}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xce, 0xce, 0xfe, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x7}}}, @state={{'state\x00', 0x0, 0x8}, {{0x3}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}]}, 0x5b8) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x48300, 0x0) (async) geteuid() (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x540, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000000000), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffd, 0x2, [{0x3, 0x10, 0x6, 'caif0\x00', 'ipvlan0\x00', 'veth1_to_hsr\x00', 'vlan0\x00', @random="a69bbacb026c", [0xff, 0xff, 0x0, 0x0, 0xff], @broadcast, [0x0, 0x0, 0x1fe, 0x0, 0x0, 0xff], 0xa6, 0xa6, 0xf6, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x7e, 0xb6, 0xc7bf}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6d4, 'syz0\x00', {0x5}}}}}, {0x3, 0x24, 0x15, 'macvtap0\x00', 'veth1\x00', 'lo\x00', 'wg1\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0x5ac1e3be95564a8c, 0xff, 0x0, 0xff], 0x9e, 0xd6, 0x10e, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0xf800000, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xffffffffffffffff}}}], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x9, 0x0, 0xf6, 'veth0_to_batadv\x00', 'wlan1\x00', 'vcan0\x00', 'vlan0\x00', @random="9a4a579d94a7", [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0xadfe3294b333bbe8, 0x0, 0x0, 0xff, 0xff, 0xff], 0x10e, 0x15e, 0x1ae, [@stp={{'stp\x00', 0x0, 0x48}, {{0x95, {0x0, 0x400, 0xd4, @multicast, [0x0, 0xff, 0xff, 0xff], 0x6, 0x8, 0x1, 0x2, @empty, [0x0, 0xff, 0xff], 0x4e24, 0x4e21, 0x3, 0xff, 0x7, 0x825, 0x8, 0x40, 0x7fff, 0x1000}, 0x800, 0x200}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0xab4, 0x1}}}], [@common=@log={'log\x00', 0x28, {{0x20, "cc98895530929769ee7cefec04d63d939c0333def86fd42b71f0afbe168d", 0x4}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xff, 'syz0\x00', {0x1}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x11, 0x0, 0x88be, 'batadv_slave_0\x00', 'netpci0\x00', 'syz_tun\x00', 'bridge0\x00', @empty, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xce, 0xce, 0xfe, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x7}}}, @state={{'state\x00', 0x0, 0x8}, {{0x3}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}]}, 0x5b8) (async) 20:37:31 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000280)=&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000340)=0x18) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async, rerun: 32) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="050029d6b13f926c30bfb429fee3112af7890000000000054e13f1c1"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000) (rerun: 32) 20:37:31 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) 20:37:31 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x96c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0xe6, 0x116, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9e4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:31 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0801, 0x0) 20:37:31 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x3a1}, 0x8) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) [ 1414.777459][T16429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:31 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 20:37:31 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) 20:37:31 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0801, 0x0) 20:37:31 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 20:37:31 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x96c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0xe6, 0x116, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9e4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) 20:37:31 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x3a1}, 0x8) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 20:37:31 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async, rerun: 64) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (rerun: 64) 20:37:31 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) 20:37:31 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0801, 0x0) 20:37:31 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x96c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0xe6, 0x116, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9e4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1415.112820][ T22] Bluetooth: hci3: command 0x0419 tx timeout 20:37:32 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:32 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x3a1}, 0x8) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x3a1}, 0x8) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) (async) 20:37:32 executing program 5: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2001800, 0x0) 20:37:32 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x6, {{0x2, 0x4e21, @loopback}}, 0x0, 0x6, [{{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x390) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1) [ 1415.212211][T16472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:32 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) 20:37:32 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) 20:37:32 executing program 5: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2001800, 0x0) 20:37:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x99b) socketpair(0x28, 0x80000, 0xf5a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r0, r2, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) 20:37:32 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x6, {{0x2, 0x4e21, @loopback}}, 0x0, 0x6, [{{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x390) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1) 20:37:32 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) 20:37:32 executing program 5: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2001800, 0x0) 20:37:32 executing program 3: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 20:37:32 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:32 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) (async) 20:37:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x4, 0x7, 0x10000, 0x6eb}) r2 = pidfd_getfd(r0, r0, 0x0) pidfd_getfd(r2, r1, 0x0) r3 = accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000040)={0x2c, @rand_addr=0x64010102, 0x4c20, 0x4, 'ovf\x00', 0x8c45c1ba28a7cef9, 0x717, 0x2c}, 0x2c) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20000, 0x0) 20:37:32 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x6, {{0x2, 0x4e21, @loopback}}, 0x0, 0x6, [{{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x390) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1) 20:37:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x99b) socketpair(0x28, 0x80000, 0xf5a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r0, r2, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) [ 1415.567090][T16512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:32 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x4053, 0x0) 20:37:32 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x96c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0xe6, 0x116, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9e4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x99b) socketpair(0x28, 0x80000, 0xf5a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r0, r2, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x99b) (async) socketpair(0x28, 0x80000, 0xf5a, &(0x7f0000000000)) (async) pidfd_getfd(r0, r2, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async) 20:37:32 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 20:37:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x4, 0x7, 0x10000, 0x6eb}) r2 = pidfd_getfd(r0, r0, 0x0) pidfd_getfd(r2, r1, 0x0) r3 = accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000040)={0x2c, @rand_addr=0x64010102, 0x4c20, 0x4, 'ovf\x00', 0x8c45c1ba28a7cef9, 0x717, 0x2c}, 0x2c) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20000, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x4, 0x7, 0x10000, 0x6eb}) (async) pidfd_getfd(r0, r0, 0x0) (async) pidfd_getfd(r2, r1, 0x0) (async) accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) (async) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000040)={0x2c, @rand_addr=0x64010102, 0x4c20, 0x4, 'ovf\x00', 0x8c45c1ba28a7cef9, 0x717, 0x2c}, 0x2c) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) 20:37:32 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x4053, 0x0) 20:37:32 executing program 3: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 20:37:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x4, 0x7, 0x10000, 0x6eb}) r2 = pidfd_getfd(r0, r0, 0x0) pidfd_getfd(r2, r1, 0x0) r3 = accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000040)={0x2c, @rand_addr=0x64010102, 0x4c20, 0x4, 'ovf\x00', 0x8c45c1ba28a7cef9, 0x717, 0x2c}, 0x2c) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20000, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x4, 0x7, 0x10000, 0x6eb}) (async) pidfd_getfd(r0, r0, 0x0) (async) pidfd_getfd(r2, r1, 0x0) (async) accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) (async) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000040)={0x2c, @rand_addr=0x64010102, 0x4c20, 0x4, 'ovf\x00', 0x8c45c1ba28a7cef9, 0x717, 0x2c}, 0x2c) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) 20:37:32 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x96c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0xe6, 0x116, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9e4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:32 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x56eda523397f4473, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) mount$binderfs(&(0x7f0000000100), &(0x7f0000000140)='./binderfs2\x00', &(0x7f0000000180), 0x220080, &(0x7f0000000240)={[{@max={'max', 0x3d, 0x4}}, {@stats}, {@max={'max', 0x3d, 0x800}}, {@max={'max', 0x3d, 0x7}}, {@stats}, {@max={'max', 0x3d, 0x2}}, {}], [{@audit}]}) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/206, 0xce, 0x0, 0x0, 0x0) 20:37:32 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 20:37:32 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x4053, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x4053, 0x0) (async) 20:37:32 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x96c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0xe6, 0x116, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9e4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:32 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 20:37:32 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x56eda523397f4473, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) mount$binderfs(&(0x7f0000000100), &(0x7f0000000140)='./binderfs2\x00', &(0x7f0000000180), 0x220080, &(0x7f0000000240)={[{@max={'max', 0x3d, 0x4}}, {@stats}, {@max={'max', 0x3d, 0x800}}, {@max={'max', 0x3d, 0x7}}, {@stats}, {@max={'max', 0x3d, 0x2}}, {}], [{@audit}]}) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) (rerun: 32) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/206, 0xce, 0x0, 0x0, 0x0) 20:37:32 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, 0x0) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x8, 0x1, 0x3, 0x70, 0x111, r3, 0x10001, '\x00', r1, r4, 0x0, 0x4}, 0x48) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x40, 0x2, 0x6a}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$phonet_pipe(r2, &(0x7f0000000140)={0x23, 0x96, 0x8, 0x7}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x1, 0x6, 0x1f}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440), 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80800) r5 = socket(0x22, 0x4, 0x10000) r6 = accept$phonet_pipe(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x10) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000280)=0x5, 0x4) connect$phonet_pipe(r5, &(0x7f0000000180)={0x23, 0x4, 0x6, 0x5}, 0x10) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) [ 1415.971496][T16562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:32 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x1a01021, &(0x7f00000000c0)={[{@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x7}}, {@stats}, {@stats}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '$'}}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs\x00'}}]}) 20:37:32 executing program 4: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x1200342, 0x0) 20:37:33 executing program 3: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 20:37:33 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:33 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, 0x0) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x8, 0x1, 0x3, 0x70, 0x111, r3, 0x10001, '\x00', r1, r4, 0x0, 0x4}, 0x48) (async) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x40, 0x2, 0x6a}, 0x10) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) connect$phonet_pipe(r2, &(0x7f0000000140)={0x23, 0x96, 0x8, 0x7}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x1, 0x6, 0x1f}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440), 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80800) (async) r5 = socket(0x22, 0x4, 0x10000) (async) r6 = accept$phonet_pipe(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x10) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000280)=0x5, 0x4) connect$phonet_pipe(r5, &(0x7f0000000180)={0x23, 0x4, 0x6, 0x5}, 0x10) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) 20:37:33 executing program 4: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x1200342, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x1200342, 0x0) (async) 20:37:33 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x56eda523397f4473, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) mount$binderfs(&(0x7f0000000100), &(0x7f0000000140)='./binderfs2\x00', &(0x7f0000000180), 0x220080, &(0x7f0000000240)={[{@max={'max', 0x3d, 0x4}}, {@stats}, {@max={'max', 0x3d, 0x800}}, {@max={'max', 0x3d, 0x7}}, {@stats}, {@max={'max', 0x3d, 0x2}}, {}], [{@audit}]}) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/206, 0xce, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x56eda523397f4473, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) mount$binderfs(&(0x7f0000000100), &(0x7f0000000140)='./binderfs2\x00', &(0x7f0000000180), 0x220080, &(0x7f0000000240)={[{@max={'max', 0x3d, 0x4}}, {@stats}, {@max={'max', 0x3d, 0x800}}, {@max={'max', 0x3d, 0x7}}, {@stats}, {@max={'max', 0x3d, 0x2}}, {}], [{@audit}]}) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) (async) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/206, 0xce, 0x0, 0x0, 0x0) (async) 20:37:33 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x1a01021, &(0x7f00000000c0)={[{@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x7}}, {@stats}, {@stats}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '$'}}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs\x00'}}]}) 