7, 0xfffffff7, 0x3f, 0x0, 0x100, 0xffffffff, 0x40, 0x40, 0x7f, 0x0, 0x1161, 0x9, 0xfffffc00, 0x1f, 0x9, 0x9, 0x7, 0x80, 0x222, 0xffff, 0x2c1a, 0x5, 0x3, 0x1, 0x7, 0x7fff, 0x81, 0xfffffffe, 0x1ff, 0x0, 0x2, 0x0, 0x6bb7, 0x60000000, 0x3, 0x8, 0x5, 0x400, 0x800, 0x1ec, 0x1, 0x2, 0x952, 0x401, 0x5, 0x0, 0x6, 0x2, 0x1, 0x1, 0x3ff, 0x9, 0x4, 0x400, 0x9, 0x4db, 0x3, 0x7, 0x3f, 0x6, 0x3, 0x8001, 0x2, 0xcc56, 0x5, 0x1, 0x0, 0x3, 0x8, 0x9, 0x7f, 0x7, 0x80000001, 0x5, 0xee, 0x2, 0x0, 0x1, 0x903f, 0x6, 0x39, 0x9, 0x3, 0xc4d, 0x0, 0x1, 0x2, 0x7, 0x1], 0x5, 0x400}) [ 743.770451][ T3678] Bluetooth: hci0: command 0x0409 tx timeout 20:46:53 executing program 3: sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000d060300009dd06e4e00000003000002114f674c3562c2585b7728e47b8baeccab000300686134"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4040000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000d060300009dd06e4e00000003000002114f674c3562c2585b7728e47b8baeccab000300686134"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4040000) (async) 20:46:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xaaaab700}, 0x0) 20:46:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "0000000000000000ddc1517600"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) write(r2, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(r2, 0x407, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) 20:46:53 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000500)=ANY=[@ANYBLOB="c000656d025511000000d19b092c0001ffffffffffff1726e527499f90bb1d0a159038ea6514e03c4289f484885f9683afc62e10e6bcb1ad489afe5e6a5216e6f939b5884cf3"], 0x2c) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@ba={{}, {0x6}, @broadcast, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x6}, [{0x0, 0x8, {0x1, 0xff}, "cb7eccf1d6827bce"}, {0x0, 0x5, {0x9, 0x7}, "e35c214a99e93416"}, {0x0, 0x4, {0x4, 0x1}, "59c59e37ce379b15"}, {0x0, 0x0, {0x3, 0x2}, "3da3fa27101e0a16"}, {0x0, 0x2, {0x9, 0x6}, "db00230b7cfa7d21"}, {0x0, 0x5, {0x2, 0x3}, "8d82a3814ad3a4fd"}], {0x0, 0x1, {0x0, 0x4}, "391cbdaea44713ed"}}}, 0x66) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000140)=@mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x36ec}, @broadcast, @device_a, @random="f156241e220f", {0x0, 0x56}}, 0x8000, 0x4, @device_a, {0x0, 0x1f, @random="0fa648207d47a14bc5f77573df549e81c95647c17ae3eaf3699a25e3da4f04"}, @void, @void, [{0xdd, 0x70, "1bd4eddd72af867a8df4592386e630fc9a500eb14089854a1612985b7abe51e3f1cb1fc2abc62023ee8c0d46b86b73f49c23bb2b6952c9c3a0a02243d426090580e4cbc4cb90830b82d64f84fc811240e3f52160160dceeb48040b2518a467f50389121b0bc04ed12132d271fb669770"}, {0xdd, 0x87, "91a56625025aced4039eebaa065636b2a2494b0592772ce933a27ebfff2458dbf80a06561b7163699c4d76e70f744c65ff7e70e9422a08eda11e35469eb6477ad9eb905a1eb2085a2a78da9ef192b3d96c56abed72c6b7acf613bd6c0c7aa718f930dc6e8b0df7cfe7d0dde82b210c2350d484ae74589c4e42ecd27dda78ef73ab17627273f7ae"}, {0xdd, 0x40, "5ab5d088a633ab7c8c28912aeec86ff2d70b952846ae4e51439ec5a381eeddc9134d6ce85d53e90d74ea0116abd9fd2e916aab4f4513f051f38a17544cebb0ca"}, {0xdd, 0x9e, "c01af0ac01ebcd97ef979d016712f91f9aaf50c9dac6196768a321e96d309894f2a65f6cb4e1c709eefe546d867c8f4f00d31e6075d15f859f58cde8c44483a1201f9dd07b347227409feb12a79813bb24614c2178a5802d7a7c0064dd7c1ccabbeab699d40b2a62976ce18b75eef405cdde49dfbd6888db110a3d7b24c2b691715a440ae40dda4da199d06783ae5cd57d48f3d90f2271ef444af0c8b3c1"}, {0xdd, 0x4c, "67497a9e54b64a7023e0ad9ee1315fb9f9fedb6f4c2b6e334658ae8d5deb2802f13e8ad1934e0f260626a2c66938d2a0f018bb336de24caf4cfe15beac292199bf9c2e098dace6755263bd22"}, {0xdd, 0x92, "5f71378cf8b4bc0a7f5e4c24c22606dd8ba3e494baa73a4c913837df1965f2a689101e53ef178b0d93b30d3555347115f4878cc2786141a65bc2c7a7d09e2c33e40157a0f53a2bdd1b8759ce2bd760811b2095c92695f44d12ad9f855338381fc5dc4a072244f712c763e3bf38b19d939ff02517b2fbb10204ca01fce5efbcffbfdd4acda6a2f67266a391f92fdce4f88fdf"}, {0xdd, 0xa5, "0b39aa0de37b38e1bb320a9ad0ecea700910351c759c6e522db5b30b30ea3d2415b4e81c2e7e934773c1850bfc5f5481f56f28aed9bf2d2386f1a6ac1ef87c4b598e557721e776e4d4fba2707dca291b2bb2011881309e7d655bca867a5d6f6720dfa9035c4311d22ab8a3c9b2b8cc0b7719b9dd4439349a0a0c351583c20b11a62915a6cda039f73f017fcdff4efbf72c1b31faaacb7139cf357b4cbcbb9be018a8b5fc5b"}]}, 0x3a9) 20:46:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xb4090000}, 0x0) 20:46:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 744.042907][T25172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.061260][T25177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.136336][T25172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:54 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x36, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:54 executing program 5: ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f00000000c0)=0x1) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x800c4153, &(0x7f0000000380)={0x0, &(0x7f0000000280)=[&(0x7f0000000180)="3095d56ed3dffecac5c1522072e6f70c44b87228c80a26785d4536be0145743fd9ec8269eeb25a0dcd77fc3b32bf7f09e4b5ce73813904dc080ea004dbcb77323755a32d15f9ee3583f4edbb263e9552d09b9f6282820a5384ac26c371738d7c34f6f24789916e1de7622eb487c5b301a2676e3a75a2b1ae80013ba956a1f437b510e7fa341119e1c5a4594ad001213caf35b65d3abc55196fb947eadb8663450a8116bfba5c4eeeb3305b6433c551beac13d0d451f7aa640b4395136cd0cbdf4935c7a06975bd5f70b83817cd30dee4c225", &(0x7f0000000000)="cc4319b4f0578b4e9762764b2c92ec1d33e32abe4571ad6e568f8dd8243d79b49583c1255e1bd2ab728e66b1cf6668bb2f1175cb514ca18dc8b761c1", &(0x7f0000000300)="3c6ee1356e5d29a0983e52a81ba8db3ace6eaaf216265e8ed3cc12521f584acec165dd76b584efa1d7b815ae0e9356b97a6a2b2a05e35736562782e603b5cf169f7522bb63"]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000100)={0x9, 0x3, 0x200, 0x9, 0xffffffff, 0x4}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000004c0)={{@local, 0x5}, @local, 0x8, 0x5, 0x2, 0x100, 0x100000000, 0x1, 0x4bd}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80000) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000480)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@any, 0x1}) fadvise64(r0, 0xffffffff, 0x7, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000400)={{@local, 0x2}, @host, 0x1, 0x4, 0x8, 0x3, 0x3, 0x80, 0x1000}) 20:46:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xf0ffffff}, 0x0) 20:46:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:54 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000500)=ANY=[@ANYBLOB="c000656d025511000000d19b092c0001ffffffffffff1726e527499f90bb1d0a159038ea6514e03c4289f484885f9683afc62e10e6bcb1ad489afe5e6a5216e6f939b5884cf3"], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@ba={{}, {0x6}, @broadcast, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x6}, [{0x0, 0x8, {0x1, 0xff}, "cb7eccf1d6827bce"}, {0x0, 0x5, {0x9, 0x7}, "e35c214a99e93416"}, {0x0, 0x4, {0x4, 0x1}, "59c59e37ce379b15"}, {0x0, 0x0, {0x3, 0x2}, "3da3fa27101e0a16"}, {0x0, 0x2, {0x9, 0x6}, "db00230b7cfa7d21"}, {0x0, 0x5, {0x2, 0x3}, "8d82a3814ad3a4fd"}], {0x0, 0x1, {0x0, 0x4}, "391cbdaea44713ed"}}}, 0x66) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000140)=@mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x36ec}, @broadcast, @device_a, @random="f156241e220f", {0x0, 0x56}}, 0x8000, 0x4, @device_a, {0x0, 0x1f, @random="0fa648207d47a14bc5f77573df549e81c95647c17ae3eaf3699a25e3da4f04"}, @void, @void, [{0xdd, 0x70, "1bd4eddd72af867a8df4592386e630fc9a500eb14089854a1612985b7abe51e3f1cb1fc2abc62023ee8c0d46b86b73f49c23bb2b6952c9c3a0a02243d426090580e4cbc4cb90830b82d64f84fc811240e3f52160160dceeb48040b2518a467f50389121b0bc04ed12132d271fb669770"}, {0xdd, 0x87, "91a56625025aced4039eebaa065636b2a2494b0592772ce933a27ebfff2458dbf80a06561b7163699c4d76e70f744c65ff7e70e9422a08eda11e35469eb6477ad9eb905a1eb2085a2a78da9ef192b3d96c56abed72c6b7acf613bd6c0c7aa718f930dc6e8b0df7cfe7d0dde82b210c2350d484ae74589c4e42ecd27dda78ef73ab17627273f7ae"}, {0xdd, 0x40, "5ab5d088a633ab7c8c28912aeec86ff2d70b952846ae4e51439ec5a381eeddc9134d6ce85d53e90d74ea0116abd9fd2e916aab4f4513f051f38a17544cebb0ca"}, {0xdd, 0x9e, "c01af0ac01ebcd97ef979d016712f91f9aaf50c9dac6196768a321e96d309894f2a65f6cb4e1c709eefe546d867c8f4f00d31e6075d15f859f58cde8c44483a1201f9dd07b347227409feb12a79813bb24614c2178a5802d7a7c0064dd7c1ccabbeab699d40b2a62976ce18b75eef405cdde49dfbd6888db110a3d7b24c2b691715a440ae40dda4da199d06783ae5cd57d48f3d90f2271ef444af0c8b3c1"}, {0xdd, 0x4c, "67497a9e54b64a7023e0ad9ee1315fb9f9fedb6f4c2b6e334658ae8d5deb2802f13e8ad1934e0f260626a2c66938d2a0f018bb336de24caf4cfe15beac292199bf9c2e098dace6755263bd22"}, {0xdd, 0x92, "5f71378cf8b4bc0a7f5e4c24c22606dd8ba3e494baa73a4c913837df1965f2a689101e53ef178b0d93b30d3555347115f4878cc2786141a65bc2c7a7d09e2c33e40157a0f53a2bdd1b8759ce2bd760811b2095c92695f44d12ad9f855338381fc5dc4a072244f712c763e3bf38b19d939ff02517b2fbb10204ca01fce5efbcffbfdd4acda6a2f67266a391f92fdce4f88fdf"}, {0xdd, 0xa5, "0b39aa0de37b38e1bb320a9ad0ecea700910351c759c6e522db5b30b30ea3d2415b4e81c2e7e934773c1850bfc5f5481f56f28aed9bf2d2386f1a6ac1ef87c4b598e557721e776e4d4fba2707dca291b2bb2011881309e7d655bca867a5d6f6720dfa9035c4311d22ab8a3c9b2b8cc0b7719b9dd4439349a0a0c351583c20b11a62915a6cda039f73f017fcdff4efbf72c1b31faaacb7139cf357b4cbcbb9be018a8b5fc5b"}]}, 0x3a9) 20:46:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xfffff000}, 0x0) [ 744.627083][T25192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.639404][T25195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "0000000000000000ddc1517600"}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) write(r2, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(r2, 0x407, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) 20:46:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xffffff7f}, 0x0) 20:46:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xffffff9e}, 0x0) 20:46:55 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x37, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1080003ff", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "0000000000000000ddc1517600"}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) (async, rerun: 32) write(r2, &(0x7f0000000100)="b1", 0x19000) (async, rerun: 32) fcntl$setpipe(r2, 0x407, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x8) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) 20:46:55 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000500)=ANY=[@ANYBLOB="c000656d025511000000d19b092c0001ffffffffffff1726e527499f90bb1d0a159038ea6514e03c4289f484885f9683afc62e10e6bcb1ad489afe5e6a5216e6f939b5884cf3"], 0x2c) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@ba={{}, {0x6}, @broadcast, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x6}, [{0x0, 0x8, {0x1, 0xff}, "cb7eccf1d6827bce"}, {0x0, 0x5, {0x9, 0x7}, "e35c214a99e93416"}, {0x0, 0x4, {0x4, 0x1}, "59c59e37ce379b15"}, {0x0, 0x0, {0x3, 0x2}, "3da3fa27101e0a16"}, {0x0, 0x2, {0x9, 0x6}, "db00230b7cfa7d21"}, {0x0, 0x5, {0x2, 0x3}, "8d82a3814ad3a4fd"}], {0x0, 0x1, {0x0, 0x4}, "391cbdaea44713ed"}}}, 0x66) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000140)=@mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x36ec}, @broadcast, @device_a, @random="f156241e220f", {0x0, 0x56}}, 0x8000, 0x4, @device_a, {0x0, 0x1f, @random="0fa648207d47a14bc5f77573df549e81c95647c17ae3eaf3699a25e3da4f04"}, @void, @void, [{0xdd, 0x70, "1bd4eddd72af867a8df4592386e630fc9a500eb14089854a1612985b7abe51e3f1cb1fc2abc62023ee8c0d46b86b73f49c23bb2b6952c9c3a0a02243d426090580e4cbc4cb90830b82d64f84fc811240e3f52160160dceeb48040b2518a467f50389121b0bc04ed12132d271fb669770"}, {0xdd, 0x87, "91a56625025aced4039eebaa065636b2a2494b0592772ce933a27ebfff2458dbf80a06561b7163699c4d76e70f744c65ff7e70e9422a08eda11e35469eb6477ad9eb905a1eb2085a2a78da9ef192b3d96c56abed72c6b7acf613bd6c0c7aa718f930dc6e8b0df7cfe7d0dde82b210c2350d484ae74589c4e42ecd27dda78ef73ab17627273f7ae"}, {0xdd, 0x40, "5ab5d088a633ab7c8c28912aeec86ff2d70b952846ae4e51439ec5a381eeddc9134d6ce85d53e90d74ea0116abd9fd2e916aab4f4513f051f38a17544cebb0ca"}, {0xdd, 0x9e, "c01af0ac01ebcd97ef979d016712f91f9aaf50c9dac6196768a321e96d309894f2a65f6cb4e1c709eefe546d867c8f4f00d31e6075d15f859f58cde8c44483a1201f9dd07b347227409feb12a79813bb24614c2178a5802d7a7c0064dd7c1ccabbeab699d40b2a62976ce18b75eef405cdde49dfbd6888db110a3d7b24c2b691715a440ae40dda4da199d06783ae5cd57d48f3d90f2271ef444af0c8b3c1"}, {0xdd, 0x4c, "67497a9e54b64a7023e0ad9ee1315fb9f9fedb6f4c2b6e334658ae8d5deb2802f13e8ad1934e0f260626a2c66938d2a0f018bb336de24caf4cfe15beac292199bf9c2e098dace6755263bd22"}, {0xdd, 0x92, "5f71378cf8b4bc0a7f5e4c24c22606dd8ba3e494baa73a4c913837df1965f2a689101e53ef178b0d93b30d3555347115f4878cc2786141a65bc2c7a7d09e2c33e40157a0f53a2bdd1b8759ce2bd760811b2095c92695f44d12ad9f855338381fc5dc4a072244f712c763e3bf38b19d939ff02517b2fbb10204ca01fce5efbcffbfdd4acda6a2f67266a391f92fdce4f88fdf"}, {0xdd, 0xa5, "0b39aa0de37b38e1bb320a9ad0ecea700910351c759c6e522db5b30b30ea3d2415b4e81c2e7e934773c1850bfc5f5481f56f28aed9bf2d2386f1a6ac1ef87c4b598e557721e776e4d4fba2707dca291b2bb2011881309e7d655bca867a5d6f6720dfa9035c4311d22ab8a3c9b2b8cc0b7719b9dd4439349a0a0c351583c20b11a62915a6cda039f73f017fcdff4efbf72c1b31faaacb7139cf357b4cbcbb9be018a8b5fc5b"}]}, 0x3a9) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000500)=ANY=[@ANYBLOB="c000656d025511000000d19b092c0001ffffffffffff1726e527499f90bb1d0a159038ea6514e03c4289f484885f9683afc62e10e6bcb1ad489afe5e6a5216e6f939b5884cf3"], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@ba={{}, {0x6}, @broadcast, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x6}, [{0x0, 0x8, {0x1, 0xff}, "cb7eccf1d6827bce"}, {0x0, 0x5, {0x9, 0x7}, "e35c214a99e93416"}, {0x0, 0x4, {0x4, 0x1}, "59c59e37ce379b15"}, {0x0, 0x0, {0x3, 0x2}, "3da3fa27101e0a16"}, {0x0, 0x2, {0x9, 0x6}, "db00230b7cfa7d21"}, {0x0, 0x5, {0x2, 0x3}, "8d82a3814ad3a4fd"}], {0x0, 0x1, {0x0, 0x4}, "391cbdaea44713ed"}}}, 0x66) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000140)=@mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x36ec}, @broadcast, @device_a, @random="f156241e220f", {0x0, 0x56}}, 0x8000, 0x4, @device_a, {0x0, 0x1f, @random="0fa648207d47a14bc5f77573df549e81c95647c17ae3eaf3699a25e3da4f04"}, @void, @void, [{0xdd, 0x70, "1bd4eddd72af867a8df4592386e630fc9a500eb14089854a1612985b7abe51e3f1cb1fc2abc62023ee8c0d46b86b73f49c23bb2b6952c9c3a0a02243d426090580e4cbc4cb90830b82d64f84fc811240e3f52160160dceeb48040b2518a467f50389121b0bc04ed12132d271fb669770"}, {0xdd, 0x87, "91a56625025aced4039eebaa065636b2a2494b0592772ce933a27ebfff2458dbf80a06561b7163699c4d76e70f744c65ff7e70e9422a08eda11e35469eb6477ad9eb905a1eb2085a2a78da9ef192b3d96c56abed72c6b7acf613bd6c0c7aa718f930dc6e8b0df7cfe7d0dde82b210c2350d484ae74589c4e42ecd27dda78ef73ab17627273f7ae"}, {0xdd, 0x40, "5ab5d088a633ab7c8c28912aeec86ff2d70b952846ae4e51439ec5a381eeddc9134d6ce85d53e90d74ea0116abd9fd2e916aab4f4513f051f38a17544cebb0ca"}, {0xdd, 0x9e, "c01af0ac01ebcd97ef979d016712f91f9aaf50c9dac6196768a321e96d309894f2a65f6cb4e1c709eefe546d867c8f4f00d31e6075d15f859f58cde8c44483a1201f9dd07b347227409feb12a79813bb24614c2178a5802d7a7c0064dd7c1ccabbeab699d40b2a62976ce18b75eef405cdde49dfbd6888db110a3d7b24c2b691715a440ae40dda4da199d06783ae5cd57d48f3d90f2271ef444af0c8b3c1"}, {0xdd, 0x4c, "67497a9e54b64a7023e0ad9ee1315fb9f9fedb6f4c2b6e334658ae8d5deb2802f13e8ad1934e0f260626a2c66938d2a0f018bb336de24caf4cfe15beac292199bf9c2e098dace6755263bd22"}, {0xdd, 0x92, "5f71378cf8b4bc0a7f5e4c24c22606dd8ba3e494baa73a4c913837df1965f2a689101e53ef178b0d93b30d3555347115f4878cc2786141a65bc2c7a7d09e2c33e40157a0f53a2bdd1b8759ce2bd760811b2095c92695f44d12ad9f855338381fc5dc4a072244f712c763e3bf38b19d939ff02517b2fbb10204ca01fce5efbcffbfdd4acda6a2f67266a391f92fdce4f88fdf"}, {0xdd, 0xa5, "0b39aa0de37b38e1bb320a9ad0ecea700910351c759c6e522db5b30b30ea3d2415b4e81c2e7e934773c1850bfc5f5481f56f28aed9bf2d2386f1a6ac1ef87c4b598e557721e776e4d4fba2707dca291b2bb2011881309e7d655bca867a5d6f6720dfa9035c4311d22ab8a3c9b2b8cc0b7719b9dd4439349a0a0c351583c20b11a62915a6cda039f73f017fcdff4efbf72c1b31faaacb7139cf357b4cbcbb9be018a8b5fc5b"}]}, 0x3a9) (async) 20:46:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xfffffff0}, 0x0) 20:46:55 executing program 5: ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f00000000c0)=0x1) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x800c4153, &(0x7f0000000380)={0x0, &(0x7f0000000280)=[&(0x7f0000000180)="3095d56ed3dffecac5c1522072e6f70c44b87228c80a26785d4536be0145743fd9ec8269eeb25a0dcd77fc3b32bf7f09e4b5ce73813904dc080ea004dbcb77323755a32d15f9ee3583f4edbb263e9552d09b9f6282820a5384ac26c371738d7c34f6f24789916e1de7622eb487c5b301a2676e3a75a2b1ae80013ba956a1f437b510e7fa341119e1c5a4594ad001213caf35b65d3abc55196fb947eadb8663450a8116bfba5c4eeeb3305b6433c551beac13d0d451f7aa640b4395136cd0cbdf4935c7a06975bd5f70b83817cd30dee4c225", &(0x7f0000000000)="cc4319b4f0578b4e9762764b2c92ec1d33e32abe4571ad6e568f8dd8243d79b49583c1255e1bd2ab728e66b1cf6668bb2f1175cb514ca18dc8b761c1", &(0x7f0000000300)="3c6ee1356e5d29a0983e52a81ba8db3ace6eaaf216265e8ed3cc12521f584acec165dd76b584efa1d7b815ae0e9356b97a6a2b2a05e35736562782e603b5cf169f7522bb63"]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000100)={0x9, 0x3, 0x200, 0x9, 0xffffffff, 0x4}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000004c0)={{@local, 0x5}, @local, 0x8, 0x5, 0x2, 0x100, 0x100000000, 0x1, 0x4bd}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80000) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000480)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@any, 0x1}) fadvise64(r0, 0xffffffff, 0x7, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000400)={{@local, 0x2}, @host, 0x1, 0x4, 0x8, 0x3, 0x3, 0x80, 0x1000}) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f00000000c0)=0x1) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x800c4153, &(0x7f0000000380)={0x0, &(0x7f0000000280)=[&(0x7f0000000180)="3095d56ed3dffecac5c1522072e6f70c44b87228c80a26785d4536be0145743fd9ec8269eeb25a0dcd77fc3b32bf7f09e4b5ce73813904dc080ea004dbcb77323755a32d15f9ee3583f4edbb263e9552d09b9f6282820a5384ac26c371738d7c34f6f24789916e1de7622eb487c5b301a2676e3a75a2b1ae80013ba956a1f437b510e7fa341119e1c5a4594ad001213caf35b65d3abc55196fb947eadb8663450a8116bfba5c4eeeb3305b6433c551beac13d0d451f7aa640b4395136cd0cbdf4935c7a06975bd5f70b83817cd30dee4c225", &(0x7f0000000000)="cc4319b4f0578b4e9762764b2c92ec1d33e32abe4571ad6e568f8dd8243d79b49583c1255e1bd2ab728e66b1cf6668bb2f1175cb514ca18dc8b761c1", &(0x7f0000000300)="3c6ee1356e5d29a0983e52a81ba8db3ace6eaaf216265e8ed3cc12521f584acec165dd76b584efa1d7b815ae0e9356b97a6a2b2a05e35736562782e603b5cf169f7522bb63"]}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000100)={0x9, 0x3, 0x200, 0x9, 0xffffffff, 0x4}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000004c0)={{@local, 0x5}, @local, 0x8, 0x5, 0x2, 0x100, 0x100000000, 0x1, 0x4bd}) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80000) (async) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000480)) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@any, 0x1}) (async) fadvise64(r0, 0xffffffff, 0x7, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000400)={{@local, 0x2}, @host, 0x1, 0x4, 0x8, 0x3, 0x3, 0x80, 0x1000}) (async) 20:46:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0xffffffff}, 0x0) [ 745.542629][T25221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x0, 0x0, &(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r4 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) 20:46:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) [ 745.610837][T25221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:55 executing program 5: ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f00000000c0)=0x1) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x800c4153, &(0x7f0000000380)={0x0, &(0x7f0000000280)=[&(0x7f0000000180)="3095d56ed3dffecac5c1522072e6f70c44b87228c80a26785d4536be0145743fd9ec8269eeb25a0dcd77fc3b32bf7f09e4b5ce73813904dc080ea004dbcb77323755a32d15f9ee3583f4edbb263e9552d09b9f6282820a5384ac26c371738d7c34f6f24789916e1de7622eb487c5b301a2676e3a75a2b1ae80013ba956a1f437b510e7fa341119e1c5a4594ad001213caf35b65d3abc55196fb947eadb8663450a8116bfba5c4eeeb3305b6433c551beac13d0d451f7aa640b4395136cd0cbdf4935c7a06975bd5f70b83817cd30dee4c225", &(0x7f0000000000)="cc4319b4f0578b4e9762764b2c92ec1d33e32abe4571ad6e568f8dd8243d79b49583c1255e1bd2ab728e66b1cf6668bb2f1175cb514ca18dc8b761c1", &(0x7f0000000300)="3c6ee1356e5d29a0983e52a81ba8db3ace6eaaf216265e8ed3cc12521f584acec165dd76b584efa1d7b815ae0e9356b97a6a2b2a05e35736562782e603b5cf169f7522bb63"]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000100)={0x9, 0x3, 0x200, 0x9, 0xffffffff, 0x4}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000004c0)={{@local, 0x5}, @local, 0x8, 0x5, 0x2, 0x100, 0x100000000, 0x1, 0x4bd}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80000) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000480)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@any, 0x1}) fadvise64(r0, 0xffffffff, 0x7, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000400)={{@local, 0x2}, @host, 0x1, 0x4, 0x8, 0x3, 0x3, 0x80, 0x1000}) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f00000000c0)=0x1) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x800c4153, &(0x7f0000000380)={0x0, &(0x7f0000000280)=[&(0x7f0000000180)="3095d56ed3dffecac5c1522072e6f70c44b87228c80a26785d4536be0145743fd9ec8269eeb25a0dcd77fc3b32bf7f09e4b5ce73813904dc080ea004dbcb77323755a32d15f9ee3583f4edbb263e9552d09b9f6282820a5384ac26c371738d7c34f6f24789916e1de7622eb487c5b301a2676e3a75a2b1ae80013ba956a1f437b510e7fa341119e1c5a4594ad001213caf35b65d3abc55196fb947eadb8663450a8116bfba5c4eeeb3305b6433c551beac13d0d451f7aa640b4395136cd0cbdf4935c7a06975bd5f70b83817cd30dee4c225", &(0x7f0000000000)="cc4319b4f0578b4e9762764b2c92ec1d33e32abe4571ad6e568f8dd8243d79b49583c1255e1bd2ab728e66b1cf6668bb2f1175cb514ca18dc8b761c1", &(0x7f0000000300)="3c6ee1356e5d29a0983e52a81ba8db3ace6eaaf216265e8ed3cc12521f584acec165dd76b584efa1d7b815ae0e9356b97a6a2b2a05e35736562782e603b5cf169f7522bb63"]}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000100)={0x9, 0x3, 0x200, 0x9, 0xffffffff, 0x4}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000004c0)={{@local, 0x5}, @local, 0x8, 0x5, 0x2, 0x100, 0x100000000, 0x1, 0x4bd}) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80000) (async) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000480)) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@any, 0x1}) (async) fadvise64(r0, 0xffffffff, 0x7, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000400)={{@local, 0x2}, @host, 0x1, 0x4, 0x8, 0x3, 0x3, 0x80, 0x1000}) (async) [ 745.653948][T25221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x2}, 0x0) [ 745.711840][T25248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.721887][T25249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.841307][ T6] Bluetooth: hci0: command 0x041b tx timeout 20:46:56 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c000000008021100000400000000000000ffffffffff"], 0x2c) 20:46:56 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x38, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x3}, 0x0) 20:46:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:56 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x8001}) 20:46:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1080003ff", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x4}, 0x0) [ 746.433469][T25276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r4 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) 20:46:56 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local, 0x2}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x8001}) 20:46:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x5}, 0x0) 20:46:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:56 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x8001}) openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local, 0x2}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1, 0x0, 0x8001}) (async) 20:46:56 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c000000008021100000400000000000000ffffffffff"], 0x2c) [ 746.815742][T25307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.050664][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.057005][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 20:46:57 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x39, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r4 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) 20:46:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe10800037f", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x6}, 0x0) 20:46:57 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = dup2(r0, r0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000100)=""/11, 0xb, &(0x7f0000000140)=""/58, 0x1, 0x2}}, 0x44) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@local}, 0x1, 0x3, 0x7ff}) r3 = openat$random(0xffffff9c, &(0x7f0000000240), 0x8800, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r3, 0x78ea000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000200)={0x3, 'xfrm0\x00', {0x10001}, 0x40}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@host, 0x7fff}, 0x0, 0x0, 0x3d3}) 20:46:57 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c000000008021100000400000000000000ffffffffff"], 0x2c) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c000000008021100000400000000000000ffffffffff"], 0x2c) (async) 20:46:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe10800039e", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x7}, 0x0) [ 747.342741][T25315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.403997][T25315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x8}, 0x0) 20:46:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1080003f0", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x9}, 0x0) 20:46:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 747.929739][ T6] Bluetooth: hci0: command 0x040f tx timeout 20:46:57 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3a, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe1080003ff", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xe}, 0x0) 20:46:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1b5f90d2", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x8040) r2 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x113000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x128, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x489}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x0, 0x0, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x2c) 20:46:57 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = dup2(r0, r0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) write$vhost_msg(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000100)=""/11, 0xb, &(0x7f0000000140)=""/58, 0x1, 0x2}}, 0x44) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@local}, 0x1, 0x3, 0x7ff}) r3 = openat$random(0xffffff9c, &(0x7f0000000240), 0x8800, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r3, 0x78ea000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000200)={0x3, 'xfrm0\x00', {0x10001}, 0x40}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@host, 0x7fff}, 0x0, 0x0, 0x3d3}) 20:46:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x1e, r1, {0x2f9fa}}, './file1\x00'}) syz_open_pts(r2, 0x240040) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) 20:46:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xf}, 0x0) 20:46:58 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = dup2(r0, r0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$vhost_msg(r1, &(0x7f0000000180)={0x1, {&(0x7f0000000100)=""/11, 0xb, &(0x7f0000000140)=""/58, 0x1, 0x2}}, 0x44) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@local}, 0x1, 0x3, 0x7ff}) r3 = openat$random(0xffffff9c, &(0x7f0000000240), 0x8800, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r3, 0x78ea000) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x10000, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000200)={0x3, 'xfrm0\x00', {0x10001}, 0x40}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@host, 0x7fff}, 0x0, 0x0, 0x3d3}) 20:46:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x1e, r1, {0x2f9fa}}, './file1\x00'}) syz_open_pts(r2, 0x240040) (async, rerun: 64) r3 = syz_open_pts(r0, 0x0) (rerun: 64) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) [ 748.298319][T25341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x60}, 0x0) 20:46:58 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3b, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:58 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x4301) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x1e, r1, {0x2f9fa}}, './file1\x00'}) syz_open_pts(r2, 0x240040) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) 20:46:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xf0}, 0x0) 20:46:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1b5f90d2", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x8040) (async) r2 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x113000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async, rerun: 32) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x128, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x489}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x0, 0x0, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x2c) 20:46:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x300}, 0x0) 20:46:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:58 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x4301) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x80000101005, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000400)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x5c5064) pwritev(r2, &(0x7f0000000b80)=[{&(0x7f0000000180)="002140a333c09cdbe0bb19dbb37b19ed7795ac02a77a", 0x16}], 0x1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 749.264157][T25382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x500}, 0x0) [ 749.999694][ T3678] Bluetooth: hci0: command 0x0419 tx timeout 20:46:59 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3c, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:46:59 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x4301) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:46:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x600}, 0x0) 20:46:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x80000101005, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000400)) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x5c5064) (async) pwritev(r2, &(0x7f0000000b80)=[{&(0x7f0000000180)="002140a333c09cdbe0bb19dbb37b19ed7795ac02a77a", 0x16}], 0x1, 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:46:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1b5f90d2", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x8040) (async) r2 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x113000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x128, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x489}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x0, 0x0, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x2c) 20:46:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:46:59 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000100)={&(0x7f0000000780)={{@host, 0x6}, {@any, 0x100}, 0x400, "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"}, 0x418, 0x6d62}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f00000000c0)={&(0x7f0000000300)={{@my=0x1, 0xfffff6f9}, {@hyper, 0x6}, 0x400, "ce47e685e9031a1464347c55454851b9ca3896005ea7e0ac0afcbef2f118a81832e2706cfc146fdeed85a306346935be9b28e7bb4a2a702a2272bef576a7d5133db7a3d9a38c1ec88c9c485dd520a277ffbc3f0dc5bac8d21b47a5bd4d87bd8176667412d3a48364f8e58d9a10fa3c7f2ddb6f527b29fa2bd7d712df005f8cbaa98eb972024afc033874a11f9153eae07e4667dffc4d98e92d589d03dafb31e3d6ee141e690237f5e6aba4fa44667f596e034d20dfcc7e68b85a2b40f035e73716b0ff52d7855414c275f1d8c3a0415f587a120c56970a2b7b6e2d330bd330cad65b92996a57e0e70e4f417bf4e4ac95099ed06ef4327a0ccedf7d7d59b9f74d0c07121ec2e83c04ce71d7cefda1faeec3a27fee3aeaaf18c077c6db8d56a3042f3758b1ab0360e830734795f694284fd4cec87f4a968e76c3431d181f2c8d81b2ea120c572f3cf72d1554153e256f369ba4ff8114b59e2665f967e0f2e41ebdede12858160b4f06eaa71680370d1af74ded9a86177c887600496a6c3da9ca40e90cf438ca1ceaff3a55c939f517e8470220e2aa6974c91778279052338e5e28bcb8bb3b017ad2d4723bc4a67c24bbd54f750069a1d0fafd49d6326e2f948aaa9d06fff1db3b8f7b4aa138528d1a969dbc792f861cf6c5d6b5b17b3fb314a409fdd19127a12566e2cb37ecac6e6135d13dabebb7aa569c1f8432ab238fed015ba38c9c7953249f5df00257b2fa4c097f34de65ebd2ddecd919690c7a374f3d0c3e49c99cd721e39c94e5a5c476e71c968e079e3b3c55340493367306e0da157096a71089ab933894d7587f8a4351ff2606e5ae45614bd7556c0c0d30125ee73e7e812ae9852fc9025be14ead28439ee9f683e28600f6b85a03a89a0799e0264cd9be59979b875a76fba4509ed573676669d0c73e633a470c72f94a40e1cb2b25ffa5f98536883d56b4c0846572d6055ee4fcc580f6c94cee1c18f8122d39a5313bc387d30d2535f3e2d67143686b13b8860c597a1ad56667535c8038b11ad4402c76ec32d119fafe4b56d00d929ef5235065b18e753a0f943a693bc7a8a0440bbf52ca54bae24b82cb292cef890f47705ef0ad7b45d28d58b71c4248e7e184203033303d7127f2af4e0a41d01b78af968751562033e24d5f0bc118b197a7b2f3f221a109931c3c4353d5b267eb8c6f1e0e661504bc25a0077354d6d9443b9f0c2d1903712d9e4fa6c643da0ad20d4daae0fd7064d434478a7a21bcdc03cc48ce204e348e8a60dee8ce4a3e919cc22ffa1ba13da42d29fe1eb919bc6fca62f419517bdd1f6e9f317421c70e88655102c7c9fe270d3ad5afa24f1ca0774a9193f2400d54dc8c46d036963398301f4731f31fd5499f4f969b363c4d42aeec33abfcc47a45239704d5a0bc1c9576509962d6600e2156a69b317226dba9039bf1c6b2"}, 