20:37:33 executing program 4: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x1200342, 0x0) 20:37:33 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:33 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x1a01021, &(0x7f00000000c0)={[{@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x7}}, {@stats}, {@stats}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '$'}}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs\x00'}}]}) 20:37:33 executing program 2: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000482", @ANYRES16=0x0, @ANYBLOB="020028bd7000fcdbdf250b008c000008003200aa9c0000050033000100000008002b000000000008a63c000900000005002f000000000005006a2adb1b6235be8c35007f00000008000b0000000000c66fd1dce9f4faccbd564dbf8da318b5588ac050d0b508622e1b4cad324c7422be40736cbd25c924afe4dac90f6f27f54a0197"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xce}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd68f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5f3a}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x1) 20:37:33 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, 0x0) (async, rerun: 64) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (rerun: 64) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x8, 0x1, 0x3, 0x70, 0x111, r3, 0x10001, '\x00', r1, r4, 0x0, 0x4}, 0x48) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x40, 0x2, 0x6a}, 0x10) (async, rerun: 32) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (rerun: 32) connect$phonet_pipe(r2, &(0x7f0000000140)={0x23, 0x96, 0x8, 0x7}, 0x10) (async) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x1, 0x6, 0x1f}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440), 0x0) (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80800) r5 = socket(0x22, 0x4, 0x10000) (async) r6 = accept$phonet_pipe(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x10) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000280)=0x5, 0x4) connect$phonet_pipe(r5, &(0x7f0000000180)={0x23, 0x4, 0x6, 0x5}, 0x10) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) [ 1416.386845][T16605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:33 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = geteuid() mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000100), 0x1015, &(0x7f0000000140)={[{@max={'max', 0x3d, 0x4}}, {@stats}], [{@smackfsdef={'smackfsdef', 0x3d, './binderfs\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) mount$binderfs(&(0x7f00000001c0), &(0x7f0000000240)='./binderfs2\x00', &(0x7f0000000280), 0x2c408, &(0x7f00000002c0)={[{@stats}, {@max={'max', 0x3d, 0xff}}, {@max={'max', 0x3d, 0x6}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsdef={'smackfsdef', 0x3d, 'fscontext'}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_hash}, {@context={'context', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, './binderfs2\x00'}}]}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) geteuid() socket$inet_smc(0x2b, 0x1, 0x0) 20:37:33 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:33 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) r0 = geteuid() mount$binderfs(&(0x7f0000000140), &(0x7f0000000180)='./binderfs\x00', &(0x7f00000001c0), 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB='stats=global,max=00000000000017777777777,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000001,max=00000000000000000000004,stats=global,fowner>', @ANYRESDEC, @ANYBLOB=',fsuuid=4Facf2e7-f581-16e0-W84f-14740e78,euid>', @ANYRESDEC=r0, @ANYBLOB="2c61707072613b204cb0409d4ee23d696d617369672c6170707261697365dd6673636f6e746578743d73797374656d5f752c646f6e745f61707072616965636c611e9f1c6300ced169fd7d07cb5a27c18a6f14d162656c2c0000000000"]) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={[{@stats}], [{@subj_type={'subj_type', 0x3d, '@@.'}}, {@subj_type={'subj_type', 0x3d, './binderfs\x00'}}, {@dont_appraise}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, './binderfs\x00'}}, {@uid_gt={'uid>', 0xee01}}]}) 20:37:33 executing program 5: getpriority(0x2, 0xffffffffffffffff) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)={[{@stats}, {@stats}], [{@permit_directio}, {@subj_role={'subj_role', 0x3d, '{'}}, {@obj_user}, {@permit_directio}]}) 20:37:33 executing program 2: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000482", @ANYRES16=0x0, @ANYBLOB="020028bd7000fcdbdf250b008c000008003200aa9c0000050033000100000008002b000000000008a63c000900000005002f000000000005006a2adb1b6235be8c35007f00000008000b0000000000c66fd1dce9f4faccbd564dbf8da318b5588ac050d0b508622e1b4cad324c7422be40736cbd25c924afe4dac90f6f27f54a0197"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xce}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd68f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5f3a}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x1) 20:37:33 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x7, 0x6db1}, 0x0) r0 = gettid() r1 = gettid() r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0x6, &(0x7f0000000140)='\xff\xff\xff\xff\xff\xff'}, 0x30) sched_getparam(r0, &(0x7f00000000c0)) prlimit64(r0, 0x2, &(0x7f0000000080)={0x1f, 0xf062}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x486) 20:37:33 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = geteuid() mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000100), 0x1015, &(0x7f0000000140)={[{@max={'max', 0x3d, 0x4}}, {@stats}], [{@smackfsdef={'smackfsdef', 0x3d, './binderfs\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) mount$binderfs(&(0x7f00000001c0), &(0x7f0000000240)='./binderfs2\x00', &(0x7f0000000280), 0x2c408, &(0x7f00000002c0)={[{@stats}, {@max={'max', 0x3d, 0xff}}, {@max={'max', 0x3d, 0x6}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsdef={'smackfsdef', 0x3d, 'fscontext'}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_hash}, {@context={'context', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, './binderfs2\x00'}}]}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) geteuid() socket$inet_smc(0x2b, 0x1, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) geteuid() (async) mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000100), 0x1015, &(0x7f0000000140)={[{@max={'max', 0x3d, 0x4}}, {@stats}], [{@smackfsdef={'smackfsdef', 0x3d, './binderfs\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) (async) mount$binderfs(&(0x7f00000001c0), &(0x7f0000000240)='./binderfs2\x00', &(0x7f0000000280), 0x2c408, &(0x7f00000002c0)={[{@stats}, {@max={'max', 0x3d, 0xff}}, {@max={'max', 0x3d, 0x6}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsdef={'smackfsdef', 0x3d, 'fscontext'}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_hash}, {@context={'context', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, './binderfs2\x00'}}]}) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) (async) geteuid() (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) 20:37:33 executing program 2: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000482", @ANYRES16=0x0, @ANYBLOB="020028bd7000fcdbdf250b008c000008003200aa9c0000050033000100000008002b000000000008a63c000900000005002f000000000005006a2adb1b6235be8c35007f00000008000b0000000000c66fd1dce9f4faccbd564dbf8da318b5588ac050d0b508622e1b4cad324c7422be40736cbd25c924afe4dac90f6f27f54a0197"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xce}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd68f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5f3a}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000482", @ANYRES16=0x0, @ANYBLOB="020028bd7000fcdbdf250b008c000008003200aa9c0000050033000100000008002b000000000008a63c000900000005002f000000000005006a2adb1b6235be8c35007f00000008000b0000000000c66fd1dce9f4faccbd564dbf8da318b5588ac050d0b508622e1b4cad324c7422be40736cbd25c924afe4dac90f6f27f54a0197"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xce}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd68f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5f3a}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) 20:37:33 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:33 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) r1 = geteuid() mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000100), 0x1015, &(0x7f0000000140)={[{@max={'max', 0x3d, 0x4}}, {@stats}], [{@smackfsdef={'smackfsdef', 0x3d, './binderfs\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) (async) mount$binderfs(&(0x7f00000001c0), &(0x7f0000000240)='./binderfs2\x00', &(0x7f0000000280), 0x2c408, &(0x7f00000002c0)={[{@stats}, {@max={'max', 0x3d, 0xff}}, {@max={'max', 0x3d, 0x6}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsdef={'smackfsdef', 0x3d, 'fscontext'}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_hash}, {@context={'context', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, './binderfs2\x00'}}]}) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) geteuid() (async) socket$inet_smc(0x2b, 0x1, 0x0) [ 1416.818948][T16629] binder: Unknown parameter 'permit_directio' [ 1416.829522][T16627] binder: Bad value for 'max' [ 1416.843418][T16627] binder: Unknown parameter 'subj_type' 20:37:33 executing program 5: getpriority(0x2, 0xffffffffffffffff) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)={[{@stats}, {@stats}], [{@permit_directio}, {@subj_role={'subj_role', 0x3d, '{'}}, {@obj_user}, {@permit_directio}]}) 20:37:33 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) r0 = geteuid() mount$binderfs(&(0x7f0000000140), &(0x7f0000000180)='./binderfs\x00', &(0x7f00000001c0), 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB='stats=global,max=00000000000017777777777,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000001,max=00000000000000000000004,stats=global,fowner>', @ANYRESDEC, @ANYBLOB=',fsuuid=4Facf2e7-f581-16e0-W84f-14740e78,euid>', @ANYRESDEC=r0, @ANYBLOB="2c61707072613b204cb0409d4ee23d696d617369672c6170707261697365dd6673636f6e746578743d73797374656d5f752c646f6e745f61707072616965636c611e9f1c6300ced169fd7d07cb5a27c18a6f14d162656c2c0000000000"]) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={[{@stats}], [{@subj_type={'subj_type', 0x3d, '@@.'}}, {@subj_type={'subj_type', 0x3d, './binderfs\x00'}}, {@dont_appraise}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, './binderfs\x00'}}, {@uid_gt={'uid>', 0xee01}}]}) [ 1416.883916][T16639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:33 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:33 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x15, 0x8, 0x70bd29, 0x25dfdbff, {0x6, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "7c6c9a31503cf04e402a73d691cf023f626ebfb2ec823253ae0b795d7e073b83f01bc84fdf9d7cbd245ca8662c2e25fb801812e9a5073a10cd"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "5e4d72e0522244a9f842e214bd003a5516abf949a1b9bccb9721e28999633e297b336d4d7379b362d93c7aa82ac79b54c0168c9a56cda10008ff4153d4f6d9b5f604514490c58595d1134f9bc6fe31b38eca1d4c87be4c58f7a473204ead9ca2d304f94b76fb6c89216e239ec6be"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 1416.950253][T16639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.992236][T16651] binder: Unknown parameter 'permit_directio' [ 1416.999155][T16652] binder: Bad value for 'max' 20:37:33 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x802f, 0x0) 20:37:33 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x15, 0x8, 0x70bd29, 0x25dfdbff, {0x6, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "7c6c9a31503cf04e402a73d691cf023f626ebfb2ec823253ae0b795d7e073b83f01bc84fdf9d7cbd245ca8662c2e25fb801812e9a5073a10cd"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "5e4d72e0522244a9f842e214bd003a5516abf949a1b9bccb9721e28999633e297b336d4d7379b362d93c7aa82ac79b54c0168c9a56cda10008ff4153d4f6d9b5f604514490c58595d1134f9bc6fe31b38eca1d4c87be4c58f7a473204ead9ca2d304f94b76fb6c89216e239ec6be"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x15, 0x8, 0x70bd29, 0x25dfdbff, {0x6, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "7c6c9a31503cf04e402a73d691cf023f626ebfb2ec823253ae0b795d7e073b83f01bc84fdf9d7cbd245ca8662c2e25fb801812e9a5073a10cd"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "5e4d72e0522244a9f842e214bd003a5516abf949a1b9bccb9721e28999633e297b336d4d7379b362d93c7aa82ac79b54c0168c9a56cda10008ff4153d4f6d9b5f604514490c58595d1134f9bc6fe31b38eca1d4c87be4c58f7a473204ead9ca2d304f94b76fb6c89216e239ec6be"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) 20:37:33 executing program 5: getpriority(0x2, 0xffffffffffffffff) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)={[{@stats}, {@stats}], [{@permit_directio}, {@subj_role={'subj_role', 0x3d, '{'}}, {@obj_user}, {@permit_directio}]}) [ 1417.041287][T16650] binder: Unknown parameter 'subj_type' [ 1417.163424][T16666] binder: Unknown parameter 'permit_directio' 20:37:34 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x7, 0x6db1}, 0x0) (async) r0 = gettid() (async) r1 = gettid() (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0x6, &(0x7f0000000140)='\xff\xff\xff\xff\xff\xff'}, 0x30) (async) sched_getparam(r0, &(0x7f00000000c0)) prlimit64(r0, 0x2, &(0x7f0000000080)={0x1f, 0xf062}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x486) 20:37:34 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) r0 = geteuid() mount$binderfs(&(0x7f0000000140), &(0x7f0000000180)='./binderfs\x00', &(0x7f00000001c0), 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB='stats=global,max=00000000000017777777777,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000001,max=00000000000000000000004,stats=global,fowner>', @ANYRESDEC, @ANYBLOB=',fsuuid=4Facf2e7-f581-16e0-W84f-14740e78,euid>', @ANYRESDEC=r0, @ANYBLOB="2c61707072613b204cb0409d4ee23d696d617369672c6170707261697365dd6673636f6e746578743d73797374656d5f752c646f6e745f61707072616965636c611e9f1c6300ced169fd7d07cb5a27c18a6f14d162656c2c0000000000"]) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x8, &(0x7f00000000c0)={[{@stats}], [{@subj_type={'subj_type', 0x3d, '@@.'}}, {@subj_type={'subj_type', 0x3d, './binderfs\x00'}}, {@dont_appraise}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, './binderfs\x00'}}, {@uid_gt={'uid>', 0xee01}}]}) 20:37:34 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:34 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async, rerun: 32) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x802f, 0x0) (rerun: 32) 20:37:34 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x15, 0x8, 0x70bd29, 0x25dfdbff, {0x6, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "7c6c9a31503cf04e402a73d691cf023f626ebfb2ec823253ae0b795d7e073b83f01bc84fdf9d7cbd245ca8662c2e25fb801812e9a5073a10cd"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "5e4d72e0522244a9f842e214bd003a5516abf949a1b9bccb9721e28999633e297b336d4d7379b362d93c7aa82ac79b54c0168c9a56cda10008ff4153d4f6d9b5f604514490c58595d1134f9bc6fe31b38eca1d4c87be4c58f7a473204ead9ca2d304f94b76fb6c89216e239ec6be"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x15, 0x8, 0x70bd29, 0x25dfdbff, {0x6, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "7c6c9a31503cf04e402a73d691cf023f626ebfb2ec823253ae0b795d7e073b83f01bc84fdf9d7cbd245ca8662c2e25fb801812e9a5073a10cd"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "5e4d72e0522244a9f842e214bd003a5516abf949a1b9bccb9721e28999633e297b336d4d7379b362d93c7aa82ac79b54c0168c9a56cda10008ff4153d4f6d9b5f604514490c58595d1134f9bc6fe31b38eca1d4c87be4c58f7a473204ead9ca2d304f94b76fb6c89216e239ec6be"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) 20:37:34 executing program 5: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20000, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x5) [ 1417.349115][T16675] binder: Bad value for 'max' 20:37:34 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x83e, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x8b6) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:34 executing program 2: clock_gettime(0x6, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) 20:37:34 executing program 5: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20000, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x5) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x5) (async) 20:37:34 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) munlockall() 20:37:34 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x802f, 0x0) [ 1417.374238][T16675] binder: Unknown parameter 'subj_type' [ 1417.380048][T16680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:34 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x7, 0x6db1}, 0x0) r0 = gettid() r1 = gettid() r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0x6, &(0x7f0000000140)='\xff\xff\xff\xff\xff\xff'}, 0x30) sched_getparam(r0, &(0x7f00000000c0)) prlimit64(r0, 0x2, &(0x7f0000000080)={0x1f, 0xf062}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x486) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) prlimit64(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x7, 0x6db1}, 0x0) (async) gettid() (async) gettid() (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r2, 0x0, 0x6, &(0x7f0000000140)='\xff\xff\xff\xff\xff\xff'}, 0x30) (async) sched_getparam(r0, &(0x7f00000000c0)) (async) prlimit64(r0, 0x2, &(0x7f0000000080)={0x1f, 0xf062}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x486) (async) 20:37:34 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x83e, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x8b6) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:34 executing program 2: clock_gettime(0x6, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) clock_gettime(0x6, &(0x7f0000000100)) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async) 20:37:34 executing program 5: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20000, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x5) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x5) (async) 20:37:34 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 20:37:34 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) munlockall() 20:37:34 executing program 2: clock_gettime(0x6, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) [ 1417.558132][T16699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:34 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x83e, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x8b6) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:34 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x3ff) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) r1 = socket(0x2a, 0x4, 0x401) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2}) 20:37:34 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 32) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 20:37:34 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) munlockall() 20:37:34 executing program 2: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x44000, 0x0) [ 1417.670836][T16709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1418.545297][ T3868] device hsr_slave_0 left promiscuous mode [ 1418.551656][ T3868] device hsr_slave_1 left promiscuous mode [ 1418.558644][ T3868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1418.568652][ T3868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1418.578046][ T3868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.586054][ T3868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.594675][ T3868] device bridge_slave_1 left promiscuous mode [ 1418.600833][ T3868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.610012][ T3868] device bridge_slave_0 left promiscuous mode [ 1418.616610][ T3868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.628666][ T3868] device veth1_macvtap left promiscuous mode [ 1418.634818][ T3868] device veth0_macvtap left promiscuous mode [ 1418.640878][ T3868] device veth1_vlan left promiscuous mode [ 1418.648174][ T3868] device veth0_vlan left promiscuous mode [ 1418.819782][ T3868] team0 (unregistering): Port device team_slave_1 removed [ 1418.836805][ T3868] team0 (unregistering): Port device team_slave_0 removed [ 1418.854073][ T3868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.873807][ T3868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.940648][ T3868] bond0 (unregistering): Released all slaves [ 1422.322747][ T3616] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1422.794497][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.800815][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.722722][ T3616] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1429.145471][ T3624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1429.154795][ T3624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1429.162352][ T3624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1429.170237][ T3624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1429.177852][ T3624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1429.186324][ T3624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1429.278264][T16732] chnl_net:caif_netlink_parms(): no params data found [ 1429.325950][T16732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.333139][T16732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.340878][T16732] device bridge_slave_0 entered promiscuous mode [ 1429.350076][T16732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.358353][T16732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.368746][T16732] device bridge_slave_1 entered promiscuous mode [ 1429.393503][T16732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.406309][T16732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.431221][T16732] team0: Port device team_slave_0 added [ 1429.439765][T16732] team0: Port device team_slave_1 added [ 1429.461655][T16732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.469213][T16732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1429.497611][T16732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1429.511355][T16732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1429.518378][T16732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1429.544318][T16732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1429.575521][T16732] device hsr_slave_0 entered promiscuous mode [ 1429.582274][T16732] device hsr_slave_1 entered promiscuous mode [ 1429.592333][T16732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1429.600276][T16732] Cannot create hsr debugfs directory [ 1429.678463][T16732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.685595][T16732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.693031][T16732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.700102][T16732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.751379][T16732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.769672][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1429.778124][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.786513][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.795169][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1429.811570][T16732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.822219][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1429.830664][ T6396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.837854][ T6396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.857825][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1429.866344][T12321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.873475][T12321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.896091][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1429.904676][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1429.920352][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1429.935508][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1429.943781][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1429.954470][T16732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1429.977144][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1429.985222][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1429.997856][T16732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.243141][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1430.258895][T16732] device veth0_vlan entered promiscuous mode [ 1430.269081][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1430.278465][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1430.287558][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1430.302313][T16732] device veth1_vlan entered promiscuous mode [ 1430.327668][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1430.336460][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1430.348721][T16732] device veth0_macvtap entered promiscuous mode [ 1430.359483][T16732] device veth1_macvtap entered promiscuous mode [ 1430.375507][T16732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1430.386077][T16732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.396890][T16732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1430.410275][T16732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.422815][T16732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1430.433302][T16732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.443279][T16732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1430.453753][T16732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.463711][T16732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1430.474720][T16732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.486205][T16732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.495659][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1430.507587][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1430.515916][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1430.525606][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1430.536985][T16732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1430.547974][T16732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.558096][T16732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1430.573566][T16732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.583428][T16732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1430.593873][T16732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.603737][T16732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1430.614168][T16732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.624112][T16732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1430.635557][T16732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.646537][T16732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1430.659995][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1430.668982][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1430.734106][ T3706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.742703][ T3706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.760182][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1430.777068][ T3706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.789402][ T3706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.800523][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1430.836456][T16750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1431.545538][ T54] device hsr_slave_0 left promiscuous mode [ 1431.552419][ T54] device hsr_slave_1 left promiscuous mode [ 1431.559809][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1431.570723][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.580493][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.590901][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.605628][ T54] device bridge_slave_1 left promiscuous mode [ 1431.611860][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.620363][ T54] device bridge_slave_0 left promiscuous mode [ 1431.626962][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.638073][ T54] device veth1_macvtap left promiscuous mode [ 1431.644430][ T54] device veth0_macvtap left promiscuous mode [ 1431.651265][ T54] device veth1_vlan left promiscuous mode [ 1431.657582][ T54] device veth0_vlan left promiscuous mode [ 1431.832238][ T54] team0 (unregistering): Port device team_slave_1 removed [ 1431.851097][ T54] team0 (unregistering): Port device team_slave_0 removed [ 1431.866910][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.880001][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.943788][ T54] bond0 (unregistering): Released all slaves [ 1435.352695][ T3616] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1437.610002][ T3624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1437.619231][ T3624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1437.627182][ T3624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1437.634826][ T3624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1437.642085][ T3624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1437.649654][ T3624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1437.737929][T16755] chnl_net:caif_netlink_parms(): no params data found [ 1437.783181][T16755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.790315][T16755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.799185][T16755] device bridge_slave_0 entered promiscuous mode [ 1437.807470][T16755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.816310][T16755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.824862][T16755] device bridge_slave_1 entered promiscuous mode [ 1437.855757][T16755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.867826][T16755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.894746][T16755] team0: Port device team_slave_0 added [ 1437.903969][T16755] team0: Port device team_slave_1 added [ 1437.924277][T16755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.931302][T16755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1437.961078][T16755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.973872][T16755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.980823][T16755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.007833][T16755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.036785][T16755] device