0x418}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000140)={&(0x7f0000000bc0)={{@local, 0x4}, {@my=0x1, 0x5}, 0x400, "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"}, 0x418, 0x9b0e}) 20:46:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x700}, 0x0) [ 750.148786][T25409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x900}, 0x0) 20:46:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:47:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x80000101005, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000400)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x5c5064) (async) pwritev(r2, &(0x7f0000000b80)=[{&(0x7f0000000180)="002140a333c09cdbe0bb19dbb37b19ed7795ac02a77a", 0x16}], 0x1, 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 750.323797][T25433] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:00 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3d, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x9b4}, 0x0) 20:47:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:47:00 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x90) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000280)={{r0}, "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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) r3 = syz_open_pts(r2, 0x428c40) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) 20:47:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_delneigh={0x7c, 0x1d, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, r2, 0x4, 0x0, 0xa}, [@NDA_PROTOCOL={0x5, 0xc, 0x7}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_VNI={0x8, 0x7, 0x3f}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_FDB_EXT_ATTRS={0x34, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x20}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1e}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000000)=ANY=[], 0x2c) 20:47:00 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000100)={&(0x7f0000000780)={{@host, 0x6}, {@any, 0x100}, 0x400, "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"}, 0x418, 0x6d62}) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f00000000c0)={&(0x7f0000000300)={{@my=0x1, 0xfffff6f9}, {@hyper, 0x6}, 0x400, "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"}, 0x418}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000140)={&(0x7f0000000bc0)={{@local, 0x4}, {@my=0x1, 0x5}, 0x400, "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"}, 0x418, 0x9b0e}) 20:47:00 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x90) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000280)={{r0}, "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"}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r2 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) r3 = syz_open_pts(r2, 0x428c40) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) 20:47:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xe00}, 0x0) 20:47:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 751.096608][T25446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xf00}, 0x0) 20:47:00 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x90) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000280)={{r0}, "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"}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r2 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) r3 = syz_open_pts(r2, 0x428c40) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) 20:47:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 751.240709][T25462] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:01 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3e, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x3f00}, 0x0) 20:47:01 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async, rerun: 32) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000100)={&(0x7f0000000780)={{@host, 0x6}, {@any, 0x100}, 0x400, "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"}, 0x418, 0x6d62}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async, rerun: 32) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (rerun: 32) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f00000000c0)={&(0x7f0000000300)={{@my=0x1, 0xfffff6f9}, {@hyper, 0x6}, 0x400, "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"}, 0x418}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000140)={&(0x7f0000000bc0)={{@local, 0x4}, {@my=0x1, 0x5}, 0x400, "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"}, 0x418, 0x9b0e}) 20:47:01 executing program 0: ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x5, 0x2, 0x4, 0x64c1, 0x6, "863481ed9821dfe2"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:47:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:47:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_delneigh={0x7c, 0x1d, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, r2, 0x4, 0x0, 0xa}, [@NDA_PROTOCOL={0x5, 0xc, 0x7}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_VNI={0x8, 0x7, 0x3f}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_FDB_EXT_ATTRS={0x34, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x20}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1e}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000000)=ANY=[], 0x2c) socket(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_delneigh={0x7c, 0x1d, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, r2, 0x4, 0x0, 0xa}, [@NDA_PROTOCOL={0x5, 0xc, 0x7}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_VNI={0x8, 0x7, 0x3f}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_FDB_EXT_ATTRS={0x34, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x20}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1e}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) (async) syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000000)=ANY=[], 0x2c) (async) 20:47:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x6000}, 0x0) 20:47:01 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = openat$vmci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000200)={@host}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x8e4a, 0x7, 0x7, 0x3f], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000140)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) 20:47:01 executing program 0: ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000000)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x5, 0x2, 0x4, 0x64c1, 0x6, "863481ed9821dfe2"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:47:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) [ 752.064805][T25477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:47:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xb409}, 0x0) [ 752.149011][T25497] Failed to get privilege flags for destination (handle=0x0:0x0) [ 752.170027][ T3679] kworker/dying (3679) used greatest stack depth: 22376 bytes left 20:47:02 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x41, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_delneigh={0x7c, 0x1d, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, r2, 0x4, 0x0, 0xa}, [@NDA_PROTOCOL={0x5, 0xc, 0x7}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_VNI={0x8, 0x7, 0x3f}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_FDB_EXT_ATTRS={0x34, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x20}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1e}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000000)=ANY=[], 0x2c) socket(0x10, 0x3, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) (async) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xbfb}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_delneigh={0x7c, 0x1d, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, r2, 0x4, 0x0, 0xa}, [@NDA_PROTOCOL={0x5, 0xc, 0x7}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_VNI={0x8, 0x7, 0x3f}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_FDB_EXT_ATTRS={0x34, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x20}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1e}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) (async) syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000000)=ANY=[], 0x2c) (async) 20:47:02 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async, rerun: 64) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = openat$vmci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000200)={@host}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x8e4a, 0x7, 0x7, 0x3f], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000140)=0xb0000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) (rerun: 32) 20:47:02 executing program 0: ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000000)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async, rerun: 32) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x5, 0x2, 0x4, 0x64c1, 0x6, "863481ed9821dfe2"}) (async, rerun: 32) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:47:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xf000}, 0x0) 20:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x30000}, 0x0) [ 752.986360][T25520] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0xf}}, 0x0) 20:47:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x13) syz_open_pts(r0, 0x0) [ 753.042030][T25509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:02 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) r2 = openat$vmci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000200)={@host}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x8e4a, 0x7, 0x7, 0x3f], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000140)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) 20:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x34000}, 0x0) 20:47:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x14}}, 0x0) 20:47:03 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x42, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) [ 753.957549][ T9488] device hsr_slave_0 left promiscuous mode [ 753.964024][ T9488] device hsr_slave_1 left promiscuous mode [ 753.975661][ T9488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.983974][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.993589][ T9488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.001225][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.010053][ T9488] device bridge_slave_1 left promiscuous mode [ 754.016319][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.026013][ T9488] device bridge_slave_0 left promiscuous mode [ 754.032539][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.046333][ T9488] device veth1_macvtap left promiscuous mode [ 754.052650][ T9488] device veth0_macvtap left promiscuous mode [ 754.058762][ T9488] device veth1_vlan left promiscuous mode [ 754.064675][ T9488] device veth0_vlan left promiscuous mode [ 754.256491][ T9488] team0 (unregistering): Port device team_slave_1 removed [ 754.270143][ T9488] team0 (unregistering): Port device team_slave_0 removed [ 754.285850][ T9488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.304216][ T9488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.383321][ T9488] bond0 (unregistering): Released all slaves [ 755.947534][ T3640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 755.956989][ T3640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 755.964848][ T3640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 755.972631][ T3640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 755.980885][ T3640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 755.988134][ T3640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 756.076419][T25550] chnl_net:caif_netlink_parms(): no params data found [ 756.120284][T25550] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.127397][T25550] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.137810][T25550] device bridge_slave_0 entered promiscuous mode [ 756.146960][T25550] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.154182][T25550] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.162099][T25550] device bridge_slave_1 entered promiscuous mode [ 756.185449][T25550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.197140][T25550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.224339][T25550] team0: Port device team_slave_0 added [ 756.232784][T25550] team0: Port device team_slave_1 added [ 756.256552][T25550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.263641][T25550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.289743][T25550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.301630][T25550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.308577][T25550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.334513][T25550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.366062][T25550] device hsr_slave_0 entered promiscuous mode [ 756.375068][T25550] device hsr_slave_1 entered promiscuous mode [ 756.449709][T25550] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.456797][T25550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.464353][T25550] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.471488][T25550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.518488][T25550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.533293][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 756.542569][ T3685] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.553354][ T3685] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.563476][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 756.577488][T25550] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.590408][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 756.598749][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.606034][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.621192][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 756.630383][ T3678] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.637452][ T3678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.659506][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 756.668007][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 756.678834][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 756.698293][T25550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 756.708955][T25550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.725650][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 756.734566][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 756.748552][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 756.767421][T25550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.775073][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 756.783021][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 756.801918][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 756.822817][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 756.831512][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 756.839114][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 756.848786][T25550] device veth0_vlan entered promiscuous mode [ 756.864615][T25550] device veth1_vlan entered promiscuous mode [ 756.886026][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 756.894503][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 756.902794][T18772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 756.915000][T25550] device veth0_macvtap