hsr_slave_0 entered promiscuous mode [ 1438.043714][T16755] device hsr_slave_1 entered promiscuous mode [ 1438.050277][T16755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1438.062255][T16755] Cannot create hsr debugfs directory [ 1438.139074][T16755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.146181][T16755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1438.153593][T16755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.160669][T16755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.213639][T16755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.230826][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1438.240987][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.249316][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.257495][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1438.271957][T16755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.285110][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1438.293530][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.300574][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.313875][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1438.322388][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.329519][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1438.352660][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1438.362377][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1438.380792][T16755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1438.396953][T16755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1438.410465][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1438.419157][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1438.430667][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1438.439632][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1438.462968][T16755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1438.470964][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1438.478579][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1438.705299][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1438.722142][T16755] device veth0_vlan entered promiscuous mode [ 1438.732181][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1438.741823][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1438.749903][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1438.762076][T16755] device veth1_vlan entered promiscuous mode [ 1438.782780][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1438.791348][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1438.808101][T16755] device veth0_macvtap entered promiscuous mode [ 1438.817279][T16755] device veth1_macvtap entered promiscuous mode [ 1438.832053][T16755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1438.844602][T16755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.855550][T16755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1438.866503][T16755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.884583][T16755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1438.895418][T16755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.905508][T16755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1438.916333][T16755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.927226][T16755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1438.938710][T16755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1438.949873][T16755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.960733][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1438.969173][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1438.978608][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1438.987418][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1438.999096][T16755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1439.010015][T16755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.019931][T16755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1439.032457][T16755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.042661][T16755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1439.053212][T16755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.063409][T16755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1439.075489][T16755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.085349][T16755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1439.095823][T16755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1439.107111][T16755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1439.116965][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1439.126709][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1439.189711][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.209908][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.221688][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1439.237926][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.248220][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.258336][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 20:37:56 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x30d00, 0x0) pidfd_getfd(r1, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'wlan0\x00', 0x2000}, 0x18) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000001c0)=0x7) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="000005c2ed2ac76c9842f9f397756035b0d6883b", @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25110000000a0009aaaaaaaabb000005002e00090000001fa3509f7746291f20a50b1e23f151d4964128b89319507ced7607c3e460d17ccf1c88e17b2cac2f8934c3935a0e07dccdc21e8076ca7c99b2fd264d2484f19b8e06266d7e209c2de46fef9ae1e9caf9c74f93da36cb9bb13abe850c43e74774eb4a616b04430e7cdf97b8fc8ea6104a8cf501d9688b48c25bda3ef426a67f4152142a94805d79da5627ccf022d12d5261bf50dc535084506cbd8aaa8840f380e523850aadf1c828247ee6357c923c36b4efbc39f1abe0c46a45c0993d3f9dfa4bb97619bd80ef1fbc0b8184469573601e92a6b569a5455751cb55eba101fd07c46f47349cab8c0449c496fb04ecfd0f0fa33a734e488f3804cef6cad6e30e611c5644fddf939cf4d2eb6f0469372f546af51be705dc89269ce1716091daa3ca35a19ec50db13e42e637c37fcdb4369537e853fa723905c6b0ffee2aa5b96d91de20a9fddf5a58d1796a4aafa37fd2"], 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) 20:37:56 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 20:37:56 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x3ff) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) r1 = socket(0x2a, 0x4, 0x401) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2}) 20:37:56 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x804, 0x0) 20:37:56 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x0, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:56 executing program 2: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x44000, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x44000, 0x0) (async) [ 1439.287945][T16774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.300246][T16774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.310726][T16773] mmap: syz-executor.3 (16773): VmData 37515264 exceed data ulimit 31. Update limits or use boot option ignore_rlimit_data. [ 1439.313390][T16774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:56 executing program 2: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x44000, 0x0) 20:37:56 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x804, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x804, 0x0) (async) 20:37:56 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 20:37:56 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x0, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:56 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x3ff) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) r1 = socket(0x2a, 0x4, 0x401) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2}) [ 1439.448850][T16790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:56 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x1f) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) [ 1439.579675][T16805] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 8192, id = 0 [ 1439.682704][T10629] Bluetooth: hci3: command 0x0409 tx timeout 20:37:56 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x30d00, 0x0) pidfd_getfd(r1, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'wlan0\x00', 0x2000}, 0x18) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000001c0)=0x7) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="000005c2ed2ac76c9842f9f397756035b0d6883b", @ANYRES16=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x30d00, 0x0) (async) pidfd_getfd(r1, r0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'wlan0\x00', 0x2000}, 0x18) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000001c0)=0x7) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="000005c2ed2ac76c9842f9f397756035b0d6883b", @ANYRES16=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) (async) 20:37:56 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x0, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:56 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x804, 0x0) (rerun: 32) 20:37:56 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x4) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x4) (async) 20:37:56 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="8f34ed76505da5fe9ab1c5f83fa8a65f6791f9b745edd5146f", 0x19) 20:37:56 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x1f) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x1f) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async) 20:37:56 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x0, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:56 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x1f) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x1f) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async) 20:37:56 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="8f34ed76505da5fe9ab1c5f83fa8a65f6791f9b745edd5146f", 0x19) 20:37:56 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) [ 1439.962988][T16824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:56 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 20:37:56 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x0, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:56 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x30d00, 0x0) pidfd_getfd(r1, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'wlan0\x00', 0x2000}, 0x18) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000001c0)=0x7) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="000005c2ed2ac76c9842f9f397756035b0d6883b", @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25110000000a0009aaaaaaaabb000005002e00090000001fa3509f7746291f20a50b1e23f151d4964128b89319507ced7607c3e460d17ccf1c88e17b2cac2f8934c3935a0e07dccdc21e8076ca7c99b2fd264d2484f19b8e06266d7e209c2de46fef9ae1e9caf9c74f93da36cb9bb13abe850c43e74774eb4a616b04430e7cdf97b8fc8ea6104a8cf501d9688b48c25bda3ef426a67f4152142a94805d79da5627ccf022d12d5261bf50dc535084506cbd8aaa8840f380e523850aadf1c828247ee6357c923c36b4efbc39f1abe0c46a45c0993d3f9dfa4bb97619bd80ef1fbc0b8184469573601e92a6b569a5455751cb55eba101fd07c46f47349cab8c0449c496fb04ecfd0f0fa33a734e488f3804cef6cad6e30e611c5644fddf939cf4d2eb6f0469372f546af51be705dc89269ce1716091daa3ca35a19ec50db13e42e637c37fcdb4369537e853fa723905c6b0ffee2aa5b96d91de20a9fddf5a58d1796a4aafa37fd2"], 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x30d00, 0x0) (async) pidfd_getfd(r1, r0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'wlan0\x00', 0x2000}, 0x18) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000001c0)=0x7) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="000005c2ed2ac76c9842f9f397756035b0d6883b", @ANYRES16=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) (async) 20:37:56 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="8f34ed76505da5fe9ab1c5f83fa8a65f6791f9b745edd5146f", 0x19) 20:37:56 executing program 2: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="49c3e60812d3e0a4dcb3d5a04c8e90d5fa90243eab92e9074207ce826efbe725245aa484c4a4a8cdcd6c935000d8eab35a29c3c21d8387fae5da47b2dee00ae52cf1baf06b46e16035b07b87b55bea22aea2202ddf46171bc7bf988b5a1a542118aa53995027de", 0x67, 0x4000000, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000018c0)="0194fc971f7addc14100468f592b1a838eabb67b1a293a039270d14361a3b9806d1aaa1f18b5747815bc8678ac1a0af625325b0253c4de002d74c16866d621f53dff1a6174ad5c9ba9aa55c923d3dcd4fc74c4c297b70086eac1475d971c48a9034312653d8d989fd2dfa26de9320dbf787164337e2b48a80c39838b461743a8f3af68d66f8909913dd8fe05602d23b1da575b0edcd2944e5fa1b0ac98c7612188cbe8e45a61ccb26a2095f44e6c1a938d6e585f872d9100664fbc151f2c5d60b7a36e094ce67dd8468a1407597b9513272923001596c63958d3a78c838dd949b37a", 0xe2, 0x0, &(0x7f00000019c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xffff, @remote, 0x7}}, 0x24) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001a00)=@filter={'filter\x00', 0xe, 0x5, 0x5ce, [0x0, 0x20001240, 0x200014b4, 0x20001602], 0x0, &(0x7f0000000140), &(0x7f0000001240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x53, 0x11, 'veth0_to_bond\x00', 'nr0\x00', 'vlan0\x00', 'veth0_macvtap\x00', @random="4d38bda7f9ee", [0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff], 0xde, 0xde, 0x116, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x0, 0x0, 0x5, 0xbe83, 0x3ed}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x1, 0x1}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffe0}}}}, {0x9, 0x28, 0x9300, 'macsec0\x00', 'batadv_slave_0\x00', 'wg0\x00', 'gre0\x00', @random="d465fe83d8db", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, [0xff, 0xff, 0xff, 0xff], 0x6e, 0xe6, 0x12e, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@ERROR={'ERROR\x00', 0x20, {"f748c2443c770485cdfb04294bb859968b2b8d2f233987271791e00023dd"}}], @common=@ERROR={'ERROR\x00', 0x20, {"4b1c97a30c838b5017ee5139006ac533220736a0e617fa75ccff680b93d3"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x3c, 0x600, 'tunl0\x00', 'vlan1\x00', 'wg1\x00', 'veth0_to_bond\x00', @link_local, [0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xce, 0xce, 0x11e, [@arp={{'arp\x00', 0x0, 0x38}, {{0x18, 0x8884, 0x2, @dev={0xac, 0x14, 0x14, 0x29}, 0xff, @remote, 0xff000000, @multicast, [0xff], @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x4, 0x41}}}], [], @common=@log={'log\x00', 0x28, {{0x5f, "942d9887e7c25721c304bc0f048131eb916022e5e7f45da667f47dfbc0f0", 0xa}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x11, 0x8, 0xa00, 'ip6_vti0\x00', 'team_slave_1\x00', 'veth0_virt_wifi\x00', 'virt_wifi0\x00', @multicast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xde, 0xde, 0x10e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'team_slave_0\x00', 'ip_vti0\x00', 0x31, 0x3, 0x3f, 0x10000, 0x4, 0x9, {0x86f}, {0x3ff}}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}, {0x11, 0x10, 0x80f3, 'batadv_slave_0\x00', 'bond0\x00', 'team_slave_1\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffe}]}, 0x646) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000240)="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", 0x1000, 0x4008040, &(0x7f00000000c0)=@in6={0x21, 0x22, 0x2, 0x0, {0xa, 0x4e22, 0x5929, @ipv4={'\x00', '\xff\xff', @empty}, 0xe0c}}, 0xffffffffffffffe1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001840)) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000001880)={@any, 0x9}) 20:37:56 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) 20:37:57 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x20021891) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x810) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) 20:37:57 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x0, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:37:57 executing program 5: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x1024, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0xffffffff) socket$inet_sctp(0x2, 0x5, 0x84) 20:37:57 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) 20:37:57 executing program 2: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="49c3e60812d3e0a4dcb3d5a04c8e90d5fa90243eab92e9074207ce826efbe725245aa484c4a4a8cdcd6c935000d8eab35a29c3c21d8387fae5da47b2dee00ae52cf1baf06b46e16035b07b87b55bea22aea2202ddf46171bc7bf988b5a1a542118aa53995027de", 0x67, 0x4000000, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000018c0)="0194fc971f7addc14100468f592b1a838eabb67b1a293a039270d14361a3b9806d1aaa1f18b5747815bc8678ac1a0af625325b0253c4de002d74c16866d621f53dff1a6174ad5c9ba9aa55c923d3dcd4fc74c4c297b70086eac1475d971c48a9034312653d8d989fd2dfa26de9320dbf787164337e2b48a80c39838b461743a8f3af68d66f8909913dd8fe05602d23b1da575b0edcd2944e5fa1b0ac98c7612188cbe8e45a61ccb26a2095f44e6c1a938d6e585f872d9100664fbc151f2c5d60b7a36e094ce67dd8468a1407597b9513272923001596c63958d3a78c838dd949b37a", 0xe2, 0x0, &(0x7f00000019c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xffff, @remote, 0x7}}, 0x24) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001a00)=@filter={'filter\x00', 0xe, 0x5, 0x5ce, [0x0, 0x20001240, 0x200014b4, 0x20001602], 0x0, &(0x7f0000000140), &(0x7f0000001240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x53, 0x11, 'veth0_to_bond\x00', 'nr0\x00', 'vlan0\x00', 'veth0_macvtap\x00', @random="4d38bda7f9ee", [0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff], 0xde, 0xde, 0x116, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x0, 0x0, 0x5, 0xbe83, 0x3ed}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x1, 0x1}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffe0}}}}, {0x9, 0x28, 0x9300, 'macsec0\x00', 'batadv_slave_0\x00', 'wg0\x00', 'gre0\x00', @random="d465fe83d8db", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, [0xff, 0xff, 0xff, 0xff], 0x6e, 0xe6, 0x12e, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@ERROR={'ERROR\x00', 0x20, {"f748c2443c770485cdfb04294bb859968b2b8d2f233987271791e00023dd"}}], @common=@ERROR={'ERROR\x00', 0x20, {"4b1c97a30c838b5017ee5139006ac533220736a0e617fa75ccff680b93d3"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x3c, 0x600, 'tunl0\x00', 'vlan1\x00', 'wg1\x00', 'veth0_to_bond\x00', @link_local, [0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xce, 0xce, 0x11e, [@arp={{'arp\x00', 0x0, 0x38}, {{0x18, 0x8884, 0x2, @dev={0xac, 0x14, 0x14, 0x29}, 0xff, @remote, 0xff000000, @multicast, [0xff], @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x4, 0x41}}}], [], @common=@log={'log\x00', 0x28, {{0x5f, "942d9887e7c25721c304bc0f048131eb916022e5e7f45da667f47dfbc0f0", 0xa}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x11, 0x8, 0xa00, 'ip6_vti0\x00', 'team_slave_1\x00', 'veth0_virt_wifi\x00', 'virt_wifi0\x00', @multicast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xde, 0xde, 0x10e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'team_slave_0\x00', 'ip_vti0\x00', 0x31, 0x3, 0x3f, 0x10000, 0x4, 0x9, {0x86f}, {0x3ff}}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}, {0x11, 0x10, 0x80f3, 'batadv_slave_0\x00', 'bond0\x00', 'team_slave_1\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffe}]}, 0x646) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000240)="f64724822a7544bedc55630efb4e4c970e0fdbae2392484564ca5a060992df1b7c6bee76e455e4f3055b6b97b3d8123d451433861a85ba3324af549cfd6f491850dd7cc4617f09142ab94207752000005c6ed9f38b26a0d8d631c466a20974470363a1b3cca6c3c86f361e3cd3fc73a973741a9f29b3837e93637cca60798cbaf340126859cfc277ea28c6ce5f160dd1f77e6d031e2d51d4d7ed79139be16657e976b4ea8efde57381fa69a891e8cc2c896ba895ae1895ec279dc1232b6ffb1274d5bc2b460cdf28d934b9205d4a4d1edf39724c606c8498e74149563fa7fa73cc9f9db00ed4f38cfa31bf3106273ad7c7324a2b772068ffc08c296110188a5193a24ab0ca40ef95c352cbd9375ac12849e702cf7bb90fc7307a313a4dca8d30901f1242ff24e3ae8856968a894bae422bfd7e652b30923d924037cb78774973342ac615a50ae88bda745911669a01f5996fefc56662f44f1641f74f901ccfc297108ce85674995810eb002f224cffab46de5b01240d5b008c297169143c271f0a5b2a08d062832681d2f99c7013b17eaadad2341d09f17294b40bf1258b6c70375ec830e9273f25b57bca2de93b2ef4e7bf70440ecda9785c893d71761357c714af8f023932dc3995f46a2eb77b6fd4fd2830e5ee092a63b0d419946710282e28c465630751d8ca794877fad1c65c565def4e3fd13bb439a316f97ec99282552ce84af47f10708fdd58b4c29c80f087cdd67f5e4b7cc593b5e2043dfc086a86d3a30f1168a3cb1332a88e77a07df6b48da26495e5c655c1c0a9784959a7a991b9224d9c83cca7cf264515c7be14fd18cb523c2fc7ee15dffaa69cd92bdbdaf73cbdf1193aaa20d0a57a50f39eddb3ddd172bfb07a9fb9fd236bf20ac202677c16355440570900605bf8c0244227796d333ee1448d8a95a8d5d56ff60cb92c025b279f34b4261e1b2cd7bc8012258bc9df1052545789ff16567ae26c365e82315788723debd19519ae7ac5106ee9bdca3b2e4eb9b6bdb06f9d12bfcaa7443563140f918ab5b081148c76a379ab74e21fac96c783915826afb8f35c12dc381e46cc11d9dd3db7ae35340dbe8a6795be0bc0d47df80c14fd982d9f7cdf329893655d8a01c56a2ba59ec86e026288492649c045ef707dec3cb3557cffcd1e9bf1c2542a53736ad8524ff37fda7f71947f71c3044dc5bcebcb685b4fa625e0486691bb16030670b684d831c580d433ed0424de3f8d6dd34a71514bd6b49dbd2c0d43fde4b5bed45d4d4153baf57b557044927a949a8071e94693a192c3399c8c9aae97fa53874f7516701c2fe6d5910daec5714aec0596a876355d24274c9ce1e823d96cf9a8c8f0e2100157a905b83609c90fb38a964a46d1214220e4da4d9509c82666361f1b3ae3314297ae2fde58c2e03ee644ae93a62315c99768c90417e4197e75c6b0abd07edc2a8221464d0a2c06063d56e8aae72f0bbf717e349dbe5dd3ba50d7b72be94e928d97ce345ba16d908e8d70f0cf958f5573e1036972b0774f0d25a9f7c256b7b6fccc76d0947bf14eb2a36a24af1e11f665ecfea311f3e9ab5a0ef8ccd52d7ba9c1101243a5d1d034683a744f83354a39bb35037cdc9d74d7c7ee50f5119f5ea3fada4e551bb4e09ae6627a9a85291f0eebcb044f23ff01feb4c7301e4c19b96cd8b75a814d99a46601d42a1a7664541017b80812b06b05eb82636327afb7791cafad17c5294fbfba96981c734882ed067cf4616b071fb31fff64f4e19f4aa72d1903452701c6033c0608abc4aab1e2b907b18dbae90a5a1d08dd1af8d4b1c250ed85177aef90e0c42ad0c91e3aaae7d4560dee58a4d03c848f787a41ba3f01de868581ed1e5b89990109098d74db58eca44c6275789105819f1f1725a050a91bcb175baede54d024e5d5a93b4fe9056faa59df5308b2c1be608b80a8dc5e54460423776539d0ffaa80d80705e1d3c6a8493ef044dc39362dbe6a00df7b28d412a8be978bc603e6341db75fcee24d53b31ff9a86cf00d7635c539d5e472d879138ec54b76e4a371c502028ded0a178114bc7fdc3acab32b607d04da9ad1fa3d86d5988c3cffb48fe42a10d136722108c5f3644bd5f13793bc9e4b56f0d095c441c0716fb6dc4cb22db399e466cae5de49c0dd3ce1b39c759a37598ffa3ac021ffe8ee861ec897cfcc68f4e2b1a14be6207414d2b45bd7b3b9302378920e1dbbe92b0012a68ead9a4c37190fc5888b6143fe6a5fce822723afff382824c8580d9b83537b40ce3a724368e3cdabccc46672b234e05fc5c36d4e99ac85540ccdc530f2cb9f2d5e35b8c7fcb6742b900b6913b78358152497a3b9fa578f32ee3065534017724ce64ac9c4bb2e5ad0740a7e47f4ab270a3c3e52f45ac7ae21249a034f8096ca3ce7e25b29d9305d850384cfde008c695c69cd4fcbd3fbcf621a85c14225cfc3820b9ae8939af2545ecf1c33f8bbd91469da738c57d27b05e2d5d0c5039f41b96789d2d2791e18e5db1af0a4af0dc5c193b6dd4b67f5e3b8317f8352b7001a5e8a7b5803766e6174055f8ed038b7f100378acd835230cb1b92681b6796ce8bd9fb041b9149514c96c114fb2337dd8d6c19c642cc99b12cfaaf0f30b97b4744926195856429b8aafcd2d5ab11144c100e644a29587a2083dca25d8e1453f7c9aecfefa587981e63cac0fff3a21c3de02343fe9ab9484077f82e6a91eaf09938707770ad30a5c203e5040d471d0aa0a38debdeebcc69e3d354fb211e25495f4f59065e0c6238c90302fe0a2909ada960ead3efa9a1bcb55ad93ae358cad30177f2a32c6878cfa4da00b136e02d0b801614a0bb42c8a6fe9bd1cf86a32edcb65364db6cc1a7aa0f3149e7302984e5fc48adaa74000897b3f4fd57b493033275583ba53627a34d6982d0c24900980f36dd55293ea7b8817b49fb46ff9c15a6d1442effec19b2ae6201028eb471e05afb1a61cb3297d73094a83d6757d93de4a94d434866787080339692c594ed797958842545fe0b209b8347a53693f7aafa02d32fd7fc1af5c16f03347ded44af8968ca7e0aa7a25fb7bb97f5d8ddbbddce1c4f87b2f198e7f161503c80baccd5e95af807f39f935d2fddeb28ae5d1be2a05e1be45b25502f344cb17e20c08790d77d40af1fc9cc5bfce44f580eccd05afb79488d4808a8719d72298569464d6c81565a8c163acf227326340cefe29b346e23f362faea850683d5586b46d904eb2387de5ea119bfb50272be536e823378057cc785958cd029e1c8117a00dc837203bedfb4a57385f3774939e5eb470a43bedefa6061c3263a5373cfa7cb623395d17fe5ae08737871842967e3d85e7974809bb581ea9e0511f64879845858fb894aaa6be0fa26b1df6564ebc71149e7a57a93b70ea19e02818efdf84d04c5633062ec020ab9a4806c268c8b969c9855da7d1542c5822539ecb00352580ad401f3ba5b89694ef5be32981d5bff4cb073471c2dec5a9d7903bd15dadabefe596e302fb16c802f857ecb50b82954dbaed4db88a12c109fc55064795fae1058026fec97dc9d8c8be3c2f0b2146b57effb303d05bac7d1fcc46a74e5760c381a36ffa6d411b0de41e6b6eeea5629538c64ff4e4b73e1e4bdad7bf77f0674bd5d988be12265669a743f2d8cde3ba14b5d58a656747ab082e00dec54975149eb1bcc7515c3d5f29b1ba38ccd38ee459e2e6f900f4b24e4c11bc91b2381b6734f1301e35f70c8495ff6eaa69cc4eb45d138ec5b2dffa2e5111721c9ff49e835ad1012e2f6db58e9e04d485783fdd8f93e4da1db0a01a71a02f6d3562ecf278f194b0d79afd697760df81afc69815941b9afe311e69d089fd1d0c7653e662eb021943a2aed9fa1533258a8999f415d801151f503693202e1437d497b3f3a54eda7421f5d5e44521f36b742240820115486ed13df3e09e7644f7d24cab4510250ec12bbd01a98fdc2ba7190229a52d19fba953619a004f0f50c049116eb3b9cd4491314f5d7cc8b2201ae890878dbce5e838a2df2875b6af3aea31db1cbff08c00b91abc428adce07c7bcb0305f7bcb5e38cdb700e338b638ed85a1aa0fa2915a8c78335ab4972a8385dada7f1d953f09e1d1477ae8db384ddfecc7148765d66546adbb5e5fecde568a849d14404883cd20f51a55a0d5d6b84aa47383aaf6cc7fc4a08136ac8ae75522756f45db57360a6877c582fa4b8b1960abfd2bf3b1fadd9911aa6d5b9008e999f882a7caa351f5c16a7bdfa48056aff5d05a2a289d39ab85d7b5256655350c9ae8fdb6a1ccc5ea8a4097fadb738618a25bf02ed50c72695e5bef079a9a9250b2453c5762d2ad019c9c8603ed4885585f33744d38752d8f9d130466485171712491825c66a364f0b0f8e8ef7d78f89bc1c6ffee82d78adeb685f91a8964f8f67e91660e63e06b60b006c2e9cae275a0038b262415d68804796fcc5ed5f5e99579d33c8f9465cbe5e6f07781a627790f403356d2fe2309fc66795d299c4e41d2c21f1a54f2c30721c39f5412d2da9d60369870f2ac92926ee9ec6b301976c771d4ed3040bc993c6aad34319182d16fa870ec9192c691ca861e6a5b24f3c395eb104b529af0dff7cc16856dd86cfd751901bbc181f0b2d8ff05d34c72bbfc6a37fc3d28de27009677f826b2bf260d6f38026e3f2c85c85cde3598b947d172e99411bc575aaf2e4d2b19426cd5a4a339642079aa7bbd9182ce96d6c773a28e9bb7b008cd148e95f53ee192176e994a32b5ee6e0cc297ba910b32d0564733d0982e5203eb070e932b10ccca65382371c84874a35c1a60663157726cd7dc81c7a52f1194adc177e6754299b0886c63c5eaf5990be927ca303a15f9fae64e4e31497abdca3cceadcd828d87946ce5840741f075e0d0e554fb8413b26f647cc0a1e1641de7c9cf6d77f1cb3ba0ed4e69d0aeb4f7759740e34df3c8e3e08fe528ad54f4834b6cae27059aac5866e543ff2b1174d7d75fda00c6443e7ad1e3cdc44b54009e9ecf02ca7380f8f52029ed4791b5b4db70c1d2d5f37f5b187a5d5e4a0d6292ae71b31a83bcd3c456fb1ab4935c8c4a400fe74b0caa0ce63dc3b0c866ad8cd35ca221741e0f87433911b66cf4f93d90880b33f5b2c8417a1696b87dc3ce57cd9dec24ad8f5ca51b4ccacb31babae83a894332c11381fc8a6cbcd100d2b6c17b8db0fabfec0d68cef4f86fc424061f046386e1e536a47612569e16d0bed4360f871c6750cb2f21eb0de2ea63c746cc0b40bdb9bea537ab391380aff6497dfec082dcee34c6bf5b341975582e5f3541e5f0430bdea5f67b6b3a08fec2445265278833042ca5ae33d9b95a62350da1bd9428d91d6ad131020126b68f829141fdd393f12c529d07e808decee4b6a761ab8b990f907b955de269e5605142630f0389a20cb17d6b115e2d8f4a0be02fb9b6d27f3f0479ac4e43f22fb11f0d7728489c9592aad82a0377226bab9c1dc6dcc78d8e1e241127f60f8d17868471695e303aceb0e95af648403aa1c856df8a33075a3cdd18a976eb3adbb306119ca4a44efaf6e19de1f061ac16cdd89175a30b1ae2f5372cb8506edcfea5bb6c1152c0bed00d319b707b2ce357a56e0caf1bf189247d94deff0a5c3b53bb63291e3460751f0f2cc4c751d148780379b9d26712c57363def64e9af716cea1f051daf6046553799e0583c51b39151bc37561872f48fe32725bcf5de0c32cd49fa9b066561b7a5f64a8cb3853be8a96929c1489d33273b464d7804d211a9b77424ba45789c6c97262dffef387", 0x1000, 0x4008040, &(0x7f00000000c0)=@in6={0x21, 0x22, 0x2, 0x0, {0xa, 0x4e22, 0x5929, @ipv4={'\x00', '\xff\xff', @empty}, 0xe0c}}, 0xffffffffffffffe1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001840)) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000001880)={@any, 0x9}) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="49c3e60812d3e0a4dcb3d5a04c8e90d5fa90243eab92e9074207ce826efbe725245aa484c4a4a8cdcd6c935000d8eab35a29c3c21d8387fae5da47b2dee00ae52cf1baf06b46e16035b07b87b55bea22aea2202ddf46171bc7bf988b5a1a542118aa53995027de", 0x67, 0x4000000, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24) (async) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000018c0)="0194fc971f7addc14100468f592b1a838eabb67b1a293a039270d14361a3b9806d1aaa1f18b5747815bc8678ac1a0af625325b0253c4de002d74c16866d621f53dff1a6174ad5c9ba9aa55c923d3dcd4fc74c4c297b70086eac1475d971c48a9034312653d8d989fd2dfa26de9320dbf787164337e2b48a80c39838b461743a8f3af68d66f8909913dd8fe05602d23b1da575b0edcd2944e5fa1b0ac98c7612188cbe8e45a61ccb26a2095f44e6c1a938d6e585f872d9100664fbc151f2c5d60b7a36e094ce67dd8468a1407597b9513272923001596c63958d3a78c838dd949b37a", 0xe2, 0x0, &(0x7f00000019c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xffff, @remote, 0x7}}, 0x24) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001a00)=@filter={'filter\x00', 0xe, 0x5, 0x5ce, [0x0, 0x20001240, 0x200014b4, 0x20001602], 0x0, &(0x7f0000000140), &(0x7f0000001240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x53, 0x11, 'veth0_to_bond\x00', 'nr0\x00', 'vlan0\x00', 'veth0_macvtap\x00', @random="4d38bda7f9ee", [0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff], 0xde, 0xde, 0x116, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x0, 0x0, 0x5, 0xbe83, 0x3ed}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x1, 0x1}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffe0}}}}, {0x9, 0x28, 0x9300, 'macsec0\x00', 'batadv_slave_0\x00', 'wg0\x00', 'gre0\x00', @random="d465fe83d8db", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, [0xff, 0xff, 0xff, 0xff], 0x6e, 0xe6, 0x12e, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@ERROR={'ERROR\x00', 0x20, {"f748c2443c770485cdfb04294bb859968b2b8d2f233987271791e00023dd"}}], @common=@ERROR={'ERROR\x00', 0x20, {"4b1c97a30c838b5017ee5139006ac533220736a0e617fa75ccff680b93d3"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x3c, 0x600, 'tunl0\x00', 'vlan1\x00', 'wg1\x00', 'veth0_to_bond\x00', @link_local, [0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xce, 0xce, 0x11e, [@arp={{'arp\x00', 