entered promiscuous mode [ 756.925531][T25550] device veth1_macvtap entered promiscuous mode [ 756.943605][T25550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 756.960672][T25550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.970705][T25550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 756.981250][T25550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.991392][T25550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 757.006284][T25550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.016587][T25550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 757.030389][T25550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.040452][T25550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 757.051125][T25550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.064817][T25550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.077365][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 757.087931][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 757.098784][T25550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 757.112594][T25550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.122736][T25550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 757.133701][T25550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.143840][T25550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 757.155045][T25550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.166173][T25550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 757.177052][T25550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.187208][T25550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 757.199163][T25550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.212469][T25550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.222201][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 757.231471][T14838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 757.304092][ T9488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.319302][ T9488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.334591][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 757.347877][ T9488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.356490][ T9488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.367377][T14841] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 20:47:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x400300}, 0x0) 20:47:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x13) syz_open_pts(r0, 0x0) 20:47:07 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6d56381b}}, './file0\x00'}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0xc0}}, 0x0) 20:47:07 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x43, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a03000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0xac99b80508c89e09, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4b}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x21}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x1c4, 0x8, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0xb0, 0x7, 0x1, 0x0, "08d24b285ca30f2e2c669fd7de92d42a0d7eaffb83fe2bea82afe6c04c1c515c1bc1b7f9bd9b9daf1f34f53a905523b3ed47976bcccce3cd9d06a50c1b2a0e9e700889a7d5919c8179d00f6994f1e7aa3297565e55f3ed7793abba73d696eb6e98faa139ede66bb2e267d40caacc2e98b3e8661fd68fd09269928988b557f7cae722baeb73c11db434e05e4c0986ca08d22211e7afe6245ceb942c4ee3b78948b9446e98b5807dc76c51572f"}, @NFTA_RULE_USERDATA={0xbd, 0x7, 0x1, 0x0, "0a8d8584749599fe250883a70c002553acc7dc00a86ecb5b907baf58b40f5f6a98443f7ace85319aae2e022a3fdf8b775f6aecb01d74d10742e019647153fad79fcee76dffb5c3e6a3b12dbddc22b872dc3d05afee3bd357e35ab0224629d512951d91b5c0ad33ba1ef81a6e59cb5d9fc0d919ef84bc5c42a3008ae86f5ebaed0ebea6848ed9afdd998b735af218f3bcd9dd0a494d73f3c13a352b4136f7dfb685f05002b778f12ba01c3e3874d2419ebd8ad8d8d89f29368e"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0xbc, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x14}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x3d4}}, 0x0) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000180)=ANY=[@ANYBLOB="c6000000080211000000080211000001ffffe5fff7ffda7c4136dd783c90b11d1e3b371b9863734d8406ae9ffd3caab8c579604bf001884d63b71694d69bc4891a8a925b463f8c9a6d478d78e187b06d6b20a80f295e685fa039e413dc8e52d015582f7a0835ff36e6a072eb57ed0f9b1d3ce1652b99b3732fc0b002e11940f481999ca91749fc85fcea0ae2de3c6602068a2f260e85ff858a93188f5dcab1679dfe341e6977f3dc3f374e192582a55c66afcb1c03ea552b954578cc07f57dd45d38980ec2861dec424d91a733"], 0x2c) [ 757.414480][T25557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xb7aaaa}, 0x0) 20:47:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0xec0}}, 0x0) 20:47:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, "00000000000000000000000000ddc1517600"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x13) syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, "00000000000000000000000000ddc1517600"}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x13) (async) syz_open_pts(r0, 0x0) (async) [ 757.482321][T25563] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:07 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6d56381b}}, './file0\x00'}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) [ 757.539466][T25572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x33fe0}}, 0x0) 20:47:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xf0ffff}, 0x0) 20:47:07 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6d56381b}}, './file0\x00'}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6d56381b}}, './file0\x00'}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@my=0x1}) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) [ 757.665647][T25582] ptm ptm1: ldisc open failed (-12), clearing slot 1 20:47:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x7ffff000}}, 0x0) 20:47:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x341c02, 0x9) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000040)={0x6d9ae7e8, 0xfffffff9, 0x23}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7fffffff, 0x6, 0x7, 0x90b, 0x13, "f7e3c2de6e0c8436a6754948731b5defd4cc5c"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x5) 20:47:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x1000000}, 0x0) [ 757.753707][T25592] Failed to get privilege flags for destination (handle=0x0:0x0) [ 758.000685][ T14] Bluetooth: hci0: command 0x0409 tx timeout 20:47:07 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x44, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0xfffffdef}}, 0x0) 20:47:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x341c02, 0x9) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000040)={0x6d9ae7e8, 0xfffffff9, 0x23}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7fffffff, 0x6, 0x7, 0x90b, 0x13, "f7e3c2de6e0c8436a6754948731b5defd4cc5c"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x341c02, 0x9) (async) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000040)={0x6d9ae7e8, 0xfffffff9, 0x23}) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7fffffff, 0x6, 0x7, 0x90b, 0x13, "f7e3c2de6e0c8436a6754948731b5defd4cc5c"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x5) (async) 20:47:07 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@local, 0xcd85}, @hyper, 0x2, 0x401, 0x9, 0x8, 0x2, 0x401, 0x800}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x2000000}, 0x0) 20:47:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a03000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0xac99b80508c89e09, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4b}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x21}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x1c4, 0x8, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0xb0, 0x7, 0x1, 0x0, "08d24b285ca30f2e2c669fd7de92d42a0d7eaffb83fe2bea82afe6c04c1c515c1bc1b7f9bd9b9daf1f34f53a905523b3ed47976bcccce3cd9d06a50c1b2a0e9e700889a7d5919c8179d00f6994f1e7aa3297565e55f3ed7793abba73d696eb6e98faa139ede66bb2e267d40caacc2e98b3e8661fd68fd09269928988b557f7cae722baeb73c11db434e05e4c0986ca08d22211e7afe6245ceb942c4ee3b78948b9446e98b5807dc76c51572f"}, @NFTA_RULE_USERDATA={0xbd, 0x7, 0x1, 0x0, "0a8d8584749599fe250883a70c002553acc7dc00a86ecb5b907baf58b40f5f6a98443f7ace85319aae2e022a3fdf8b775f6aecb01d74d10742e019647153fad79fcee76dffb5c3e6a3b12dbddc22b872dc3d05afee3bd357e35ab0224629d512951d91b5c0ad33ba1ef81a6e59cb5d9fc0d919ef84bc5c42a3008ae86f5ebaed0ebea6848ed9afdd998b735af218f3bcd9dd0a494d73f3c13a352b4136f7dfb685f05002b778f12ba01c3e3874d2419ebd8ad8d8d89f29368e"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0xbc, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x14}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x3d4}}, 0x0) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000180)=ANY=[@ANYBLOB="c6000000080211000000080211000001ffffe5fff7ffda7c4136dd783c90b11d1e3b371b9863734d8406ae9ffd3caab8c579604bf001884d63b71694d69bc4891a8a925b463f8c9a6d478d78e187b06d6b20a80f295e685fa039e413dc8e52d015582f7a0835ff36e6a072eb57ed0f9b1d3ce1652b99b3732fc0b002e11940f481999ca91749fc85fcea0ae2de3c6602068a2f260e85ff858a93188f5dcab1679dfe341e6977f3dc3f374e192582a55c66afcb1c03ea552b954578cc07f57dd45d38980ec2861dec424d91a733"], 0x2c) 20:47:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x3000000}, 0x0) [ 758.310506][T25609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x341c02, 0x9) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000040)={0x6d9ae7e8, 0xfffffff9, 0x23}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x7fffffff, 0x6, 0x7, 0x90b, 0x13, "f7e3c2de6e0c8436a6754948731b5defd4cc5c"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x5) 20:47:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x2}, 0x0) [ 758.396126][T25626] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x4000000}, 0x0) 20:47:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x5}, 0x0) 20:47:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0xfffffa35, 0x1, 0x0, 0x0, 0xd, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) write(r4, &(0x7f0000000100)="b1", 0x19000) r5 = inotify_init1(0x80000) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x1, r5, &(0x7f0000000140)="bff7d62946c4a894ff3188189916dbd5bd33756be81a1af02b772faf17e9f7389c458ddbfc2c52ad28725a44088d970d09a33765e787182b740f5d5bf1c5e8347ef5ca39342b3da83ac14be6379e2d866638cfd20c50a4889dc179ca98ad03cad799086ee1a8c8fd31b1b74dc1de93bc2e6732ddb0963126852bb60d87710ede2675722d0ede05", 0x87, 0x0, 0x0, 0x0, r3}]) fcntl$setpipe(r4, 0x407, 0x0) syz_open_pts(r4, 0x22000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:47:08 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x45, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x5000000}, 0x0) 20:47:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x7}, 0x0) 20:47:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a03000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0xac99b80508c89e09, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4b}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x21}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x1c4, 0x8, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0xb0, 0x7, 0x1, 0x0, "08d24b285ca30f2e2c669fd7de92d42a0d7eaffb83fe2bea82afe6c04c1c515c1bc1b7f9bd9b9daf1f34f53a905523b3ed47976bcccce3cd9d06a50c1b2a0e9e700889a7d5919c8179d00f6994f1e7aa3297565e55f3ed7793abba73d696eb6e98faa139ede66bb2e267d40caacc2e98b3e8661fd68fd09269928988b557f7cae722baeb73c11db434e05e4c0986ca08d22211e7afe6245ceb942c4ee3b78948b9446e98b5807dc76c51572f"}, @NFTA_RULE_USERDATA={0xbd, 0x7, 0x1, 0x0, "0a8d8584749599fe250883a70c002553acc7dc00a86ecb5b907baf58b40f5f6a98443f7ace85319aae2e022a3fdf8b775f6aecb01d74d10742e019647153fad79fcee76dffb5c3e6a3b12dbddc22b872dc3d05afee3bd357e35ab0224629d512951d91b5c0ad33ba1ef81a6e59cb5d9fc0d919ef84bc5c42a3008ae86f5ebaed0ebea6848ed9afdd998b735af218f3bcd9dd0a494d73f3c13a352b4136f7dfb685f05002b778f12ba01c3e3874d2419ebd8ad8d8d89f29368e"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0xbc, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x14}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x3d4}}, 0x0) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000180)=ANY=[@ANYBLOB="c6000000080211000000080211000001ffffe5fff7ffda7c4136dd783c90b11d1e3b371b9863734d8406ae9ffd3caab8c579604bf001884d63b71694d69bc4891a8a925b463f8c9a6d478d78e187b06d6b20a80f295e685fa039e413dc8e52d015582f7a0835ff36e6a072eb57ed0f9b1d3ce1652b99b3732fc0b002e11940f481999ca91749fc85fcea0ae2de3c6602068a2f260e85ff858a93188f5dcab1679dfe341e6977f3dc3f374e192582a55c66afcb1c03ea552b954578cc07f57dd45d38980ec2861dec424d91a733"], 0x2c) 20:47:08 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@local, 0xcd85}, @hyper, 0x2, 0x401, 0x9, 0x8, 0x2, 0x401, 0x800}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@local, 0xcd85}, @hyper, 0x2, 0x401, 0x9, 0x8, 0x2, 0x401, 0x800}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:47:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x6000000}, 0x0) 20:47:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x8}, 0x0) [ 759.257026][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 759.304404][T25655] Failed to get privilege flags for destination (handle=0x0:0x0) [ 759.331818][T25654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:09 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@local, 0xcd85}, @hyper, 0x2, 0x401, 0x9, 0x8, 0x2, 0x401, 0x800}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0xfffffa35, 0x1, 0x0, 0x0, 0xd, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) (async) write(r4, &(0x7f0000000100)="b1", 0x19000) (async) r5 = inotify_init1(0x80000) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x1, r5, &(0x7f0000000140)="bff7d62946c4a894ff3188189916dbd5bd33756be81a1af02b772faf17e9f7389c458ddbfc2c52ad28725a44088d970d09a33765e787182b740f5d5bf1c5e8347ef5ca39342b3da83ac14be6379e2d866638cfd20c50a4889dc179ca98ad03cad799086ee1a8c8fd31b1b74dc1de93bc2e6732ddb0963126852bb60d87710ede2675722d0ede05", 0x87, 0x0, 0x0, 0x0, r3}]) (async) fcntl$setpipe(r4, 0x407, 0x0) (async) syz_open_pts(r4, 0x22000) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) [ 759.365437][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x7000000}, 0x0) 20:47:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x12}, 0x0) [ 759.431314][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 759.452820][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:09 executing program 5: r0 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x301000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) [ 759.508609][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 759.563615][T25689] Failed to get privilege flags for destination (handle=0x0:0x0) [ 759.617764][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 759.650264][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 759.673626][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 759.685030][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 759.700892][T25651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 760.080039][ T14] Bluetooth: hci0: command 0x041b tx timeout 20:47:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x8000000}, 0x0) 20:47:09 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x46, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0xfffffa35, 0x1, 0x0, 0x0, 0xd, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) write(r4, &(0x7f0000000100)="b1", 0x19000) r5 = inotify_init1(0x80000) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x1, r5, &(0x7f0000000140)="bff7d62946c4a894ff3188189916dbd5bd33756be81a1af02b772faf17e9f7389c458ddbfc2c52ad28725a44088d970d09a33765e787182b740f5d5bf1c5e8347ef5ca39342b3da83ac14be6379e2d866638cfd20c50a4889dc179ca98ad03cad799086ee1a8c8fd31b1b74dc1de93bc2e6732ddb0963126852bb60d87710ede2675722d0ede05", 0x87, 0x0, 0x0, 0x0, r3}]) fcntl$setpipe(r4, 0x407, 0x0) syz_open_pts(r4, 0x22000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0xfffffa35, 0x1, 0x0, 0x0, 0xd, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) pipe(&(0x7f0000000080)) (async) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) (async) write(r4, &(0x7f0000000100)="b1", 0x19000) (async) inotify_init1(0x80000) (async) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x1, r5, &(0x7f0000000140)="bff7d62946c4a894ff3188189916dbd5bd33756be81a1af02b772faf17e9f7389c458ddbfc2c52ad28725a44088d970d09a33765e787182b740f5d5bf1c5e8347ef5ca39342b3da83ac14be6379e2d866638cfd20c50a4889dc179ca98ad03cad799086ee1a8c8fd31b1b74dc1de93bc2e6732ddb0963126852bb60d87710ede2675722d0ede05", 0x87, 0x0, 0x0, 0x0, r3}]) (async) fcntl$setpipe(r4, 0x407, 0x0) (async) syz_open_pts(r4, 0x22000) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) 20:47:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x300}, 0x0) 20:47:09 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept4$unix(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0xc0800) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:47:09 executing program 5: r0 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x301000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0xffffff1f}, 0x0) 20:47:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x9000000}, 0x0) [ 760.193075][T25696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.203503][T25701] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xe000000}, 0x0) 20:47:09 executing program 5: r0 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x301000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xf000000}, 0x0) 20:47:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/36) r1 = syz_open_pts(r0, 0xd00) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:47:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}}, 0x0) 20:47:10 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@any, 0x2}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{}, 0x1, 0x1}) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000180), 0x202800, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f00000001c0)={&(0x7f0000000780)=[0x9, 0x77b, 0x8, 0x1, 0x3761, 0x7, 0x3, 0x5, 0x5, 0x9, 0x7, 0x7f, 0xfffff001, 0x9, 0x5b, 0x1ff, 0xf6, 0x9, 0x8000, 0x4, 0x0, 0x1, 0x1000, 0x8, 0x7fff, 0x1800, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x7f, 0xbf02, 0x3a28, 0x400, 0x2, 0x3ff, 0x1, 0x2, 0x85ca, 0x9, 0x30, 0x4, 0x3, 0x6, 0x1, 0x538a, 0x3, 0x80000000, 0x6, 0x31e8, 0x40, 0x9, 0x7, 0x0, 0x0, 0xd048, 0x5, 0x7, 0x8, 0x3, 0x7, 0x7, 0x4, 0x10001, 0x6, 0x3, 0x3d0, 0xffffffe1, 0xe, 0x1, 0xffffffeb, 0x9, 0x6, 0x6, 0x1, 0x81, 0xb637, 0x3471, 0xca45, 0x7, 0x80000001, 0x7, 0x8, 0x4, 0x4, 0x10000, 0x5f, 0x9, 0x40, 0x7ff, 0x2, 0x80000000, 0x1, 0x1000000, 0x1000, 0xa7, 0x73, 0x6, 0x2, 0xdeb, 0x1, 0x20, 0x1, 0x0, 0xe, 0x2, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x800, 0x6, 0xb78d, 0x2, 0x2, 0x10000, 0xffff, 0x101, 0x5, 0xf1, 0x5, 0x3, 0x16, 0x1, 0x0, 0xa1, 0x2, 0x0, 0x100, 0xffff, 0x401, 0x8, 0x7fff, 0x5, 0x9, 0x20, 0x4, 0x400, 0x5, 0xffffffff, 0x80000000, 0x5, 0x2, 0x8, 0x3, 0x80000001, 0xffffffff, 0x9, 0xcf, 0xe51a, 0xfff, 0x7, 0x5, 0x7, 0x80000000, 0x0, 0x0, 0x3, 0xb20, 0x5, 0x6, 0x2, 0x80000001, 0x16910ba4, 0xf7, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0xf0, 0x5, 0x80, 0x1, 0x9, 0x2, 0x9, 0xfffff800, 0x7fff, 0xd7, 0x2, 0x0, 0xe92, 0x7f, 0x4, 0x400000, 0x14, 0x10001, 0x4, 0x8, 0x101, 0xffffffff, 0xff, 0x3, 0x6, 0xf6, 0xfffffbff, 0xd5, 0x2, 0x5, 0x6, 0x0, 0x400, 0x0, 0x4, 0xfffffff7, 0x101, 0x8000, 0x5, 0x2, 0x0, 0x3, 0x101, 0x2, 0x1f, 0xfffffffe, 0x0, 0x6, 0x8001, 0x8001, 0x6, 0x2, 0xb3, 0x3ff, 0xeb6, 0x9, 0x0, 0x8001, 0x101, 0x1, 0x4, 0x401, 0x800, 0x3, 0x200, 0x7, 0x3ff, 0x0, 0x20000000, 0xfff, 0x2, 0x7ff, 0x3f, 0x0, 0x1000, 0x1, 0x7ff, 0x8, 0x5, 0x6, 0x83e, 0x81, 0x72, 0x3, 0x800, 0xffffffff, 0xfffffffb, 0x3ff, 0x9, 0xed63, 0x0, 0x3, 0xffffff01, 0x2, 0x3, 0x1, 0x725, 0x8, 0xff, 0x0, 0x9, 0x1, 0x2008000, 0x7fffffff, 0x8000, 0x3, 0xffff92e4, 0x400, 0x2, 0x0, 0x80e6, 0x9, 0xfffffff9, 0x20, 0xd007, 0x376, 0x0, 0x81, 0x0, 0x78fc94c7, 0x5, 0xffffff98, 0x7, 0x9, 0x10001, 0x3, 0x7, 0x3, 0x2, 0x80, 0x9, 0x10001, 0x8001, 0x2, 0x3ff, 0x1, 0x27d4, 0x5, 0x18, 0x274, 0x4, 0x200, 0x1ff, 0x6, 0xaa4d, 0x1000, 0xffffffff, 0x9, 0x8001, 0x6, 0x1000, 0x3f, 0x9, 0x9, 0x7fffffff, 0x0, 0x80, 0x7, 0x800, 0x0, 0x200, 0x9, 0x30, 0x4, 0x8, 0x2f, 0x7, 0xd0, 0x10000, 0x8, 0x1b, 0x8, 0x6, 0x1ff, 0x30ba7ae6, 0x5, 0x1, 0xb0, 0x7f, 0x4, 0x1ff, 0x999d, 0x4, 0x9, 0x5, 0x1f, 0x7a, 0x401, 0x9, 0x1, 0x4, 0x6, 0x3f, 0xffff, 0x7, 0x24e, 0x8, 0x8, 0x1, 0xd9d, 0xaaad, 0x7, 0x2, 0x5, 0xdb, 0x8000, 0x7, 0x401, 0x28, 0x1, 0x100, 0x7, 0x7, 0x66, 0x2, 0xc2, 0x6, 0x4820, 0x7fffffff, 0x800, 0x7, 0x2, 0x0, 0x800, 0x10000, 0x70b3, 0x6, 0x9b63, 0x7, 0x1, 0x10001, 0x3d7, 0x1, 0x0, 0xffff2e49, 0x20, 0x6, 0xc0, 0x0, 0x3, 0x6, 0x2, 0x5d5e, 0x8, 0x7fff, 0x8, 0x41, 0x0, 0x8, 0x8, 0x9, 0x100, 0x9, 0x0, 0x8, 0x3, 0xb15, 0x0, 0x401, 0x7f, 0x3ff, 0x8, 0x0, 0x1, 0x2, 0x0, 0x5, 0x7fffffff, 0x8139, 0x8000, 0x0, 0x5, 0x16d9, 0x3, 0x3ff, 0x80d8, 0x3c, 0x7fff, 0x8, 0x8000, 0x5, 0x20, 0x0, 0x1, 0x3, 0x51e, 0xbc3, 0x1400000, 0x4, 0x9, 0x4800000, 0x2, 0x10001, 0x400, 0xfffffffe, 0x7, 0x656, 0x7, 0x9, 0x3, 0x10001, 0x40, 0x5, 0x8a3, 0x9, 0x3, 0x5, 0x2, 0x97c7, 0x448, 0x3cd, 0x6, 0x8, 0xff, 0x7, 0x4, 0x6, 0x7, 0xc4, 0xab1, 0x3ff, 0x400, 0x4, 0x80, 0x3, 0x0, 0xb6b, 0x1, 0x3, 0x2, 0x9, 0x0, 0x8, 0x3, 0x3f, 0xfffffffe, 0x4, 0x8, 0x5, 0x1, 0x0, 0xeeaa, 0xffff, 0xfffffffb, 0x9, 0x6b7, 0x7, 0x80000001, 0x1000, 0x5, 0x6, 0x0, 0x4, 0x8542, 0x80000001, 0x748000, 0xfffffc00, 0x9, 0x5, 0x4, 0x57a7, 0x52b1, 0x1000, 0x1000, 0x6, 0x2, 0x9, 0x5, 0x300, 0x605f, 0xfffffff9, 0x0, 0x6, 0x3, 0x6, 0x8, 0x54, 0x23695b09, 0x1ff, 0x9, 0x101, 0x7, 0x80000000, 0x2, 0xfff, 0x5, 0xffff, 0x4c42fdca, 0x7, 0x3, 0x80000001, 0x7, 0x1ff, 0x1582, 0x6, 0x17, 0x4, 0x5, 0x1, 0x81, 0x80, 0xd410, 0x0, 0x8, 0x8a, 0x3f, 0x1, 0x2, 0x0, 0x2, 0x9, 0x5, 0x81, 0xbe, 0x800, 0x9, 0x7b2f5540, 0x200, 0x1000, 0x1f, 0xc55, 0x1c, 0x9, 0x7fffffff, 0x9, 0x7f, 0x3ff, 0xfff, 0x7, 0x3, 0xfff, 0x8, 0x4, 0x8, 0xffffffff, 0x3, 0x4, 0x200, 0x3b, 0x81, 0x4, 0x101, 0x80, 0x1, 0x41, 0x80, 0x80, 0x2, 0x1, 0x9, 0x4, 0x0, 0x10001, 0xda, 0x8, 0x9e, 0x8, 0x7, 0x6, 0x9, 0xffff, 0x0, 0x7, 0x5, 0x4, 0x8, 0x7, 0x400, 0x5518, 0xfff, 0x7, 0x9, 0x8000, 0x5, 0x2, 0x8000, 0x40, 0x7, 0x6, 0xffffffff, 0xfffffff9, 0x2, 0x800, 0x5, 0x4, 0xaec, 0x9, 0x0, 0x80000001, 0x1000, 0x5, 0x7ff, 0x1000, 0x3bf09d50, 0xfffffffc, 0x20, 0x0, 0x81, 0xd40, 0x1f, 0x80, 0x704, 0x6, 0x7, 0x10001, 0x3ff, 0xb4, 0xc4eb, 0x400, 0x3ff, 0x800, 0x40800, 0x10001, 0x7, 0x4800000, 0x8, 0x5, 0x6, 0x9, 0x9, 0x20a, 0x4, 0x8, 0x9, 0x8, 0x8, 0x2, 0x4, 0x3ff, 0x1, 0x4, 0x0, 0x5, 0x80, 0x100, 0x100, 0x1, 0x7fffffff, 0x8001, 0x6, 0xcf20, 0x7c, 0x4, 0x4, 0x9, 0x8, 0x3ec46265, 0xba0000, 0x401, 0x8, 0xfffffffc, 0x1, 0xdc, 0x800, 0x4, 0xdf7, 0x81, 0x401, 0x200, 0x7, 0xc0, 0x5a134199, 0x9a0, 0x0, 0x40, 0x1, 0x6, 0x8001, 0xa8, 0x8a69, 0x10001, 0x81, 0x6e, 0xc9b0, 0x1, 0x80000000, 0x40, 0x7, 0x8000, 0x8, 0x8001, 0x8650, 0x1000, 0xfff, 0x8000, 0x7, 0xe6a, 0x9, 0x1, 0xff, 0x4, 0x6, 0xff, 0x40100, 0x8000, 0x53c, 0x1000, 0x9, 0x8001, 0xff, 0x800, 0x8, 0xfffffff8, 0x0, 0x3, 0x100, 0x20, 0x3, 0x4, 0x80, 0xfffffffb, 0x3, 0x5, 0x0, 0x6, 0x0, 0x10001, 0xa6de, 0x5, 0x6, 0x4, 0x193c, 0x2, 0x200, 0x9, 0xffd0, 0x8001, 0x10000, 0x5, 0x4, 0xffffffff, 0x2, 0x1, 0x7ff, 0x10001, 0x10001, 0xff, 0x0, 0x4, 0x2, 0xffffff01, 0xffffffff, 0x800, 0x9, 0x8000, 0x1c00000, 0x1, 0x2, 0x4, 0x7, 0x7, 0x800, 0xd838, 0x1000, 0x8514, 0x3f, 0x7, 0x5, 0x1, 0x3ff, 0x100, 0x0, 0x400, 0x9, 0x7, 0xffffffff, 0xfffff801, 0x9, 0xffffffff, 0x4e65e0a1, 0x3, 0x8001, 0x80000000, 0x5, 0x6, 0x333b68d9, 0x7da, 0x0, 0xeb9c, 0x0, 0x3, 0x5, 0xa86, 0x7, 0x200, 0xfffffbd2, 0x0, 0x80000000, 0x3, 0x900, 0x0, 0x80, 0x1f, 0x2, 0x6, 0x7f, 0x1ff, 0x1, 0xffffffff, 0x7, 0xb6, 0x4, 0x20, 0x80000001, 0x0, 0x8, 0xffffff81, 0x7, 0x10001, 0x7, 0x8001, 0x100, 0x800, 0x0, 0x3, 0x5, 0x7fffffff, 0x2, 0x3, 0x3, 0x5, 0x3, 0xffffff81, 0x3f, 0x3, 0x8001, 0x5, 0x4, 0x80000000, 0x6, 0x7, 0x91f9, 0xb65, 0x1f, 0x1, 0x3, 0x800, 0x3ff, 0x0, 0x800, 0x1800000, 0x2, 0x1, 0xfffffb4a, 0x10001, 0x9, 0x8, 0x0, 0xefc2, 0x7, 0x1f, 0x81, 0x81, 0x4, 0x8, 0x7, 0x0, 0x5, 0x1d, 0x7fffffff, 0x95a, 0x8000, 0x671, 0x9, 0x2, 0x4, 0x10000, 0x100, 0x609, 0x10000, 0xfffffff9, 0x8001, 0x5, 0x7, 0x401, 0xfff, 0x100, 0xdaa, 0x4, 0x8, 0x7fffffff, 0x9, 0x7f, 0x8, 0x7, 0x7, 0x6, 0x6, 0x400, 0x0, 0x8, 0xffff, 0x4, 0x101, 0x3ff, 0x7f, 0x2, 0x1, 0x6, 0x4, 0x6, 0x2, 0x7, 0x8, 0x401, 0x4, 0x9cd, 0x10001, 0xff, 0x9, 0xffff, 0x2, 0x7f, 0x6, 0x3, 0x2, 0x9, 0x3, 0x80, 0xb3, 0x7fff, 0xff, 0xff, 0x1, 0x8, 0x80000000, 0x10000, 0x4, 0x8001, 0x551, 0xffffffff, 0x10001, 0x1caa, 0x40, 0x6, 0xfffffffd, 0x7, 0xac21, 0xe097, 0x1, 0x40, 0x1ff, 0x7fffffff, 0x0, 0x0, 0x1f, 0x3997, 0x7ff, 0x1000, 0x3f, 0xffff, 0xf0], 0x6, 0x400, 0x4}) [ 760.360928][T25715] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:10 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x47, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x3f000000}, 0x0) 20:47:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x2}, 0x0) 20:47:10 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@any, 0x2}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0xa0000) (async, rerun: 32) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{}, 0x1, 0x1}) (async, rerun: 32) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000180), 0x202800, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f00000001c0)={&(0x7f0000000780)=[0x9, 0x77b, 0x8, 0x1, 0x3761, 0x7, 0x3, 0x5, 0x5, 0x9, 0x7, 0x7f, 0xfffff001, 0x9, 0x5b, 0x1ff, 0xf6, 0x9, 0x8000, 0x4, 0x0, 0x1, 0x1000, 0x8, 0x7fff, 0x1800, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x7f, 0xbf02, 0x3a28, 0x400, 0x2, 0x3ff, 0x1, 0x2, 0x85ca, 0x9, 0x30, 0x4, 0x3, 0x6, 0x1, 0x538a, 0x3, 0x80000000, 0x6, 0x31e8, 0x40, 0x9, 0x7, 0x0, 0x0, 0xd048, 0x5, 0x7, 0x8, 0x3, 0x7, 0x7, 0x4, 0x10001, 0x6, 0x3, 0x3d0, 0xffffffe1, 0xe, 0x1, 0xffffffeb, 0x9, 0x6, 0x6, 0x1, 0x81, 0xb637, 0x3471, 0xca45, 0x7, 0x80000001, 0x7, 0x8, 0x4, 0x4, 0x10000, 0x5f, 0x9, 0x40, 0x7ff, 0x2, 0x80000000, 0x1, 0x1000000, 0x1000, 0xa7, 0x73, 0x6, 0x2, 0xdeb, 0x1, 0x20, 0x1, 0x0, 0xe, 0x2, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x800, 0x6, 0xb78d, 0x2, 0x2, 0x10000, 0xffff, 0x101, 0x5, 0xf1, 0x5, 0x3, 0x16, 0x1, 0x0, 0xa1, 0x2, 0x0, 0x100, 0xffff, 0x401, 0x8, 0x7fff, 0x5, 0x9, 0x20, 0x4, 0x400, 0x5, 0xffffffff, 0x80000000, 0x5, 0x2, 0x8, 0x3, 0x80000001, 0xffffffff, 0x9, 0xcf, 0xe51a, 0xfff, 0x7, 0x5, 0x7, 0x80000000, 0x0, 0x0, 0x3, 0xb20, 0x5, 0x6, 0x2, 0x80000001, 0x16910ba4, 0xf7, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0xf0, 0x5, 0x80, 0x1, 0x9, 0x2, 0x9, 0xfffff800, 0x7fff, 0xd7, 0x2, 0x0, 0xe92, 0x7f, 0x4, 0x400000, 0x14, 0x10001, 0x4, 0x8, 0x101, 0xffffffff, 0xff, 0x3, 0x6, 0xf6, 0xfffffbff, 0xd5, 0x2, 0x5, 0x6, 0x0, 0x400, 0x0, 0x4, 0xfffffff7, 0x101, 0x8000, 0x5, 0x2, 0x0, 0x3, 0x101, 0x2, 0x1f, 0xfffffffe, 0x0, 0x6, 0x8001, 0x8001, 0x6, 0x2, 0xb3, 0x3ff, 0xeb6, 0x9, 0x0, 0x8001, 0x101, 0x1, 0x4, 0x401, 0x800, 0x3, 0x200, 0x7, 0x3ff, 0x0, 0x20000000, 0xfff, 0x2, 0x7ff, 0x3f, 0x0, 0x1000, 0x1, 0x7ff, 0x8, 0x5, 0x6, 0x83e, 0x81, 0x72, 0x3, 0x800, 0xffffffff, 0xfffffffb, 0x3ff, 0x9, 0xed63, 0x0, 0x3, 0xffffff01, 0x2, 0x3, 0x1, 0x725, 0x8, 0xff, 0x0, 0x9, 0x1, 0x2008000, 0x7fffffff, 0x8000, 0x3, 0xffff92e4, 0x400, 0x2, 0x0, 0x80e6, 0x9, 0xfffffff9, 0x20, 0xd007, 0x376, 0x0, 0x81, 0x0, 0x78fc94c7, 0x5, 0xffffff98, 0x7, 0x9, 0x10001, 0x3, 0x7, 0x3, 0x2, 0x80, 0x9, 0x10001, 0x8001, 0x2, 0x3ff, 0x1, 0x27d4, 0x5, 0x18, 0x274, 0x4, 0x200, 0x1ff, 0x6, 0xaa4d, 0x1000, 0xffffffff, 0x9, 0x8001, 0x6, 0x1000, 0x3f, 0x9, 0x9, 0x7fffffff, 0x0, 0x80, 0x7, 0x800, 0x0, 0x200, 0x9, 0x30, 0x4, 0x8, 0x2f, 0x7, 0xd0, 0x10000, 0x8, 0x1b, 0x8, 0x6, 0x1ff, 0x30ba7ae6, 0x5, 0x1, 0xb0, 0x7f, 0x4, 0x1ff, 0x999d, 0x4, 0x9, 0x5, 0x1f, 0x7a, 0x401, 0x9, 0x1, 0x4, 0x6, 0x3f, 0xffff, 0x7, 0x24e, 0x8, 0x8, 0x1, 0xd9d, 0xaaad, 0x7, 0x2, 0x5, 0xdb, 0x8000, 0x7, 0x401, 0x28, 0x1, 0x100, 0x7, 0x7, 0x66, 0x2, 0xc2, 0x6, 0x4820, 0x7fffffff, 0x800, 0x7, 0x2, 0x0, 0x800, 0x10000, 0x70b3, 0x6, 0x9b63, 0x7, 0x1, 0x10001, 0x3d7, 0x1, 0x0, 0xffff2e49, 0x20, 0x6, 0xc0, 0x0, 0x3, 0x6, 0x2, 0x5d5e, 0x8, 0x7fff, 0x8, 0x41, 0x0, 0x8, 0x8, 0x9, 0x100, 0x9, 0x0, 0x8, 0x3, 0xb15, 0x0, 0x401, 0x7f, 0x3ff, 0x8, 0x0, 0x1, 0x2, 0x0, 0x5, 0x7fffffff, 0x8139, 0x8000, 0x0, 0x5, 0x16d9, 0x3, 0x3ff, 0x80d8, 0x3c, 0x7fff, 0x8, 0x8000, 0x5, 0x20, 0x0, 0x1, 0x3, 0x51e, 0xbc3, 0x1400000, 0x4, 0x9, 0x4800000, 0x2, 0x10001, 0x400, 0xfffffffe, 0x7, 0x656, 0x7, 0x9, 0x3, 0x10001, 0x40, 0x5, 0x8a3, 0x9, 0x3, 0x5, 0x2, 0x97c7, 0x448, 0x3cd, 0x6, 0x8, 0xff, 0x7, 0x4, 0x6, 0x7, 0xc4, 0xab1, 0x3ff, 0x400, 0x4, 0x80, 0x3, 0x0, 0xb6b, 0x1, 0x3, 0x2, 0x9, 0x0, 0x8, 0x3, 0x3f, 0xfffffffe, 0x4, 0x8, 0x5, 0x1, 0x0, 0xeeaa, 0xffff, 0xfffffffb, 0x9, 0x6b7, 0x7, 0x80000001, 0x1000, 0x5, 0x6, 0x0, 0x4, 0x8542, 0x80000001, 0x748000, 0xfffffc00, 0x9, 0x5, 0x4, 0x57a7, 0x52b1, 0x1000, 0x1000, 0x6, 0x2, 0x9, 0x5, 0x300, 0x605f, 0xfffffff9, 0x0, 0x6, 0x3, 0x6, 0x8, 0x54, 0x23695b09, 0x1ff, 0x9, 0x101, 0x7, 0x80000000, 0x2, 0xfff, 0x5, 0xffff, 0x4c42fdca, 0x7, 0x3, 0x80000001, 0x7, 0x1ff, 0x1582, 0x6, 0x17, 0x4, 0x5, 0x1, 0x81, 0x80, 0xd410, 0x0, 0x8, 0x8a, 0x3f, 0x1, 0x2, 0x0, 0x2, 0x9, 0x5, 0x81, 0xbe, 0x800, 0x9, 0x7b2f5540, 0x200, 0x1000, 0x1f, 0xc55, 0x1c, 0x9, 0x7fffffff, 0x9, 0x7f, 0x3ff, 0xfff, 0x7, 0x3, 0xfff, 0x8, 0x4, 0x8, 0xffffffff, 0x3, 0x4, 0x200, 0x3b, 0x81, 0x4, 0x101, 0x80, 0x1, 0x41, 0x80, 0x80, 0x2, 0x1, 0x9, 0x4, 0x0, 0x10001, 0xda, 0x8, 0x9e, 0x8, 0x7, 0x6, 0x9, 0xffff, 0x0, 0x7, 0x5, 0x4, 0x8, 0x7, 0x400, 0x5518, 0xfff, 0x7, 0x9, 0x8000, 0x5, 0x2, 0x8000, 0x40, 0x7, 0x6, 0xffffffff, 0xfffffff9, 0x2, 0x800, 0x5, 0x4, 0xaec, 0x9, 0x0, 0x80000001, 0x1000, 0x5, 0x7ff, 0x1000, 0x3bf09d50, 0xfffffffc, 0x20, 0x0, 0x81, 0xd40, 0x1f, 0x80, 0x704, 0x6, 0x7, 0x10001, 0x3ff, 0xb4, 0xc4eb, 0x400, 0x3ff, 0x800, 0x40800, 0x10001, 0x7, 0x4800000, 0x8, 0x5, 0x6, 0x9, 0x9, 0x20a, 0x4, 0x8, 0x9, 0x8, 0x8, 0x2, 0x4, 0x3ff, 0x1, 0x4, 0x0, 0x5, 0x80, 0x100, 0x100, 0x1, 0x7fffffff, 0x8001, 0x6, 0xcf20, 0x7c, 0x4, 0x4, 0x9, 0x8, 0x3ec46265, 0xba0000, 0x401, 0x8, 0xfffffffc, 0x1, 0xdc, 0x800, 0x4, 0xdf7, 0x81, 0x401, 0x200, 0x7, 0xc0, 0x5a134199, 0x9a0, 0x0, 0x40, 0x1, 0x6, 0x8001, 0xa8, 0x8a69, 0x10001, 0x81, 0x6e, 0xc9b0, 0x1, 0x80000000, 0x40, 0x7, 0x8000, 0x8, 0x8001, 0x8650, 0x1000, 0xfff, 0x8000, 0x7, 0xe6a, 0x9, 0x1, 0xff, 0x4, 0x6, 0xff, 0x40100, 0x8000, 0x53c, 0x1000, 0x9, 0x8001, 0xff, 0x800, 0x8, 0xfffffff8, 0x0, 0x3, 0x100, 0x20, 0x3, 0x4, 0x80, 0xfffffffb, 0x3, 0x5, 0x0, 0x6, 0x0, 0x10001, 0xa6de, 0x5, 0x6, 0x4, 0x193c, 0x2, 0x200, 0x9, 0xffd0, 0x8001, 0x10000, 0x5, 0x4, 0xffffffff, 0x2, 0x1, 0x7ff, 0x10001, 0x10001, 0xff, 0x0, 0x4, 0x2, 0xffffff01, 0xffffffff, 0x800, 0x9, 0x8000, 0x1c00000, 0x1, 0x2, 0x4, 0x7, 0x7, 0x800, 0xd838, 0x1000, 0x8514, 0x3f, 0x7, 0x5, 0x1, 0x3ff, 0x100, 0x0, 0x400, 0x9, 0x7, 0xffffffff, 0xfffff801, 0x9, 0xffffffff, 0x4e65e0a1, 0x3, 0x8001, 0x80000000, 0x5, 0x6, 0x333b68d9, 0x7da, 0x0, 0xeb9c, 0x0, 0x3, 0x5, 0xa86, 0x7, 0x200, 0xfffffbd2, 0x0, 0x80000000, 0x3, 0x900, 0x0, 0x80, 0x1f, 0x2, 0x6, 0x7f, 0x1ff, 0x1, 0xffffffff, 0x7, 0xb6, 0x4, 0x20, 0x80000001, 0x0, 0x8, 0xffffff81, 0x7, 0x10001, 0x7, 0x8001, 0x100, 0x800, 0x0, 0x3, 0x5, 0x7fffffff, 0x2, 0x3, 0x3, 0x5, 0x3, 0xffffff81, 0x3f, 0x3, 0x8001, 0x5, 0x4, 0x80000000, 0x6, 0x7, 0x91f9, 0xb65, 0x1f, 0x1, 0x3, 0x800, 0x3ff, 0x0, 0x800, 0x1800000, 0x2, 0x1, 0xfffffb4a, 0x10001, 0x9, 0x8, 0x0, 0xefc2, 0x7, 0x1f, 0x81, 0x81, 0x4, 0x8, 0x7, 0x0, 0x5, 0x1d, 0x7fffffff, 0x95a, 0x8000, 0x671, 0x9, 0x2, 0x4, 0x10000, 0x100, 0x609, 0x10000, 0xfffffff9, 0x8001, 0x5, 0x7, 0x401, 0xfff, 0x100, 0xdaa, 0x4, 0x8, 0x7fffffff, 0x9, 0x7f, 0x8, 0x7, 0x7, 0x6, 0x6, 0x400, 0x0, 0x8, 0xffff, 0x4, 0x101, 0x3ff, 0x7f, 0x2, 0x1, 0x6, 0x4, 0x6, 0x2, 0x7, 0x8, 0x401, 0x4, 0x9cd, 0x10001, 0xff, 0x9, 0xffff, 0x2, 0x7f, 0x6, 0x3, 0x2, 0x9, 0x3, 0x80, 0xb3, 0x7fff, 0xff, 0xff, 0x1, 0x8, 0x80000000, 0x10000, 0x4, 0x8001, 0x551, 0xffffffff, 0x10001, 0x1caa, 0x40, 0x6, 0xfffffffd, 0x7, 0xac21, 0xe097, 0x1, 0x40, 0x1ff, 0x7fffffff, 0x0, 0x0, 0x1f, 0x3997, 0x7ff, 0x1000, 0x3f, 0xffff, 0xf0], 0x6, 0x400, 0x4}) 20:47:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/36) r1 = syz_open_pts(r0, 0xd00) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:47:10 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept4$unix(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0xc0800) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:47:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x60000000}, 0x0) [ 761.096287][T25734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x3}, 