0x0, 0x38}, {{0x18, 0x8884, 0x2, @dev={0xac, 0x14, 0x14, 0x29}, 0xff, @remote, 0xff000000, @multicast, [0xff], @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x4, 0x41}}}], [], @common=@log={'log\x00', 0x28, {{0x5f, "942d9887e7c25721c304bc0f048131eb916022e5e7f45da667f47dfbc0f0", 0xa}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x11, 0x8, 0xa00, 'ip6_vti0\x00', 'team_slave_1\x00', 'veth0_virt_wifi\x00', 'virt_wifi0\x00', @multicast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xde, 0xde, 0x10e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'team_slave_0\x00', 'ip_vti0\x00', 0x31, 0x3, 0x3f, 0x10000, 0x4, 0x9, {0x86f}, {0x3ff}}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}, {0x11, 0x10, 0x80f3, 'batadv_slave_0\x00', 'bond0\x00', 'team_slave_1\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffe}]}, 0x646) (async) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000240)="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", 0x1000, 0x4008040, &(0x7f00000000c0)=@in6={0x21, 0x22, 0x2, 0x0, {0xa, 0x4e22, 0x5929, @ipv4={'\x00', '\xff\xff', @empty}, 0xe0c}}, 0xffffffffffffffe1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001840)) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000001880)={@any, 0x9}) (async) 20:37:57 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x20021891) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x810) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x20021891) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x810) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) 20:37:57 executing program 5: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x1024, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0xffffffff) socket$inet_sctp(0x2, 0x5, 0x84) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x1024, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0xffffffff) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) [ 1440.284705][T16859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:37:57 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x0, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1441.072978][ T4476] IPVS: stopping backup sync thread 16805 ... [ 1441.211547][ T4476] device hsr_slave_0 left promiscuous mode [ 1441.217942][ T4476] device hsr_slave_1 left promiscuous mode [ 1441.224693][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.232103][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.242055][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.251575][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.261389][ T4476] device bridge_slave_1 left promiscuous mode [ 1441.267830][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.278606][ T4476] device bridge_slave_0 left promiscuous mode [ 1441.285481][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.296999][ T4476] device veth1_macvtap left promiscuous mode [ 1441.305565][ T4476] device veth0_macvtap left promiscuous mode [ 1441.311630][ T4476] device veth1_vlan left promiscuous mode [ 1441.317580][ T4476] device veth0_vlan left promiscuous mode [ 1441.498032][ T4476] team0 (unregistering): Port device team_slave_1 removed [ 1441.511307][ T4476] team0 (unregistering): Port device team_slave_0 removed [ 1441.528065][ T4476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.541109][ T4476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.608317][ T4476] bond0 (unregistering): Released all slaves [ 1442.890510][ T3624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1442.899209][ T3624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1442.906827][ T3624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1442.916113][ T3624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1442.924174][ T3624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1442.931342][ T3624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1443.020892][T16890] chnl_net:caif_netlink_parms(): no params data found [ 1443.070750][T16890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.078121][T16890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.086194][T16890] device bridge_slave_0 entered promiscuous mode [ 1443.095068][T16890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.102190][T16890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.112044][T16890] device bridge_slave_1 entered promiscuous mode [ 1443.137698][T16890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.149526][T16890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1443.177716][T16890] team0: Port device team_slave_0 added [ 1443.185187][T16890] team0: Port device team_slave_1 added [ 1443.208368][T16890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.215524][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.242850][T16890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1443.255516][T16890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1443.262453][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.290670][T16890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1443.320618][T16890] device hsr_slave_0 entered promiscuous mode [ 1443.330283][T16890] device hsr_slave_1 entered promiscuous mode [ 1443.336978][T16890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1443.344615][T16890] Cannot create hsr debugfs directory [ 1443.419172][T16890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.426298][T16890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.433729][T16890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.440797][T16890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.489678][T16890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.505805][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1443.517348][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.526154][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.537120][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1443.552060][T16890] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.563548][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1443.571935][T10629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.579049][T10629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.594729][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1443.603221][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.610280][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.627695][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1443.637109][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1443.656800][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1443.665244][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1443.674015][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1443.684928][T16890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1443.704984][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1443.712381][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1443.729848][T16890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.964534][ T6050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1443.973974][ T6050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1443.982403][ T6050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1443.992194][ T6050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1444.001621][T16890] device veth0_vlan entered promiscuous mode [ 1444.015340][T16890] device veth1_vlan entered promiscuous mode [ 1444.037437][ T6050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1444.047135][ T6050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1444.058531][T16890] device veth0_macvtap entered promiscuous mode [ 1444.069080][T16890] device veth1_macvtap entered promiscuous mode [ 1444.084004][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1444.097026][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.107135][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1444.117717][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.127609][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1444.138702][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.149313][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1444.159896][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.169783][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1444.180375][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.191853][T16890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.200991][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1444.209218][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1444.217385][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1444.226113][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1444.240683][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1444.253235][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.263643][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1444.278758][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.288790][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1444.302683][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.312717][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1444.323234][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.333112][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1444.344056][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1444.356631][T16890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.365859][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1444.374954][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1444.433065][ T4476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.441316][ T4476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.468176][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1444.481404][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.489738][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.499014][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 20:38:01 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @initial, @broadcast, @device_b, {0x0, 0xe23}}, {0x2, 0x0, 0x3, 0x0, 0x40}}, {@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @from_mac, @device_a, @initial, {0x7, 0x5}}, {0x8, 0x1, 0x1, 0x1, 0x5}}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x672) 20:38:01 executing program 2: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="49c3e60812d3e0a4dcb3d5a04c8e90d5fa90243eab92e9074207ce826efbe725245aa484c4a4a8cdcd6c935000d8eab35a29c3c21d8387fae5da47b2dee00ae52cf1baf06b46e16035b07b87b55bea22aea2202ddf46171bc7bf988b5a1a542118aa53995027de", 0x67, 0x4000000, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24) (async) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000018c0)="0194fc971f7addc14100468f592b1a838eabb67b1a293a039270d14361a3b9806d1aaa1f18b5747815bc8678ac1a0af625325b0253c4de002d74c16866d621f53dff1a6174ad5c9ba9aa55c923d3dcd4fc74c4c297b70086eac1475d971c48a9034312653d8d989fd2dfa26de9320dbf787164337e2b48a80c39838b461743a8f3af68d66f8909913dd8fe05602d23b1da575b0edcd2944e5fa1b0ac98c7612188cbe8e45a61ccb26a2095f44e6c1a938d6e585f872d9100664fbc151f2c5d60b7a36e094ce67dd8468a1407597b9513272923001596c63958d3a78c838dd949b37a", 0xe2, 0x0, &(0x7f00000019c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xffff, @remote, 0x7}}, 0x24) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001a00)=@filter={'filter\x00', 0xe, 0x5, 0x5ce, [0x0, 0x20001240, 0x200014b4, 0x20001602], 0x0, &(0x7f0000000140), &(0x7f0000001240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x5, 0x53, 0x11, 'veth0_to_bond\x00', 'nr0\x00', 'vlan0\x00', 'veth0_macvtap\x00', @random="4d38bda7f9ee", [0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff], 0xde, 0xde, 0x116, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x0, 0x0, 0x5, 0xbe83, 0x3ed}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x1, 0x1}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffe0}}}}, {0x9, 0x28, 0x9300, 'macsec0\x00', 'batadv_slave_0\x00', 'wg0\x00', 'gre0\x00', @random="d465fe83d8db", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, [0xff, 0xff, 0xff, 0xff], 0x6e, 0xe6, 0x12e, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@ERROR={'ERROR\x00', 0x20, {"f748c2443c770485cdfb04294bb859968b2b8d2f233987271791e00023dd"}}], @common=@ERROR={'ERROR\x00', 0x20, {"4b1c97a30c838b5017ee5139006ac533220736a0e617fa75ccff680b93d3"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x11, 0x3c, 0x600, 'tunl0\x00', 'vlan1\x00', 'wg1\x00', 'veth0_to_bond\x00', @link_local, [0x0, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xce, 0xce, 0x11e, [@arp={{'arp\x00', 0x0, 0x38}, {{0x18, 0x8884, 0x2, @dev={0xac, 0x14, 0x14, 0x29}, 0xff, @remote, 0xff000000, @multicast, [0xff], @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x4, 0x41}}}], [], @common=@log={'log\x00', 0x28, {{0x5f, "942d9887e7c25721c304bc0f048131eb916022e5e7f45da667f47dfbc0f0", 0xa}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x11, 0x8, 0xa00, 'ip6_vti0\x00', 'team_slave_1\x00', 'veth0_virt_wifi\x00', 'virt_wifi0\x00', @multicast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xde, 0xde, 0x10e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'team_slave_0\x00', 'ip_vti0\x00', 0x31, 0x3, 0x3f, 0x10000, 0x4, 0x9, {0x86f}, {0x3ff}}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}, {0x11, 0x10, 0x80f3, 'batadv_slave_0\x00', 'bond0\x00', 'team_slave_1\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffe}]}, 0x646) (async, rerun: 32) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000240)="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", 0x1000, 0x4008040, &(0x7f00000000c0)=@in6={0x21, 0x22, 0x2, 0x0, {0xa, 0x4e22, 0x5929, @ipv4={'\x00', '\xff\xff', @empty}, 0xe0c}}, 0xffffffffffffffe1) (rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001840)) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000001880)={@any, 0x9}) 20:38:01 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 20:38:01 executing program 5: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x1024, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0xffffffff) (async) socket$inet_sctp(0x2, 0x5, 0x84) 20:38:01 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x20021891) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 32) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x810) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) 20:38:01 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x0, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1444.529006][T16909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.542389][T16910] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 8192, id = 0 [ 1444.550607][T16909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:01 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 20:38:01 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x0, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:01 executing program 2: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x45000, 0x0) 20:38:01 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000002c0)={@none, 