0x0) 20:47:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/36) r1 = syz_open_pts(r0, 0xd00) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/36) (async) syz_open_pts(r0, 0xd00) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) 20:47:10 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@any, 0x2}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{}, 0x1, 0x1}) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000180), 0x202800, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f00000001c0)={&(0x7f0000000780)=[0x9, 0x77b, 0x8, 0x1, 0x3761, 0x7, 0x3, 0x5, 0x5, 0x9, 0x7, 0x7f, 0xfffff001, 0x9, 0x5b, 0x1ff, 0xf6, 0x9, 0x8000, 0x4, 0x0, 0x1, 0x1000, 0x8, 0x7fff, 0x1800, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x7f, 0xbf02, 0x3a28, 0x400, 0x2, 0x3ff, 0x1, 0x2, 0x85ca, 0x9, 0x30, 0x4, 0x3, 0x6, 0x1, 0x538a, 0x3, 0x80000000, 0x6, 0x31e8, 0x40, 0x9, 0x7, 0x0, 0x0, 0xd048, 0x5, 0x7, 0x8, 0x3, 0x7, 0x7, 0x4, 0x10001, 0x6, 0x3, 0x3d0, 0xffffffe1, 0xe, 0x1, 0xffffffeb, 0x9, 0x6, 0x6, 0x1, 0x81, 0xb637, 0x3471, 0xca45, 0x7, 0x80000001, 0x7, 0x8, 0x4, 0x4, 0x10000, 0x5f, 0x9, 0x40, 0x7ff, 0x2, 0x80000000, 0x1, 0x1000000, 0x1000, 0xa7, 0x73, 0x6, 0x2, 0xdeb, 0x1, 0x20, 0x1, 0x0, 0xe, 0x2, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x800, 0x6, 0xb78d, 0x2, 0x2, 0x10000, 0xffff, 0x101, 0x5, 0xf1, 0x5, 0x3, 0x16, 0x1, 0x0, 0xa1, 0x2, 0x0, 0x100, 0xffff, 0x401, 0x8, 0x7fff, 0x5, 0x9, 0x20, 0x4, 0x400, 0x5, 0xffffffff, 0x80000000, 0x5, 0x2, 0x8, 0x3, 0x80000001, 0xffffffff, 0x9, 0xcf, 0xe51a, 0xfff, 0x7, 0x5, 0x7, 0x80000000, 0x0, 0x0, 0x3, 0xb20, 0x5, 0x6, 0x2, 0x80000001, 0x16910ba4, 0xf7, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0xf0, 0x5, 0x80, 0x1, 0x9, 0x2, 0x9, 0xfffff800, 0x7fff, 0xd7, 0x2, 0x0, 0xe92, 0x7f, 0x4, 0x400000, 0x14, 0x10001, 0x4, 0x8, 0x101, 0xffffffff, 0xff, 0x3, 0x6, 0xf6, 0xfffffbff, 0xd5, 0x2, 0x5, 0x6, 0x0, 0x400, 0x0, 0x4, 0xfffffff7, 0x101, 0x8000, 0x5, 0x2, 0x0, 0x3, 0x101, 0x2, 0x1f, 0xfffffffe, 0x0, 0x6, 0x8001, 0x8001, 0x6, 0x2, 0xb3, 0x3ff, 0xeb6, 0x9, 0x0, 0x8001, 0x101, 0x1, 0x4, 0x401, 0x800, 0x3, 0x200, 0x7, 0x3ff, 0x0, 0x20000000, 0xfff, 0x2, 0x7ff, 0x3f, 0x0, 0x1000, 0x1, 0x7ff, 0x8, 0x5, 0x6, 0x83e, 0x81, 0x72, 0x3, 0x800, 0xffffffff, 0xfffffffb, 0x3ff, 0x9, 0xed63, 0x0, 0x3, 0xffffff01, 0x2, 0x3, 0x1, 0x725, 0x8, 0xff, 0x0, 0x9, 0x1, 0x2008000, 0x7fffffff, 0x8000, 0x3, 0xffff92e4, 0x400, 0x2, 0x0, 0x80e6, 0x9, 0xfffffff9, 0x20, 0xd007, 0x376, 0x0, 0x81, 0x0, 0x78fc94c7, 0x5, 0xffffff98, 0x7, 0x9, 0x10001, 0x3, 0x7, 0x3, 0x2, 0x80, 0x9, 0x10001, 0x8001, 0x2, 0x3ff, 0x1, 0x27d4, 0x5, 0x18, 0x274, 0x4, 0x200, 0x1ff, 0x6, 0xaa4d, 0x1000, 0xffffffff, 0x9, 0x8001, 0x6, 0x1000, 0x3f, 0x9, 0x9, 0x7fffffff, 0x0, 0x80, 0x7, 0x800, 0x0, 0x200, 0x9, 0x30, 0x4, 0x8, 0x2f, 0x7, 0xd0, 0x10000, 0x8, 0x1b, 0x8, 0x6, 0x1ff, 0x30ba7ae6, 0x5, 0x1, 0xb0, 0x7f, 0x4, 0x1ff, 0x999d, 0x4, 0x9, 0x5, 0x1f, 0x7a, 0x401, 0x9, 0x1, 0x4, 0x6, 0x3f, 0xffff, 0x7, 0x24e, 0x8, 0x8, 0x1, 0xd9d, 0xaaad, 0x7, 0x2, 0x5, 0xdb, 0x8000, 0x7, 0x401, 0x28, 0x1, 0x100, 0x7, 0x7, 0x66, 0x2, 0xc2, 0x6, 0x4820, 0x7fffffff, 0x800, 0x7, 0x2, 0x0, 0x800, 0x10000, 0x70b3, 0x6, 0x9b63, 0x7, 0x1, 0x10001, 0x3d7, 0x1, 0x0, 0xffff2e49, 0x20, 0x6, 0xc0, 0x0, 0x3, 0x6, 0x2, 0x5d5e, 0x8, 0x7fff, 0x8, 0x41, 0x0, 0x8, 0x8, 0x9, 0x100, 0x9, 0x0, 0x8, 0x3, 0xb15, 0x0, 0x401, 0x7f, 0x3ff, 0x8, 0x0, 0x1, 0x2, 0x0, 0x5, 0x7fffffff, 0x8139, 0x8000, 0x0, 0x5, 0x16d9, 0x3, 0x3ff, 0x80d8, 0x3c, 0x7fff, 0x8, 0x8000, 0x5, 0x20, 0x0, 0x1, 0x3, 0x51e, 0xbc3, 0x1400000, 0x4, 0x9, 0x4800000, 0x2, 0x10001, 0x400, 0xfffffffe, 0x7, 0x656, 0x7, 0x9, 0x3, 0x10001, 0x40, 0x5, 0x8a3, 0x9, 0x3, 0x5, 0x2, 0x97c7, 0x448, 0x3cd, 0x6, 0x8, 0xff, 0x7, 0x4, 0x6, 0x7, 0xc4, 0xab1, 0x3ff, 0x400, 0x4, 0x80, 0x3, 0x0, 0xb6b, 0x1, 0x3, 0x2, 0x9, 0x0, 0x8, 0x3, 0x3f, 0xfffffffe, 0x4, 0x8, 0x5, 0x1, 0x0, 0xeeaa, 0xffff, 0xfffffffb, 0x9, 0x6b7, 0x7, 0x80000001, 0x1000, 0x5, 0x6, 0x0, 0x4, 0x8542, 0x80000001, 0x748000, 0xfffffc00, 0x9, 0x5, 0x4, 0x57a7, 0x52b1, 0x1000, 0x1000, 0x6, 0x2, 0x9, 0x5, 0x300, 0x605f, 0xfffffff9, 0x0, 0x6, 0x3, 0x6, 0x8, 0x54, 0x23695b09, 0x1ff, 0x9, 0x101, 0x7, 0x80000000, 0x2, 0xfff, 0x5, 0xffff, 0x4c42fdca, 0x7, 0x3, 0x80000001, 0x7, 0x1ff, 0x1582, 0x6, 0x17, 0x4, 0x5, 0x1, 0x81, 0x80, 0xd410, 0x0, 0x8, 0x8a, 0x3f, 0x1, 0x2, 0x0, 0x2, 0x9, 0x5, 0x81, 0xbe, 0x800, 0x9, 0x7b2f5540, 0x200, 0x1000, 0x1f, 0xc55, 0x1c, 0x9, 0x7fffffff, 0x9, 0x7f, 0x3ff, 0xfff, 0x7, 0x3, 0xfff, 0x8, 0x4, 0x8, 0xffffffff, 0x3, 0x4, 0x200, 0x3b, 0x81, 0x4, 0x101, 0x80, 0x1, 0x41, 0x80, 0x80, 0x2, 0x1, 0x9, 0x4, 0x0, 0x10001, 0xda, 0x8, 0x9e, 0x8, 0x7, 0x6, 0x9, 0xffff, 0x0, 0x7, 0x5, 0x4, 0x8, 0x7, 0x400, 0x5518, 0xfff, 0x7, 0x9, 0x8000, 0x5, 0x2, 0x8000, 0x40, 0x7, 0x6, 0xffffffff, 0xfffffff9, 0x2, 0x800, 0x5, 0x4, 0xaec, 0x9, 0x0, 0x80000001, 0x1000, 0x5, 0x7ff, 0x1000, 0x3bf09d50, 0xfffffffc, 0x20, 0x0, 0x81, 0xd40, 0x1f, 0x80, 0x704, 0x6, 0x7, 0x10001, 0x3ff, 0xb4, 0xc4eb, 0x400, 0x3ff, 0x800, 0x40800, 0x10001, 0x7, 0x4800000, 0x8, 0x5, 0x6, 0x9, 0x9, 0x20a, 0x4, 0x8, 0x9, 0x8, 0x8, 0x2, 0x4, 0x3ff, 0x1, 0x4, 0x0, 0x5, 0x80, 0x100, 0x100, 0x1, 0x7fffffff, 0x8001, 0x6, 0xcf20, 0x7c, 0x4, 0x4, 0x9, 0x8, 0x3ec46265, 0xba0000, 0x401, 0x8, 0xfffffffc, 0x1, 0xdc, 0x800, 0x4, 0xdf7, 0x81, 0x401, 0x200, 0x7, 0xc0, 0x5a134199, 0x9a0, 0x0, 0x40, 0x1, 0x6, 0x8001, 0xa8, 0x8a69, 0x10001, 0x81, 0x6e, 0xc9b0, 0x1, 0x80000000, 0x40, 0x7, 0x8000, 0x8, 0x8001, 0x8650, 0x1000, 0xfff, 0x8000, 0x7, 0xe6a, 0x9, 0x1, 0xff, 0x4, 0x6, 0xff, 0x40100, 0x8000, 0x53c, 0x1000, 0x9, 0x8001, 0xff, 0x800, 0x8, 0xfffffff8, 0x0, 0x3, 0x100, 0x20, 0x3, 0x4, 0x80, 0xfffffffb, 0x3, 0x5, 0x0, 0x6, 0x0, 0x10001, 0xa6de, 0x5, 0x6, 0x4, 0x193c, 0x2, 0x200, 0x9, 0xffd0, 0x8001, 0x10000, 0x5, 0x4, 0xffffffff, 0x2, 0x1, 0x7ff, 0x10001, 0x10001, 0xff, 0x0, 0x4, 0x2, 0xffffff01, 0xffffffff, 0x800, 0x9, 0x8000, 0x1c00000, 0x1, 0x2, 0x4, 0x7, 0x7, 0x800, 0xd838, 0x1000, 0x8514, 0x3f, 0x7, 0x5, 0x1, 0x3ff, 0x100, 0x0, 0x400, 0x9, 0x7, 0xffffffff, 0xfffff801, 0x9, 0xffffffff, 0x4e65e0a1, 0x3, 0x8001, 0x80000000, 0x5, 0x6, 0x333b68d9, 0x7da, 0x0, 0xeb9c, 0x0, 0x3, 0x5, 0xa86, 0x7, 0x200, 0xfffffbd2, 0x0, 0x80000000, 0x3, 0x900, 0x0, 0x80, 0x1f, 0x2, 0x6, 0x7f, 0x1ff, 0x1, 0xffffffff, 0x7, 0xb6, 0x4, 0x20, 0x80000001, 0x0, 0x8, 0xffffff81, 0x7, 0x10001, 0x7, 0x8001, 0x100, 0x800, 0x0, 0x3, 0x5, 0x7fffffff, 0x2, 0x3, 0x3, 0x5, 0x3, 0xffffff81, 0x3f, 0x3, 0x8001, 0x5, 0x4, 0x80000000, 0x6, 0x7, 0x91f9, 0xb65, 0x1f, 0x1, 0x3, 0x800, 0x3ff, 0x0, 0x800, 0x1800000, 0x2, 0x1, 0xfffffb4a, 0x10001, 0x9, 0x8, 0x0, 0xefc2, 0x7, 0x1f, 0x81, 0x81, 0x4, 0x8, 0x7, 0x0, 0x5, 0x1d, 0x7fffffff, 0x95a, 0x8000, 0x671, 0x9, 0x2, 0x4, 0x10000, 0x100, 0x609, 0x10000, 0xfffffff9, 0x8001, 0x5, 0x7, 0x401, 0xfff, 0x100, 0xdaa, 0x4, 0x8, 0x7fffffff, 0x9, 0x7f, 0x8, 0x7, 0x7, 0x6, 0x6, 0x400, 0x0, 0x8, 0xffff, 0x4, 0x101, 0x3ff, 0x7f, 0x2, 0x1, 0x6, 0x4, 0x6, 0x2, 0x7, 0x8, 0x401, 0x4, 0x9cd, 0x10001, 0xff, 0x9, 0xffff, 0x2, 0x7f, 0x6, 0x3, 0x2, 0x9, 0x3, 0x80, 0xb3, 0x7fff, 0xff, 0xff, 0x1, 0x8, 0x80000000, 0x10000, 0x4, 0x8001, 0x551, 0xffffffff, 0x10001, 0x1caa, 0x40, 0x6, 0xfffffffd, 0x7, 0xac21, 0xe097, 0x1, 0x40, 0x1ff, 0x7fffffff, 0x0, 0x0, 0x1f, 0x3997, 0x7ff, 0x1000, 0x3f, 0xffff, 0xf0], 0x6, 0x400, 0x4}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@any, 0x2}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x20) (async) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0xa0000) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{}, 0x1, 0x1}) (async) openat$cachefiles(0xffffff9c, &(0x7f0000000180), 0x202800, 0x0) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f00000001c0)={&(0x7f0000000780)=[0x9, 0x77b, 0x8, 0x1, 0x3761, 0x7, 0x3, 0x5, 0x5, 0x9, 0x7, 0x7f, 0xfffff001, 0x9, 0x5b, 0x1ff, 0xf6, 0x9, 0x8000, 0x4, 0x0, 0x1, 0x1000, 0x8, 0x7fff, 0x1800, 0x4, 0x3, 0x0, 0x8001, 0x6, 0x7f, 0xbf02, 0x3a28, 0x400, 0x2, 0x3ff, 0x1, 0x2, 0x85ca, 0x9, 0x30, 0x4, 0x3, 0x6, 0x1, 0x538a, 0x3, 0x80000000, 0x6, 0x31e8, 0x40, 0x9, 0x7, 0x0, 0x0, 0xd048, 0x5, 0x7, 0x8, 0x3, 0x7, 0x7, 0x4, 0x10001, 0x6, 0x3, 0x3d0, 0xffffffe1, 0xe, 0x1, 0xffffffeb, 0x9, 0x6, 0x6, 0x1, 0x81, 0xb637, 0x3471, 0xca45, 0x7, 0x80000001, 0x7, 0x8, 0x4, 0x4, 0x10000, 0x5f, 0x9, 0x40, 0x7ff, 0x2, 0x80000000, 0x1, 0x1000000, 0x1000, 0xa7, 0x73, 0x6, 0x2, 0xdeb, 0x1, 0x20, 0x1, 0x0, 0xe, 0x2, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x800, 0x6, 0xb78d, 0x2, 0x2, 0x10000, 0xffff, 0x101, 0x5, 0xf1, 0x5, 0x3, 0x16, 0x1, 0x0, 0xa1, 0x2, 0x0, 0x100, 0xffff, 0x401, 0x8, 0x7fff, 0x5, 0x9, 0x20, 0x4, 0x400, 0x5, 0xffffffff, 0x80000000, 0x5, 0x2, 0x8, 0x3, 0x80000001, 0xffffffff, 0x9, 0xcf, 0xe51a, 0xfff, 0x7, 0x5, 0x7, 0x80000000, 0x0, 0x0, 0x3, 0xb20, 0x5, 0x6, 0x2, 0x80000001, 0x16910ba4, 0xf7, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0xf0, 0x5, 0x80, 0x1, 0x9, 0x2, 0x9, 0xfffff800, 0x7fff, 0xd7, 0x2, 0x0, 0xe92, 0x7f, 0x4, 0x400000, 0x14, 0x10001, 0x4, 0x8, 0x101, 0xffffffff, 0xff, 0x3, 0x6, 0xf6, 0xfffffbff, 0xd5, 0x2, 0x5, 0x6, 0x0, 0x400, 0x0, 0x4, 0xfffffff7, 0x101, 0x8000, 0x5, 0x2, 0x0, 0x3, 0x101, 0x2, 0x1f, 0xfffffffe, 0x0, 0x6, 0x8001, 0x8001, 0x6, 0x2, 0xb3, 0x3ff, 0xeb6, 0x9, 0x0, 0x8001, 0x101, 0x1, 0x4, 0x401, 0x800, 0x3, 0x200, 0x7, 0x3ff, 0x0, 0x20000000, 0xfff, 0x2, 0x7ff, 0x3f, 0x0, 0x1000, 0x1, 0x7ff, 0x8, 0x5, 0x6, 0x83e, 0x81, 0x72, 0x3, 0x800, 0xffffffff, 0xfffffffb, 0x3ff, 0x9, 0xed63, 0x0, 0x3, 0xffffff01, 0x2, 0x3, 0x1, 0x725, 0x8, 0xff, 0x0, 0x9, 0x1, 0x2008000, 0x7fffffff, 0x8000, 0x3, 0xffff92e4, 0x400, 0x2, 0x0, 0x80e6, 0x9, 0xfffffff9, 0x20, 0xd007, 0x376, 0x0, 0x81, 0x0, 0x78fc94c7, 0x5, 0xffffff98, 0x7, 0x9, 0x10001, 0x3, 0x7, 0x3, 0x2, 0x80, 0x9, 0x10001, 0x8001, 0x2, 0x3ff, 0x1, 0x27d4, 0x5, 0x18, 0x274, 0x4, 0x200, 0x1ff, 0x6, 0xaa4d, 0x1000, 0xffffffff, 0x9, 0x8001, 0x6, 0x1000, 0x3f, 0x9, 0x9, 0x7fffffff, 0x0, 0x80, 0x7, 0x800, 0x0, 0x200, 0x9, 0x30, 0x4, 0x8, 0x2f, 0x7, 0xd0, 0x10000, 0x8, 0x1b, 0x8, 0x6, 0x1ff, 0x30ba7ae6, 0x5, 0x1, 0xb0, 0x7f, 0x4, 0x1ff, 0x999d, 0x4, 0x9, 0x5, 0x1f, 0x7a, 0x401, 0x9, 0x1, 0x4, 0x6, 0x3f, 0xffff, 0x7, 0x24e, 0x8, 0x8, 0x1, 0xd9d, 0xaaad, 0x7, 0x2, 0x5, 0xdb, 0x8000, 0x7, 0x401, 0x28, 0x1, 0x100, 0x7, 0x7, 0x66, 0x2, 0xc2, 0x6, 0x4820, 0x7fffffff, 0x800, 0x7, 0x2, 0x0, 0x800, 0x10000, 0x70b3, 0x6, 0x9b63, 0x7, 0x1, 0x10001, 0x3d7, 0x1, 0x0, 0xffff2e49, 0x20, 0x6, 0xc0, 0x0, 0x3, 0x6, 0x2, 0x5d5e, 0x8, 0x7fff, 0x8, 0x41, 0x0, 0x8, 0x8, 0x9, 0x100, 0x9, 0x0, 0x8, 0x3, 0xb15, 0x0, 0x401, 0x7f, 0x3ff, 0x8, 0x0, 0x1, 0x2, 0x0, 0x5, 0x7fffffff, 0x8139, 0x8000, 0x0, 0x5, 0x16d9, 0x3, 0x3ff, 0x80d8, 0x3c, 0x7fff, 0x8, 0x8000, 0x5, 0x20, 0x0, 0x1, 0x3, 0x51e, 0xbc3, 0x1400000, 0x4, 0x9, 0x4800000, 0x2, 0x10001, 0x400, 0xfffffffe, 0x7, 0x656, 0x7, 0x9, 0x3, 0x10001, 0x40, 0x5, 0x8a3, 0x9, 0x3, 0x5, 0x2, 0x97c7, 0x448, 0x3cd, 0x6, 0x8, 0xff, 0x7, 0x4, 0x6, 0x7, 0xc4, 0xab1, 0x3ff, 0x400, 0x4, 0x80, 0x3, 0x0, 0xb6b, 0x1, 0x3, 0x2, 0x9, 0x0, 0x8, 0x3, 0x3f, 0xfffffffe, 0x4, 0x8, 0x5, 0x1, 0x0, 0xeeaa, 0xffff, 0xfffffffb, 0x9, 0x6b7, 0x7, 0x80000001, 0x1000, 0x5, 0x6, 0x0, 0x4, 0x8542, 0x80000001, 0x748000, 0xfffffc00, 0x9, 0x5, 0x4, 0x57a7, 0x52b1, 0x1000, 0x1000, 0x6, 0x2, 0x9, 0x5, 0x300, 0x605f, 0xfffffff9, 0x0, 0x6, 0x3, 0x6, 0x8, 0x54, 0x23695b09, 0x1ff, 0x9, 0x101, 0x7, 0x80000000, 0x2, 0xfff, 0x5, 0xffff, 0x4c42fdca, 0x7, 0x3, 0x80000001, 0x7, 0x1ff, 0x1582, 0x6, 0x17, 0x4, 0x5, 0x1, 0x81, 0x80, 0xd410, 0x0, 0x8, 0x8a, 0x3f, 0x1, 0x2, 0x0, 0x2, 0x9, 0x5, 0x81, 0xbe, 0x800, 0x9, 0x7b2f5540, 0x200, 0x1000, 0x1f, 0xc55, 0x1c, 0x9, 0x7fffffff, 0x9, 0x7f, 0x3ff, 0xfff, 0x7, 0x3, 0xfff, 0x8, 0x4, 0x8, 0xffffffff, 0x3, 0x4, 0x200, 0x3b, 0x81, 0x4, 0x101, 0x80, 0x1, 0x41, 0x80, 0x80, 0x2, 0x1, 0x9, 0x4, 0x0, 0x10001, 0xda, 0x8, 0x9e, 0x8, 0x7, 0x6, 0x9, 0xffff, 0x0, 0x7, 0x5, 0x4, 0x8, 0x7, 0x400, 0x5518, 0xfff, 0x7, 0x9, 0x8000, 0x5, 0x2, 0x8000, 0x40, 0x7, 0x6, 0xffffffff, 0xfffffff9, 0x2, 0x800, 0x5, 0x4, 0xaec, 0x9, 0x0, 0x80000001, 0x1000, 0x5, 0x7ff, 0x1000, 0x3bf09d50, 0xfffffffc, 0x20, 0x0, 0x81, 0xd40, 0x1f, 0x80, 0x704, 0x6, 0x7, 0x10001, 0x3ff, 0xb4, 0xc4eb, 0x400, 0x3ff, 0x800, 0x40800, 0x10001, 0x7, 0x4800000, 0x8, 0x5, 0x6, 0x9, 0x9, 0x20a, 0x4, 0x8, 0x9, 0x8, 0x8, 0x2, 0x4, 0x3ff, 0x1, 0x4, 0x0, 0x5, 0x80, 0x100, 0x100, 0x1, 0x7fffffff, 0x8001, 0x6, 0xcf20, 0x7c, 0x4, 0x4, 0x9, 0x8, 0x3ec46265, 0xba0000, 0x401, 0x8, 0xfffffffc, 0x1, 0xdc, 0x800, 0x4, 0xdf7, 0x81, 0x401, 0x200, 0x7, 0xc0, 0x5a134199, 0x9a0, 0x0, 0x40, 0x1, 0x6, 0x8001, 0xa8, 0x8a69, 0x10001, 0x81, 0x6e, 0xc9b0, 0x1, 0x80000000, 0x40, 0x7, 0x8000, 0x8, 0x8001, 0x8650, 0x1000, 0xfff, 0x8000, 0x7, 0xe6a, 0x9, 0x1, 0xff, 0x4, 0x6, 0xff, 0x40100, 0x8000, 0x53c, 0x1000, 0x9, 0x8001, 0xff, 0x800, 0x8, 0xfffffff8, 0x0, 0x3, 0x100, 0x20, 0x3, 0x4, 0x80, 0xfffffffb, 0x3, 0x5, 0x0, 0x6, 0x0, 0x10001, 0xa6de, 0x5, 0x6, 0x4, 0x193c, 0x2, 0x200, 0x9, 0xffd0, 0x8001, 0x10000, 0x5, 0x4, 0xffffffff, 0x2, 0x1, 0x7ff, 0x10001, 0x10001, 0xff, 0x0, 0x4, 0x2, 0xffffff01, 0xffffffff, 0x800, 0x9, 0x8000, 0x1c00000, 0x1, 0x2, 0x4, 0x7, 0x7, 0x800, 0xd838, 0x1000, 0x8514, 0x3f, 0x7, 0x5, 0x1, 0x3ff, 0x100, 0x0, 0x400, 0x9, 0x7, 0xffffffff, 0xfffff801, 0x9, 0xffffffff, 0x4e65e0a1, 0x3, 0x8001, 0x80000000, 0x5, 0x6, 0x333b68d9, 0x7da, 0x0, 0xeb9c, 0x0, 0x3, 0x5, 0xa86, 0x7, 0x200, 0xfffffbd2, 0x0, 0x80000000, 0x3, 0x900, 0x0, 0x80, 0x1f, 0x2, 0x6, 0x7f, 0x1ff, 0x1, 0xffffffff, 0x7, 0xb6, 0x4, 0x20, 0x80000001, 0x0, 0x8, 0xffffff81, 0x7, 0x10001, 0x7, 0x8001, 0x100, 0x800, 0x0, 0x3, 0x5, 0x7fffffff, 0x2, 0x3, 0x3, 0x5, 0x3, 0xffffff81, 0x3f, 0x3, 0x8001, 0x5, 0x4, 0x80000000, 0x6, 0x7, 0x91f9, 0xb65, 0x1f, 0x1, 0x3, 0x800, 0x3ff, 0x0, 0x800, 0x1800000, 0x2, 0x1, 0xfffffb4a, 0x10001, 0x9, 0x8, 0x0, 0xefc2, 0x7, 0x1f, 0x81, 0x81, 0x4, 0x8, 0x7, 0x0, 0x5, 0x1d, 0x7fffffff, 0x95a, 0x8000, 0x671, 0x9, 0x2, 0x4, 0x10000, 0x100, 0x609, 0x10000, 0xfffffff9, 0x8001, 0x5, 0x7, 0x401, 0xfff, 0x100, 0xdaa, 0x4, 0x8, 0x7fffffff, 0x9, 0x7f, 0x8, 0x7, 0x7, 0x6, 0x6, 0x400, 0x0, 0x8, 0xffff, 0x4, 0x101, 0x3ff, 0x7f, 0x2, 0x1, 0x6, 0x4, 0x6, 0x2, 0x7, 0x8, 0x401, 0x4, 0x9cd, 0x10001, 0xff, 0x9, 0xffff, 0x2, 0x7f, 0x6, 0x3, 0x2, 0x9, 0x3, 0x80, 0xb3, 0x7fff, 0xff, 0xff, 0x1, 0x8, 0x80000000, 0x10000, 0x4, 0x8001, 0x551, 0xffffffff, 0x10001, 0x1caa, 0x40, 0x6, 0xfffffffd, 0x7, 0xac21, 0xe097, 0x1, 0x40, 0x1ff, 0x7fffffff, 0x0, 0x0, 0x1f, 0x3997, 0x7ff, 0x1000, 0x3f, 0xffff, 0xf0], 0x6, 0x400, 0x4}) (async) 20:47:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x9effffff}, 0x0) 20:47:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x4}, 0x0) 20:47:11 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x48, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) 20:47:11 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f00000000c0)={r1, 0x10000, 0x200, 0x3ee8}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xaaaab700}, 0x0) 20:47:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x8}, 0x0) 20:47:11 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept4$unix(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0xc0800) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) 20:47:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xb4090000}, 0x0) 20:47:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xe}, 0x0) [ 762.058453][T25771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.074563][T25772] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) 20:47:11 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f00000000c0)={r1, 0x10000, 0x200, 0x3ee8}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f00000000c0)={r1, 0x10000, 0x200, 0x3ee8}) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x90000) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:47:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 762.160067][ T3678] Bluetooth: hci0: command 0x040f tx timeout 20:47:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) [ 762.256668][T25787] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:12 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x49, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xfffff000}, 0x0) 20:47:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xf}, 0x0) 20:47:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x5, 0x80, 0x3, 0x0, "02d3446d9a86e949591c89d905bdde6cd5b7a5", 0x7, 0x7}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) syz_open_pts(r3, 0x400003) 20:47:12 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f00000000c0)={r1, 0x10000, 0x200, 0x3ee8}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f00000000c0)={r1, 0x10000, 0x200, 0x3ee8}) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x90000) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:47:12 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000240)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @device_a, @broadcast, {0x7, 0x9}, @broadcast}, {0x0, 0x0, 0x0, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, @device_b, @broadcast, @random="81fb6d9375e8", {0xd, 0x7}}, {0x7, 0x1, 0x3, 0x1, 0x4}}}, @ver_80211n={0x0, 0x3, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}, @random="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"}, 0x35e) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_b, @device_a, @random="60a1b59e8f33", {0x1, 0x132}}, 0x40, @default, 0x520, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x12, 0x1}, {0x1b, 0x1}]}, @void, @val={0x4, 0x6, {0x6, 0x0, 0xb0, 0xcb}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x8}}, [{0xdd, 0x15, "86ef0235102e4b5bc4a9fc1c9e48980afbd7b07363"}, {0xdd, 0x9, "f05705f62295bbd5be"}, {0xdd, 0x87, "ac9521cbf8de33c0a63c02afd66dfd53e819ab929771e33d3c23f98276a37b252c109dcb99fd97f6c20505366a72693545e23675a5285e88e05d042b21b9ee5f4a6962c68bab4eb89cb64bcaaccdf20dcdde0323bd09d1ee5e9a137d5287cf4e8d8a668fc05e3fbb1289dacf6b41f5b243b73de72ff38b17d2d4b5472face31a0e5b29eea4e938"}]}, 0xf4) 20:47:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 762.982271][T25800] Failed to get privilege flags for destination (handle=0x0:0x0) [ 762.995244][T25801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x60}, 0x0) 20:47:12 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@hyper, 0x7f}, 0x1, 0x1, 0x8}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) [ 763.029386][T25806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.058809][T25801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xffffff9e}, 0x0) 20:47:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xf0}, 0x0) 20:47:12 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@hyper, 0x7f}, 0x1, 0x1, 0x8}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@hyper, 0x7f}, 0x1, 0x1, 0x8}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) [ 763.153096][T25824] Failed to get privilege flags for destination (handle=0x0:0x0) [ 763.256075][T25830] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:13 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4a, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x300}, 0x0) 20:47:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xfffffff0}, 0x0) 20:47:13 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@hyper, 0x7f}, 0x1, 0x1, 0x8}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:13 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000240)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @device_a, @broadcast, {0x7, 0x9}, @broadcast}, {0x0, 0x0, 0x0, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, @device_b, @broadcast, @random="81fb6d9375e8", {0xd, 0x7}}, {0x7, 0x1, 0x3, 0x1, 0x4}}}, @ver_80211n={0x0, 0x3, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}, @random="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"}, 0x35e) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_b, @device_a, @random="60a1b59e8f33", {0x1, 0x132}}, 0x40, @default, 0x520, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x12, 0x1}, {0x1b, 0x1}]}, @void, @val={0x4, 0x6, {0x6, 0x0, 0xb0, 0xcb}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x8}}, [{0xdd, 0x15, "86ef0235102e4b5bc4a9fc1c9e48980afbd7b07363"}, {0xdd, 0x9, "f05705f62295bbd5be"}, {0xdd, 0x87, "ac9521cbf8de33c0a63c02afd66dfd53e819ab929771e33d3c23f98276a37b252c109dcb99fd97f6c20505366a72693545e23675a5285e88e05d042b21b9ee5f4a6962c68bab4eb89cb64bcaaccdf20dcdde0323bd09d1ee5e9a137d5287cf4e8d8a668fc05e3fbb1289dacf6b41f5b243b73de72ff38b17d2d4b5472face31a0e5b29eea4e938"}]}, 0xf4) 20:47:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x5, 0x80, 0x3, 0x0, "02d3446d9a86e949591c89d905bdde6cd5b7a5", 0x7, 0x7}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) syz_open_pts(r3, 0x400003) 20:47:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0xffffffff}, 0x0) 20:47:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x9ce}, 0x0) [ 763.888012][T25841] Failed to get privilege flags for destination (handle=0x0:0x0) [ 763.891128][T25843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.927242][T25852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:13 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) write(r2, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(r2, 0x407, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local, 0x2}) r3 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r4 = openat2(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80040, 0xb1, 0x1a}, 0x18) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) openat$proc_capi20(0xffffff9c, &(0x7f0000000100), 0x2500, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xe00}, 0x0) 20:47:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) 20:47:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xec0}, 0x0) [ 764.249750][ T14] Bluetooth: hci0: command 0x0419 tx timeout 20:47:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0) 20:47:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xf00}, 0x0) 20:47:14 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4b, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x5, 0x80, 0x3, 0x0, "02d3446d9a86e949591c89d905bdde6cd5b7a5", 0x7, 0x7}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) syz_open_pts(r3, 0x400003) 20:47:14 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000240)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @device_a, @broadcast, {0x7, 0x9}, @broadcast}, {0x0, 0x0, 0x0, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, @device_b, @broadcast, @random="81fb6d9375e8", {0xd, 0x7}}, {0x7, 0x1, 0x3, 0x1, 0x4}}}, @ver_80211n={0x0, 0x3, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}, @random="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"}, 0x35e) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_b, @device_a, @random="60a1b59e8f33", {0x1, 0x132}}, 0x40, @default, 0x520, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x12, 0x1}, {0x1b, 0x1}]}, @void, @val={0x4, 0x6, {0x6, 0x0, 0xb0, 0xcb}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x8}}, [{0xdd, 0x15, "86ef0235102e4b5bc4a9fc1c9e48980afbd7b07363"}, {0xdd, 0x9, "f05705f62295bbd5be"}, {0xdd, 0x87, "ac9521cbf8de33c0a63c02afd66dfd53e819ab929771e33d3c23f98276a37b252c109dcb99fd97f6c20505366a72693545e23675a5285e88e05d042b21b9ee5f4a6962c68bab4eb89cb64bcaaccdf20dcdde0323bd09d1ee5e9a137d5287cf4e8d8a668fc05e3fbb1289dacf6b41f5b243b73de72ff38b17d2d4b5472face31a0e5b29eea4e938"}]}, 0xf4) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000240)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @device_a, @broadcast, {0x7, 0x9}, @broadcast}, {0x0, 0x0, 0x0, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, @device_b, @broadcast, @random="81fb6d9375e8", {0xd, 0x7}}, {0x7, 0x1, 0x3, 0x1, 0x4}}}, @ver_80211n={0x0, 0x3, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1}}, @random="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"}, 0x35e) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_b, @device_a, @random="60a1b59e8f33", {0x1, 0x132}}, 0x40, @default, 0x520, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x12, 0x1}, {0x1b, 0x1}]}, @void, @val={0x4, 0x6, {0x6, 0x0, 0xb0, 0xcb}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x8}}, [{0xdd, 0x15, "86ef0235102e4b5bc4a9fc1c9e48980afbd7b07363"}, {0xdd, 0x9, "f05705f62295bbd5be"}, {0xdd, 0x87, "ac9521cbf8de33c0a63c02afd66dfd53e819ab929771e33d3c23f98276a37b252c109dcb99fd97f6c20505366a72693545e23675a5285e88e05d042b21b9ee5f4a6962c68bab4eb89cb64bcaaccdf20dcdde0323bd09d1ee5e9a137d5287cf4e8d8a668fc05e3fbb1289dacf6b41f5b243b73de72ff38b17d2d4b5472face31a0e5b29eea4e938"}]}, 0xf4) (async) [ 764.782108][T25876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x3f00}, 0x0) 20:47:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x3}, 0x0) 20:47:14 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) write(r2, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(r2, 0x407, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local, 0x2}) (async) r3 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r4 = openat2(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80040, 0xb1, 0x1a}, 0x18) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) (async) openat$proc_capi20(0xffffff9c, &(0x7f0000000100), 0x2500, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) [ 764.832946][T25879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 764.910015][T25876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.930860][T25879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x6000}, 0x0) 20:47:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 764.955556][T25876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.986448][T25887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xc00e}, 0x0) 20:47:14 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) write(r2, &(0x7f0000000100)="b1", 0x19000) fcntl$setpipe(r2, 0x407, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local, 0x2}) r3 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r4 = openat2(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80040, 0xb1, 0x1a}, 0x18) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) openat$proc_capi20(0xffffff9c, &(0x7f0000000100), 0x2500, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) pipe(&(0x7f0000000080)) (async) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) (async) write(r2, &(0x7f0000000100)="b1", 0x19000) (async) fcntl$setpipe(r2, 0x407, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local, 0x2}) (async) openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) (async) openat2(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80040, 0xb1, 0x1a}, 0x18) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) (async) openat$proc_capi20(0xffffff9c, &(0x7f0000000100), 0x2500, 0x0) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) 20:47:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0) 20:47:15 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4c, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xce09}, 0x0) 20:47:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x7}, 0x0) 20:47:15 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) fsetxattr$security_capability(r0, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x800, 0x7fffffff}, {0x3, 0x1f}], 0xee01}, 0x18, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@any, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:15 executing program 3: syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000ff00"/19], 0x2c) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @broadcast, {0xf, 0x72}, @device_b}, {0xd, 0x0, 0x2, 0x0, 0x49}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffd}, @device_b, @device_a, @initial, {0x5, 0x1c7}, @broadcast}, {0x6, 0x0, 0x3, 0x1, 0x7}}}, @a_msdu}, 0x40) 20:47:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x80000001, 0x32, 0x3, 0x2, 0xa, "cb4db287ce805a47245e251442b5717027a940"}) r1 = syz_open_pts(r0, 0x72d480) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:47:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 765.734212][T25919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.751732][T25921] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xf000}, 0x0) 20:47:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x80000001, 0x32, 0x3, 0x2, 0xa, "cb4db287ce805a47245e251442b5717027a940"}) r1 = syz_open_pts(r0, 0x72d480) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:47:15 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) fsetxattr$security_capability(r0, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x800, 0x7fffffff}, {0x3, 0x1f}], 0xee01}, 0x18, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@any, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) [ 765.812534][T25922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x34000}, 0x0) 20:47:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x80000001, 0x32, 0x3, 0x2, 0xa, "cb4db287ce805a47245e251442b5717027a940"}) r1 = syz_open_pts(r0, 0x72d480) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x80000001, 0x32, 0x3, 0x2, 0xa, "cb4db287ce805a47245e251442b5717027a940"}) (async) syz_open_pts(r0, 0x72d480) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) 20:47:16 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4d, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x9}, 0x0) 20:47:16 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) fsetxattr$security_capability(r0, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x800, 0x7fffffff}, {0x3, 0x1f}], 0xee01}, 0x18, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@any, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x400300}, 0x0) 20:47:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x431, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) openat$proc_capi20(0xffffff9c, &(0x7f0000000400), 0x7d9200, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000003c0)={0xfff, 0x8cb, 0x1f, 0x0, 0x18, "15531557b3f915090e2aab5d0ddc3e6a8d4d82"}) r1 = syz_open_pts(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) openat$sysfs(0xffffff9c, &(0x7f0000000380)='/sys/module/ppp_mppe', 0x80402, 0xa) openat$cachefiles(0xffffff9c, &(0x7f0000000440), 0x181242, 0x0) syz_open_pts(r1, 0x214880) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f00000004c0)={0x7}) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000280)=""/197, 0xc5}], 0x3, 0x7, 0x6) r6 = creat(&(0x7f0000000480)='./file0\x00', 0x80) ioctl$TIOCGPTPEER(r6, 0x5441, 0x5) 20:47:16 executing program 3: syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000ff00"/19], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @broadcast, {0xf, 0x72}, @device_b}, {0xd, 0x0, 0x2, 0x0, 0x49}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffd}, @device_b, @device_a, @initial, {0x5, 0x1c7}, @broadcast}, {0x6, 0x0, 0x3, 0x1, 0x7}}}, @a_msdu}, 0x40) 20:47:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xe}, 0x0) 20:47:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xf0ffff}, 0x0) [ 766.703799][T25954] Failed to get privilege flags for destination (handle=0x0:0x0) [ 766.730679][T25957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:16 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = openat$null(0xffffff9c, &(0x7f00000000c0), 0x202200, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x1000000}, 0x0) 20:47:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xf}, 0x0) 20:47:16 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = openat$null(0xffffff9c, &(0x7f00000000c0), 0x202200, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) openat$null(0xffffff9c, &(0x7f00000000c0), 0x202200, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) (async) [ 766.859894][T25969] Failed to get privilege flags for destination (handle=0x0:0x0) [ 766.991299][T25976] Failed to get privilege flags for destination (handle=0x0:0x0) 20:47:17 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4e, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x0) 20:47:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x2000000}, 0x0) 20:47:17 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r1 = openat$null(0xffffff9c, &(0x7f00000000c0), 0x202200, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:17 executing program 3: syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000ff00"/19], 0x2c) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @broadcast, {0xf, 0x72}, @device_b}, {0xd, 0x0, 0x2, 0x0, 0x49}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffd}, @device_b, @device_a, @initial, {0x5, 0x1c7}, @broadcast}, {0x6, 0x0, 0x3, 0x1, 0x7}}}, @a_msdu}, 0x40) syz_80211_inject_frame(&(0x7f0000000940)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000ff00"/19], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xf, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @broadcast, {0xf, 