0x7, 0x4, 0x81, 0x7, 0x7, "e98f4085d91fa090dbef05b744f4bbbaa00d6763a0fa0e551d55c1cbeed9c7a347625f9cc05c50214f2643e614372834842d72c38d5effbc7a37f95a609e0909bd307576dea21ea92e50afd176f011c02c4a781dc7cb6675721f19110211ccfb355ba967c55790e7d52876248e186aa9b6c58b55d15fc72ab90d5998c174475b"}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xff, 0x80, 0x3}, 0x10) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socketpair(0x5, 0x80000, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x40) 20:38:01 executing program 1: pipe(&(0x7f0000000040)) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2c846a, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) [ 1444.662468][T16938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.715069][T16940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:01 executing program 2: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x45000, 0x0) [ 1444.825801][T16938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.953284][ T6396] Bluetooth: hci3: command 0x0409 tx timeout 20:38:01 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @initial, @broadcast, @device_b, {0x0, 0xe23}}, {0x2, 0x0, 0x3, 0x0, 0x40}}, {@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @from_mac, @device_a, @initial, {0x7, 0x5}}, {0x8, 0x1, 0x1, 0x1, 0x5}}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x672) 20:38:01 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) 20:38:01 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:01 executing program 1: pipe(&(0x7f0000000040)) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2c846a, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 20:38:01 executing program 2: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x45000, 0x0) 20:38:01 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000002c0)={@none, 0x7, 0x4, 0x81, 0x7, 0x7, "e98f4085d91fa090dbef05b744f4bbbaa00d6763a0fa0e551d55c1cbeed9c7a347625f9cc05c50214f2643e614372834842d72c38d5effbc7a37f95a609e0909bd307576dea21ea92e50afd176f011c02c4a781dc7cb6675721f19110211ccfb355ba967c55790e7d52876248e186aa9b6c58b55d15fc72ab90d5998c174475b"}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xff, 0x80, 0x3}, 0x10) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socketpair(0x5, 0x80000, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x40) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000002c0)={@none, 0x7, 0x4, 0x81, 0x7, 0x7, "e98f4085d91fa090dbef05b744f4bbbaa00d6763a0fa0e551d55c1cbeed9c7a347625f9cc05c50214f2643e614372834842d72c38d5effbc7a37f95a609e0909bd307576dea21ea92e50afd176f011c02c4a781dc7cb6675721f19110211ccfb355ba967c55790e7d52876248e186aa9b6c58b55d15fc72ab90d5998c174475b"}) (async) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xff, 0x80, 0x3}, 0x10) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) (async) socketpair(0x5, 0x80000, 0x7, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x40) (async) 20:38:02 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:02 executing program 2: setregid(0xffffffffffffffff, 0xee00) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x44000, 0x0) prctl$PR_GET_SECCOMP(0x15) r0 = geteuid() setreuid(0xffffffffffffffff, r0) ioprio_get$uid(0x0, r0) 20:38:02 executing program 1: pipe(&(0x7f0000000040)) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2c846a, 0x0) (async, rerun: 64) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (rerun: 64) 20:38:02 executing program 4: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x40300, 0x0) [ 1445.248005][T16976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:02 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000002c0)={@none, 0x7, 0x4, 0x81, 0x7, 0x7, "e98f4085d91fa090dbef05b744f4bbbaa00d6763a0fa0e551d55c1cbeed9c7a347625f9cc05c50214f2643e614372834842d72c38d5effbc7a37f95a609e0909bd307576dea21ea92e50afd176f011c02c4a781dc7cb6675721f19110211ccfb355ba967c55790e7d52876248e186aa9b6c58b55d15fc72ab90d5998c174475b"}) (async) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xff, 0x80, 0x3}, 0x10) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socketpair(0x5, 0x80000, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x40) 20:38:02 executing program 2: setregid(0xffffffffffffffff, 0xee00) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x44000, 0x0) prctl$PR_GET_SECCOMP(0x15) r0 = geteuid() setreuid(0xffffffffffffffff, r0) ioprio_get$uid(0x0, r0) setregid(0xffffffffffffffff, 0xee00) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x44000, 0x0) (async) prctl$PR_GET_SECCOMP(0x15) (async) geteuid() (async) setreuid(0xffffffffffffffff, r0) (async) ioprio_get$uid(0x0, r0) (async) [ 1445.305097][T16978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:02 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @initial, @broadcast, @device_b, {0x0, 0xe23}}, {0x2, 0x0, 0x3, 0x0, 0x40}}, {@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @from_mac, @device_a, @initial, {0x7, 0x5}}, {0x8, 0x1, 0x1, 0x1, 0x5}}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x672) 20:38:02 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:02 executing program 4: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x40300, 0x0) 20:38:02 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x8000, 0x0) 20:38:02 executing program 4: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x40300, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x40300, 0x0) (async) 20:38:02 executing program 2: setregid(0xffffffffffffffff, 0xee00) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x44000, 0x0) prctl$PR_GET_SECCOMP(0x15) (async) r0 = geteuid() setreuid(0xffffffffffffffff, r0) (async) ioprio_get$uid(0x0, r0) 20:38:02 executing program 5: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x20000, 0x0) 20:38:02 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1445.481029][T17009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:02 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) 20:38:02 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) r0 = geteuid() setreuid(0xffffffffffffffff, r0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000007,max=00000000000000000010000,smackfsdef=@,},euid<', @ANYRESDEC=r0, @ANYBLOB="2c646f6e745f6d6561737572652c7063723d30303030303030303030303030303030303030342c7065726d69745f646972656374696f2c736d61636b66736861743d2e2f62696e866465726673002c00"]) 20:38:02 executing program 5: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x20000, 0x0) [ 1445.548438][T17009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:02 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1445.620097][T17012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1445.640706][T17028] binder: Unknown parameter 'smackfsdef' 20:38:02 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 20:38:02 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x8000, 0x0) 20:38:02 executing program 5: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x20000, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x20000, 0x0) (async) 20:38:02 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) r0 = geteuid() setreuid(0xffffffffffffffff, r0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000007,max=00000000000000000010000,smackfsdef=@,},euid<', @ANYRESDEC=r0, @ANYBLOB="2c646f6e745f6d6561737572652c7063723d30303030303030303030303030303030303030342c7065726d69745f646972656374696f2c736d61636b66736861743d2e2f62696e866465726673002c00"]) 20:38:02 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async) timer_create(0x1, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)) (async) timer_getoverrun(r0) (async) 20:38:02 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:02 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x44000, 0x0) (async) timer_create(0x1, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)) (async) timer_getoverrun(r0) (async) 20:38:02 executing program 5: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x21380c, 0x0) 20:38:02 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) r0 = geteuid() setreuid(0xffffffffffffffff, r0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000007,max=00000000000000000010000,smackfsdef=@,},euid<', @ANYRESDEC=r0, @ANYBLOB="2c646f6e745f6d6561737572652c7063723d30303030303030303030303030303030303030342c7065726d69745f646972656374696f2c736d61636b66736861743d2e2f62696e866465726673002c00"]) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) geteuid() (async) setreuid(0xffffffffffffffff, r0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000007,max=00000000000000000010000,smackfsdef=@,},euid<', @ANYRESDEC=r0, @ANYBLOB="2c646f6e745f6d6561737572652c7063723d30303030303030303030303030303030303030342c7065726d69745f646972656374696f2c736d61636b66736861743d2e2f62696e866465726673002c00"]) (async) [ 1446.112242][T17044] binder: Unknown parameter 'smackfsdef' 20:38:02 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x92c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9a4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:03 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x8000, 0x0) [ 1446.167822][T17050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:03 executing program 5: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x21380c, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x21380c, 0x0) (async) [ 1446.254643][T17060] binder: Unknown parameter 'smackfsdef' 20:38:03 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 20:38:03 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @initial, @broadcast, @device_b, {0x0, 0xe23}}, {0x2, 0x0, 0x3, 0x0, 0x40}}, {@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @from_mac, @device_a, @initial, {0x7, 0x5}}, {0x8, 0x1, 0x1, 0x1, 0x5}}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x672) 20:38:03 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x92c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9a4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:03 executing program 5: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x21380c, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x21380c, 0x0) (async) 20:38:03 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x424, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x20000000) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) 20:38:03 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x401, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) 20:38:03 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20014, 0x0) [ 1446.558268][T17075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.577562][T17080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:03 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x401, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) 20:38:03 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x424, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x20000000) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x424, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) (async) openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x20000000) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) 20:38:03 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x92c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9a4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:03 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20014, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20014, 0x0) (async) [ 1446.605578][T17075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:03 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x401, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) 20:38:03 executing program 3: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 20:38:03 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x0, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:03 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20014, 0x0) 20:38:03 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x424, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) (async, rerun: 64) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x20000000) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) 20:38:03 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x1040024, 0x0) 20:38:03 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @initial, @broadcast, @device_b, {0x0, 0xe23}}, {0x2, 0x0, 0x3, 0x0, 0x40}}, {@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @from_mac, @device_a, @initial, {0x7, 0x5}}, {0x8, 0x1, 0x1, 0x1, 0x5}}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="eff68baf1ef8d26e6b7be6059ef5ceda5800663c4b88e1e28c9fc6bb11a618bfc387b201a637f65790b354f589fe818d9857c64a2f521d4e3a2ed3189f99efd09b64540c2c6a0c5b936c721f54b1833f5690512832d20b9ed0314334dc07768f513289a6d756a7bffebb284222290ca4ab0bf3557c598e4841eab140191b460f6c80d6e68f82e112f716bf180dcc9807deac6c8e9d9d61fa77ff5baab7021e5d0716432363c9d78a1f4794f26c52faef3e00833bd96228381f9e8ece40680c12b83d6d86e1ad0dcbeb2985dc73a1d01c6ad7a72260fd148ecd869005180d2bed68cc89b8c00958a62c70cb70c4fdde76547749d06993d4bf338e9764e1dc7b1c2b4c91aebd32cb3499c4aa6a18cbcbf52be0bf0a238a6dd2fc7eee003e83b09f29cfcd97ab03e7abaece22207a6972b1bc7f9bb2e37f948362c3227f9be11ae5de9133aaab01ceed6bc2104e4405ada66724dccd9d48c15dad19acee13d8e2b7b5700aacb7b29f5a8738f364fb2f0d7497ca99cd1c4ac3d50a45545e9a8a437d357aa8093d15a401e268df6a6a7f71eac93b6da3f8a05cd86a89ccc8decc33099bfb5dba54a5fa321f1935adb7a00ef995e299ad2921cb8beef2218a6365720199cfe6e1c535a703dabd7d36c7074554e5d1d625911097c26dadf25495e6e388b60d04411a2345bf7f8222ac1d998b1b94a9bef2fe6f85d4067d3e585d02fd9c13588d2d2ced7cdd16197c05feba8ff1d9b23e1516cfb063db558d4e5bdbddd122e3f70c7b3284e9f8f81082b7a44ddb5f132784921383960855477016ebfbfcd0c67e96fa3a433c71d9fbd5b8be19cf022c18b49f565f3fbe61b27c1232c79c9df3d4fac570b62dd9931e4ae3e2b23bb71cac563499942cfa4ef3040b14efd1fb4acc400412a154895e3bdd5c1c18dbd5fbc5d75b5a64de30b5807f0359500c4f1e479a0d05fbef45dca92179610c8999ec248f8d6043ca63624e12b52e305f2c1e897004d1e1ca47163443b46f0a1e0c8c24623b547de9ed8bfd96510e16b1d5bbb865a873228fd92cc600212dedc235239ca2de7b1ebcbfdb2cdaaf3cf79232d7cc22bbd6f9a41c9b70aaab57f13c9c9694669054259b7ba4e7bd6d0acc482f47381fc3249a9c8d613200ef2cf747a9ca06570a8fc0517088fd2890e292b5a7e8cce78deabaaf06d3c60b6df56250731a97e729cefa76ca083dddb233da441b94dad6e66a8af80469cccb48de28f37d5cfdf8843342b3acc8935dce9482db0b84b3585a1c4443fb1c6f6e6e7dc5ab5097fdafbf99960417abded6bf7701f76c08a570d92948cfa14004c484b000b8312bebe5e2cf63a908f1cbbdf95c18c2faa499dc412cbbcb0256c74a42c2a2c72ac6eca5bac7a6eb0f9c74cfcef7ed3f98b4966178df565f51cdf56816c3f8e0ec435fb005044b8d18a6f4a4cc553789bd92ddf047d9ae3dd6f489e47abd358d75cb85f5448762e7973d25d30f1d588b0b82785a9b37570058f9daafc4b25fb119056cc92f5ae6084980b5c8e7d3b5ad55ad0b207b4f4f40d493351bc21cfe275f66dbcb5613bfc02d442c230d6b9175a90047c3d5a6ab1190460e3c974125b4f659a9f1a597ce664e91b828a626b04ad77469782a091d3aacbc4a4b021c6fe2ef3209466bddb24c99428c855969799672ce2df7ea03d607de13819694d846042385bd45c73869073154bd16f74c4d9dab0625b15699fc3c3c273cae9fac98cfdea6fbcd75d658b61af65bd25e31949e11f606f1b85c1b2f4a4a7ad1ece6d3c33a5d8cf1bcdcbe8615d24cf9c266cf47fe34dd6cb501f3906ac2c76e05d9dfd176e2216a518ba311a024073e13aa1d62acfe3b89c62551aafdcc81da431a3b651830e5b4af1920458b568f2cbdda64346dd16b153d52eac0341080d7f5d595ebd0f14fea9c990c0e1b006de457baaf30ff2b8996a150b8db5b9defd77affa82e0c3d67d817fa4127b578037b46638a55fb2e796c1640335bc78092a8549e6d5915ddcc7308ea5b8dc3aae5db2e94d217cabb199730268cb8205f4efa7abbbaedb009b657c5e57aa00f1bf033ca6f1c6198fe5ca4af51306d71fd1f05f51f40cbfaa9fea9e4984da905d0840b432287a35492ff55eaba1954d28965c95023dde4350fa6c58a4f6033db28213948eddd3fcce0cd651b05ac5fc61997d1aac31f0173ea1abf3b18aafc82357fc1cb1e9bd9760fbe63970c57a668686e4901b572472898a4f6516d11614672"}, 