0x72}, @device_b}, {0xd, 0x0, 0x2, 0x0, 0x49}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffd}, @device_b, @device_a, @initial, {0x5, 0x1c7}, @broadcast}, {0x6, 0x0, 0x3, 0x1, 0x7}}}, @a_msdu}, 0x40) (async) 20:47:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x431, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) openat$proc_capi20(0xffffff9c, &(0x7f0000000400), 0x7d9200, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000003c0)={0xfff, 0x8cb, 0x1f, 0x0, 0x18, "15531557b3f915090e2aab5d0ddc3e6a8d4d82"}) r1 = syz_open_pts(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) openat$sysfs(0xffffff9c, &(0x7f0000000380)='/sys/module/ppp_mppe', 0x80402, 0xa) openat$cachefiles(0xffffff9c, &(0x7f0000000440), 0x181242, 0x0) syz_open_pts(r1, 0x214880) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f00000004c0)={0x7}) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000280)=""/197, 0xc5}], 0x3, 0x7, 0x6) r6 = creat(&(0x7f0000000480)='./file0\x00', 0x80) ioctl$TIOCGPTPEER(r6, 0x5441, 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x431, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) openat$proc_capi20(0xffffff9c, &(0x7f0000000400), 0x7d9200, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000003c0)={0xfff, 0x8cb, 0x1f, 0x0, 0x18, "15531557b3f915090e2aab5d0ddc3e6a8d4d82"}) (async) syz_open_pts(r0, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) openat$sysfs(0xffffff9c, &(0x7f0000000380)='/sys/module/ppp_mppe', 0x80402, 0xa) (async) openat$cachefiles(0xffffff9c, &(0x7f0000000440), 0x181242, 0x0) (async) syz_open_pts(r1, 0x214880) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) (async) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f00000004c0)={0x7}) (async) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000280)=""/197, 0xc5}], 0x3, 0x7, 0x6) (async) creat(&(0x7f0000000480)='./file0\x00', 0x80) (async) ioctl$TIOCGPTPEER(r6, 0x5441, 0x5) (async) 20:47:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 20:47:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x3000000}, 0x0) [ 767.660241][T25986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:17 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)="260fd5e29f4487e81d2e6e4713f38cbfdc9d1f1f1ec5f5cf16f7765a653cb1022db1", 0x22}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="100000002900000034000000000000005c00000029000000360000000000000000000000c20400000008000010000000290000004b00000003000000"], 0x3c}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="d2", 0x1}], 0x1, &(0x7f0000000640)}}], 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000080)=0xfffffffffffffefd) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$tun(0xffffff9c, 0x0, 0x40, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@host, 0x7}, 0x1}) [ 767.724964][T25995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.743724][T25986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.762880][T25995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x300}, 0x0) 20:47:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x4000000}, 0x0) 20:47:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x431, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) openat$proc_capi20(0xffffff9c, &(0x7f0000000400), 0x7d9200, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f00000003c0)={0xfff, 0x8cb, 0x1f, 0x0, 0x18, "15531557b3f915090e2aab5d0ddc3e6a8d4d82"}) (async) r1 = syz_open_pts(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) openat$sysfs(0xffffff9c, &(0x7f0000000380)='/sys/module/ppp_mppe', 0x80402, 0xa) (async) openat$cachefiles(0xffffff9c, &(0x7f0000000440), 0x181242, 0x0) (async) syz_open_pts(r1, 0x214880) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f00000004c0)={0x7}) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000280)=""/197, 0xc5}], 0x3, 0x7, 0x6) r6 = creat(&(0x7f0000000480)='./file0\x00', 0x80) ioctl$TIOCGPTPEER(r6, 0x5441, 0x5) [ 767.800452][T26002] Failed to get privilege flags for destination (handle=0x2:0x7) 20:47:18 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4f, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:18 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)="260fd5e29f4487e81d2e6e4713f38cbfdc9d1f1f1ec5f5cf16f7765a653cb1022db1", 0x22}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="100000002900000034000000000000005c00000029000000360000000000000000000000c20400000008000010000000290000004b00000003000000"], 0x3c}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="d2", 0x1}], 0x1, &(0x7f0000000640)}}], 0x2, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000080)=0xfffffffffffffefd) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) openat$tun(0xffffff9c, 0x0, 0x40, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@host, 0x7}, 0x1}) 20:47:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x8000000}, 0x0) 20:47:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x500}, 0x0) 20:47:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:47:18 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x4}}, 0xa) 20:47:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 768.597628][T26027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xe000000}, 0x0) 20:47:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:47:18 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)="260fd5e29f4487e81d2e6e4713f38cbfdc9d1f1f1ec5f5cf16f7765a653cb1022db1", 0x22}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="100000002900000034000000000000005c00000029000000360000000000000000000000c20400000008000010000000290000004b00000003000000"], 0x3c}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="d2", 0x1}], 0x1, &(0x7f0000000640)}}], 0x2, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000080)=0xfffffffffffffefd) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) openat$tun(0xffffff9c, 0x0, 0x40, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@host, 0x7}, 0x1}) [ 768.668849][T26034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) 20:47:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x700}, 0x0) 20:47:19 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x50, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0xf000000}, 0x0) 20:47:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r2 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x7fffffff) 20:47:19 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000140)={&(0x7f0000000300)={{@host, 0x7ff}, {@any, 0x10001}, 0x400, "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"}, 0x418, 0x20e}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x900}, 0x0) 20:47:19 executing program 3: syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000080)=ANY=[@ANYBLOB="c0000000080211000000080211000001ffffffffffff"], 0x2c) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x4}}, 0xa) 20:47:19 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) (async, rerun: 32) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000140)={&(0x7f0000000300)={{@host, 0x7ff}, {@any, 0x10001}, 0x400, "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"}, 0x418, 0x20e}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) (async, rerun: 32) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x9b4}, 0x0) 20:47:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r2 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x7fffffff) [ 769.533592][T26063] Failed to get privilege flags for destination (handle=0x0:0x0) [ 769.573351][T26064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x3f000000}, 0x0) 20:47:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 20:47:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r2 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x7fffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) (async) syz_open_pts(r0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) (async) openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) ioctl$TCSBRKP(r2, 0x5425, 0x7fffffff) (async) [ 769.828001][T26087] ptm ptm1: ldisc open failed (-12), clearing slot 1 20:47:20 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x51, 0x2, 0x0) ppoll(&(0x7f0000000380)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 20:47:20 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000140)={&(0x7f0000000300)={{@host, 0x7ff}, {@any, 0x10001}, 0x400, "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"}, 0x418, 0x20e}) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@hyper}, 0x1}) 20:47:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000007000005ffffe108000300", @ANYRES32=r3], 0x1c}, 0x1, 0x60000000}, 0x0) 20:47:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 20:47:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = memfd_secret(0x80000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000480)="17e50be5e461ca151163092b52a591db49e3e57b5c4c6af9bf6bd27232993d619153063c155739633e2ef98bf2b35345ecfceb93c3") r2 = syz_open_pts(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/35, 0x23}, {&(0x7f0000000040)=""/123, 0x7b}, {&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/33, 0x21}], 0x8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) [ 770.490196][T26102] Failed to get privilege flags for destination (handle=0x0:0x0) [ 770.556126][ T11] device hsr_slave_0 left promiscuous mode [ 770.568640][ T11] device hsr_slave_1 left promiscuous mode [ 770.585132][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.601029][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.609981][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.617646][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.628621][ T11] device bridge_slave_1 left promiscuous mode [ 770.635071][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.644532][ T11] device bridge_slave_0 left promiscuous mode [ 770.652071][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.666182][ T11] device veth1_macvtap left promiscuous mode [ 770.672304][ T11] device veth0_macvtap left promiscuous mode [ 770.678348][ T11] device veth1_vlan left promiscuous mode [ 770.684676][ T11] device veth0_vlan left promiscuous mode [ 770.795229][ T11] ------------[ cut here ]------------ [ 770.806372][ T11] WARNING: CPU: 1 PID: 11 at net/netfilter/core.c:495 __nf_unregister_net_hook+0x498/0x6d0 [ 770.816983][ T11] Modules linked in: [ 770.824919][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0 [ 770.837765][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.852384][ T11] Workqueue: netns cleanup_net [ 770.857228][ T11] RIP: 0010:__nf_unregister_net_hook+0x498/0x6d0 [ 770.863651][ T11] Code: c1 ea 03 0f b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 13 02 00 00 4c 63 6b 1c e9 4d ff ff ff e8 b8 ab f8 f9 <0f> 0b 48 c7 c7 a0 10 5f 8d e8 da 45 e1 01 e9 98 fd ff ff 48 89 f7 [ 770.883371][ T11] RSP: 0018:ffffc900001078f0 EFLAGS: 00010293 [ 770.890042][ T11] RAX: 0000000000000000 RBX: ffff8880454eab98 RCX: 0000000000000000 [ 770.898043][ T11] RDX: ffff888010e43a00 RSI: ffffffff87806fc8 RDI: 0000000000000003 [ 770.906059][ T11] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffc9000010782f [ 770.914964][ T11] R10: ffffffff87806bef R11: 0000000000000021 R12: ffff888042ba43d0 [ 770.923386][ T11] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880454eaba0 [ 770.931546][ T11] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 770.940626][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.947234][ T11] CR2: 00000000f6f395dc CR3: 000000007f67b000 CR4: 00000000003506e0 [ 770.955310][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 770.963654][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 770.973276][ T11] Call Trace: [ 770.976570][ T11] [ 770.979514][ T11] nf_unregister_net_hook+0xd5/0x110 [ 770.985231][ T11] nf_tables_flowtable_event+0x230/0x460 [ 770.991616][ T11] notifier_call_chain+0xb5/0x200 [ 770.996738][ T11] call_netdevice_notifiers_info+0xb5/0x130 [ 771.004089][ T11] unregister_netdevice_many+0x92e/0x1890 [ 771.010163][ T11] ? netdev_pick_tx+0xbe0/0xbe0 [ 771.015043][ T11] ? unregister_netdevice_many+0x1890/0x1890 [ 771.021481][ T11] ? sysfs_remove_group+0xc2/0x170 [ 771.026689][ T11] ? br_dev_delete+0x112/0x190 [ 771.031896][ T11] default_device_exit_batch+0x449/0x590 [ 771.037559][ T11] ? __dev_change_net_namespace+0x13c0/0x13c0 [ 771.043784][ T11] ? __dev_change_net_namespace+0x13c0/0x13c0 [ 771.049929][ T11] ops_exit_list+0x125/0x170 [ 771.054567][ T11] cleanup_net+0x4ea/0xb00 [ 771.058983][ T11] ? lockdep_hardirqs_on+0x79/0x100 [ 771.064237][ T11] ? unregister_pernet_device+0x70/0x70 [ 771.072179][ T11] process_one_work+0x996/0x1610 [ 771.077216][ T11] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 771.082653][ T11] ? rwlock_bug.part.0+0x90/0x90 [ 771.087608][ T11] ? _raw_spin_lock_irq+0x41/0x50 [ 771.093209][ T11] worker_thread+0x665/0x1080 [ 771.097921][ T11] ? process_one_work+0x1610/0x1610 [ 771.103220][ T11] kthread+0x2e9/0x3a0 [ 771.107300][ T11] ? kthread_complete_and_exit+0x40/0x40 [ 771.113010][ T11] ret_from_fork+0x1f/0x30 [ 771.117512][ T11] [ 771.120598][ T11] Kernel panic - not syncing: panic_on_warn set ... [ 771.127185][ T11] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 5.18.0-rc2-syzkaller-00351-ga2c29ccd9477 #0 [ 771.137239][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.147343][ T11] Workqueue: netns cleanup_net [ 771.152112][ T11] Call Trace: [ 771.155390][ T11] [ 771.158308][ T11] dump_stack_lvl+0xcd/0x134 [ 771.162903][ T11] panic+0x2d7/0x636 [ 771.166848][ T11] ? panic_print_sys_info.part.0+0x10b/0x10b [ 771.172835][ T11] ? __warn.cold+0x1d1/0x2c5 [ 771.177439][ T11] ? __nf_unregister_net_hook+0x498/0x6d0 [ 771.183170][ T11] __warn.cold+0x1e2/0x2c5 [ 771.187596][ T11] ? __nf_unregister_net_hook+0x498/0x6d0 [ 771.193321][ T11] report_bug+0x1bd/0x210 [ 771.197690][ T11] handle_bug+0x3c/0x60 [ 771.201853][ T11] exc_invalid_op+0x14/0x40 [ 771.206361][ T11] asm_exc_invalid_op+0x12/0x20 [ 771.211211][ T11] RIP: 0010:__nf_unregister_net_hook+0x498/0x6d0 [ 771.217541][ T11] Code: c1 ea 03 0f b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 13 02 00 00 4c 63 6b 1c e9 4d ff ff ff e8 b8 ab f8 f9 <0f> 0b 48 c7 c7 a0 10 5f 8d e8 da 45 e1 01 e9 98 fd ff ff 48 89 f7 [ 771.237145][ T11] RSP: 0018:ffffc900001078f0 EFLAGS: 00010293 [ 771.243228][ T11] RAX: 0000000000000000 RBX: ffff8880454eab98 RCX: 0000000000000000 [ 771.251205][ T11] RDX: ffff888010e43a00 RSI: ffffffff87806fc8 RDI: 0000000000000003 [ 771.259171][ T11] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffc9000010782f [ 771.267135][ T11] R10: ffffffff87806bef R11: 0000000000000021 R12: ffff888042ba43d0 [ 771.275102][ T11] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8880454eaba0 [ 771.283078][ T11] ? __nf_unregister_net_hook+0xbf/0x6d0 [ 771.288722][ T11] ? __nf_unregister_net_hook+0x498/0x6d0 [ 771.294465][ T11] nf_unregister_net_hook+0xd5/0x110 [ 771.299754][ T11] nf_tables_flowtable_event+0x230/0x460 [ 771.305413][ T11] notifier_call_chain+0xb5/0x200 [ 771.310484][ T11] call_netdevice_notifiers_info+0xb5/0x130 [ 771.316403][ T11] unregister_netdevice_many+0x92e/0x1890 [ 771.322141][ T11] ? netdev_pick_tx+0xbe0/0xbe0 [ 771.326994][ T11] ? unregister_netdevice_many+0x1890/0x1890 [ 771.332975][ T11] ? sysfs_remove_group+0xc2/0x170 [ 771.338181][ T11] ? br_dev_delete+0x112/0x190 [ 771.342952][ T11] default_device_exit_batch+0x449/0x590 [ 771.348591][ T11] ? __dev_change_net_namespace+0x13c0/0x13c0 [ 771.354668][ T11] ? __dev_change_net_namespace+0x13c0/0x13c0 [ 771.360738][ T11] ops_exit_list+0x125/0x170 [ 771.365331][ T11] cleanup_net+0x4ea/0xb00 [ 771.369776][ T11] ? lockdep_hardirqs_on+0x79/0x100 [ 771.374993][ T11] ? unregister_pernet_device+0x70/0x70 [ 771.380564][ T11] process_one_work+0x996/0x1610 [ 771.385527][ T11] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 771.390920][ T11] ? rwlock_bug.part.0+0x90/0x90 [ 771.395871][ T11] ? _raw_spin_lock_irq+0x41/0x50 [ 771.401010][ T11] worker_thread+0x665/0x1080 [ 771.405707][ T11] ? process_one_work+0x1610/0x1610 [ 771.410922][ T11] kthread+0x2e9/0x3a0 [ 771.415002][ T11] ? kthread_complete_and_exit+0x40/0x40 [ 771.420640][ T11] ret_from_fork+0x1f/0x30 [ 771.425082][ T11] [ 771.428534][ T11] Kernel Offset: disabled [ 771.433152][ T11] Rebooting in 86400 seconds..