0x672) 20:38:03 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'rw\x00'}, 0x9) 20:38:03 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x1040024, 0x0) 20:38:03 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = geteuid() setreuid(0xffffffffffffffff, r0) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0xd0, &(0x7f0000000100)={[], [{@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r0}}]}) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='./binderfs\x00', 0xb) 20:38:03 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x0, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1447.018365][T17106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.032698][T10629] Bluetooth: hci3: command 0x041b tx timeout [ 1447.063137][T17111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.102865][T17110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:03 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'rw\x00'}, 0x9) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'rw\x00'}, 0x9) (async) 20:38:03 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x0, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1447.125483][T17118] binder: Unknown parameter 'smackfsroot' [ 1447.165721][T17106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:04 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r0 = geteuid() setreuid(0xffffffffffffffff, r0) (async, rerun: 64) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0xd0, &(0x7f0000000100)={[], [{@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r0}}]}) (async, rerun: 64) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='./binderfs\x00', 0xb) 20:38:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 20:38:04 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x1040024, 0x0) 20:38:04 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'rw\x00'}, 0x9) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'rw\x00'}, 0x9) (async) 20:38:04 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x0, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:04 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @initial, @broadcast, @device_b, {0x0, 0xe23}}, {0x2, 0x0, 0x3, 0x0, 0x40}}, {@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @from_mac, @device_a, @initial, {0x7, 0x5}}, {0x8, 0x1, 0x1, 0x1, 0x5}}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x672) 20:38:04 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x0, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:04 executing program 5: r0 = socket(0x2c, 0xa, 0x8) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x75e9, @empty, 0x3}}, 0x24) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:38:04 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0xa4101f, 0x0) 20:38:04 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = geteuid() setreuid(0xffffffffffffffff, r0) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0xd0, &(0x7f0000000100)={[], [{@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r0}}]}) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='./binderfs\x00', 0xb) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) geteuid() (async) setreuid(0xffffffffffffffff, r0) (async) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0xd0, &(0x7f0000000100)={[], [{@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x400}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r0}}]}) (async) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='./binderfs\x00', 0xb) (async) 20:38:04 executing program 5: r0 = socket(0x2c, 0xa, 0x8) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x75e9, @empty, 0x3}}, 0x24) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1447.564200][T17145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:04 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0xa4101f, 0x0) 20:38:04 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x0, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1447.652486][T17154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.671947][T17156] binder: Unknown parameter 'smackfsroot' [ 1447.709673][T17154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 20:38:04 executing program 5: r0 = socket(0x2c, 0xa, 0x8) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x75e9, @empty, 0x3}}, 0x24) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:38:04 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000240)) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3c01}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x94}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4008804) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) 20:38:04 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0xa4101f, 0x0) [ 1447.980050][T17176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:04 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 20:38:04 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:04 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) 20:38:04 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000240)) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3c01}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x94}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4008804) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) 20:38:04 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) r0 = geteuid() setreuid(0xffffffffffffffff, r0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x2006001, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB=',measure,smackfsfloor=./binderfs\x00,dont_measure,fsname={-,obj_type=./binderfs\x00,\x00']) 20:38:04 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) (async) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000240)) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3c01}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x94}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4008804) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) 20:38:04 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) r0 = geteuid() setreuid(0xffffffffffffffff, r0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x2006001, &(0x7f0000000340)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62216c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303337342c6d61783d30303030303030303030303030303030303030303030372c6d61783d30303030303030303030303030303030303030303030312c73746174733d676c6f62616c2c6673636f6e746578743d73797374656d5f752c657569643e434f45a74297c4e07c87f409ca1164255dee68bec7903a901293c4c3896f10c50367fbd6175f652eef408d3fb3aab7119980635409728000000000000000bf6dd0b3df5a48c502a66f0bb699ca670b86c727ab4c6f2caaa3478d23cb087288a9a289286a9ab47bf97bf703c069c6f82a363f7034d1c326180c7829a9ab5985e0c76dc6fc9454e767b18e85d456212d71f59925681ab81a6b70558bde7df83895629a9cc0539e1fe415ebecbd12a1f2733fac047ffb5fb614990bd0b73a143c28bf74356be53d789550cd3a17371e3a9fca04b3a3ab35995617b81b80d7b5e6d907e907069994f7fff677bb4d01bc9dc4038220f5fea050e29b472547de3476ca9ae54f31751233d7d2e16dafb95dcb6f9b6dc1d78d8bef1a19a03f6a976aadfd9f99b8ea7c57d7a35d07454453fbb874cfac1168887ce257c2e0633695912a332ae06d13e7e048a40cc2c1d561ee9417b8bcef6d", @ANYRESDEC=r0, @ANYBLOB=',measure,smackfsfloor=./binderfs\x00,dont_measure,fsname={-,obj_type=./binderfs\x00,\x00']) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) geteuid() (async) setreuid(0xffffffffffffffff, r0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x2006001, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB=',measure,smackfsfloor=./binderfs\x00,dont_measure,fsname={-,obj_type=./binderfs\x00,\x00']) (async) 20:38:04 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1448.128947][T17190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:05 executing program 5: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) (async) r0 = geteuid() setreuid(0xffffffffffffffff, r0) (async, rerun: 32) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x2006001, &(0x7f0000000340)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62216c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303337342c6d61783d30303030303030303030303030303030303030303030372c6d61783d30303030303030303030303030303030303030303030312c73746174733d676c6f62616c2c6673636f6e746578743d73797374656d5f752c657569643e434f45a74297c4e07c87f409ca1164255dee68bec7903a901293c4c3896f10c50367fbd6175f652eef408d3fb3aab7119980635409728000000000000000bf6dd0b3df5a48c502a66f0bb699ca670b86c727ab4c6f2caaa3478d23cb087288a9a289286a9ab47bf97bf703c069c6f82a363f7034d1c326180c7829a9ab5985e0c76dc6fc9454e767b18e85d456212d71f59925681ab81a6b70558bde7df83895629a9cc0539e1fe415ebecbd12a1f2733fac047ffb5fb614990bd0b73a143c28bf74356be53d789550cd3a17371e3a9fca04b3a3ab35995617b81b80d7b5e6d907e907069994f7fff677bb4d01bc9dc4038220f5fea050e29b472547de3476ca9ae54f31751233d7d2e16dafb95dcb6f9b6dc1d78d8bef1a19a03f6a976aadfd9f99b8ea7c57d7a35d07454453fbb874cfac1168887ce257c2e0633695912a332ae06d13e7e048a40cc2c1d561ee9417b8bcef6d", @ANYRESDEC=r0, @ANYBLOB=',measure,smackfsfloor=./binderfs\x00,dont_measure,fsname={-,obj_type=./binderfs\x00,\x00']) (rerun: 32) 20:38:05 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x0, 0x0) (async, rerun: 32) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (rerun: 32) 20:38:05 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) (async) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 20:38:05 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:05 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 20:38:05 executing program 4: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2000000, 0x0) 20:38:05 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:05 executing program 5: r0 = geteuid() r1 = geteuid() r2 = geteuid() setreuid(r1, r2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040)=0x0, 0x0) r6 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0xf2, 0x0, 0x20, r6, 0xfffffffb, '\x00', r5, r4, 0x0, 0x4, 0x0, 0xd}, 0x48) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000040), 0x0) r9 = pidfd_getfd(r4, r3, 0x0) pidfd_getfd(r9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x4, 0x0, 0x5, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0x3d}, @cb_func={0x18, 0x8}, @generic={0xfc, 0x2, 0x0, 0x4, 0x81}, @generic={0xff, 0x4, 0x3, 0x0, 0xe01e}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x3d, 0xb4, &(0x7f00000001c0)=""/180, 0x40f00, 0x8, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x4, 0x90f, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r4, 0x1, r7, r3, r8]}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\'\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf250a00000008000600", @ANYRES32=r5, @ANYBLOB="050029000000000005002a000000000008000600", @ANYRES32=0x0, @ANYBLOB="0800320008000000050023400000000008002c000700005d2aaf35a7fde75f97f812b382a6ab4b00ef7aa4214b5255b4d5d81a6e0bdce9dee65bcd62baa16056a30d07838f9a4ccb8287d8467947596b9b92b32c19589de39dc2ca5e59ae9565254374ac71aa9d1e4d8300000100000000006c9847576d981da459185396949fa9fa0be86de1e88b040088d8d9675d7de1e5aa546c35334b705519f03950458bc212cee9b8ad9a6c9575316c33479af391cb97d7906a5b30af5fbb5c678424042ec257dec57423a82d963e62f764bcda1eb177900d11ff22f7bec75647c0299932"], 0x4c}, 0x1, 0x0, 0x0, 0xc050}, 0x24000885) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x3, 0x332, [0x20000240, 0x0, 0x0, 0x20000270, 0x2000046c], 0x0, &(0x7f0000000000), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x0, 0x0, 0x17, 'macvtap0\x00', 'netpci0\x00', 'gretap0\x00', 'veth0_to_batadv\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, [0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="7ac5bc4f0a10", 0xfffffffffffffffd}}}}, {0x3, 0x1c, 0x892f, 'syzkaller1\x00', 'ipvlan1\x00', 'vlan1\x00', 'bridge_slave_0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0xee, 0x126, [@state={{'state\x00', 0x0, 0x8}, {{0x7ff}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x1}}}], [], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x5, 0x19, 0x9200, 'rose0\x00', 'veth0\x00', 'gre0\x00', 'ip6tnl0\x00', @empty, [0xff, 0xff, 0x0, 0xff], @multicast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x9e, 0x9e, 0xd6, [@state={{'state\x00', 0x0, 0x8}, {{0x6}}}], [], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}]}, 0x3aa) setreuid(0xee00, r0) socket$inet(0x2, 0x5, 0x3f) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) 20:38:05 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) pidfd_open(0x0, 0x0) 20:38:05 executing program 4: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2000000, 0x0) 20:38:05 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1448.576408][T17234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:05 executing program 4: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2000000, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2000000, 0x0) (async) [ 1448.659195][T17239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:05 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:05 executing program 5: r0 = geteuid() (async) r1 = geteuid() (async) r2 = geteuid() setreuid(r1, r2) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040)=0x0, 0x0) r6 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0xf2, 0x0, 0x20, r6, 0xfffffffb, '\x00', r5, r4, 0x0, 0x4, 0x0, 0xd}, 0x48) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) r9 = pidfd_getfd(r4, r3, 0x0) pidfd_getfd(r9, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x4, 0x0, 0x5, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0x3d}, @cb_func={0x18, 0x8}, @generic={0xfc, 0x2, 0x0, 0x4, 0x81}, @generic={0xff, 0x4, 0x3, 0x0, 0xe01e}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x3d, 0xb4, &(0x7f00000001c0)=""/180, 0x40f00, 0x8, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x4, 0x90f, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r4, 0x1, r7, r3, r8]}, 0x80) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\'\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf250a00000008000600", @ANYRES32=r5, @ANYBLOB="050029000000000005002a000000000008000600", @ANYRES32=0x0, @ANYBLOB="0800320008000000050023400000000008002c000700005d2aaf35a7fde75f97f812b382a6ab4b00ef7aa4214b5255b4d5d81a6e0bdce9dee65bcd62baa16056a30d07838f9a4ccb8287d8467947596b9b92b32c19589de39dc2ca5e59ae9565254374ac71aa9d1e4d8300000100000000006c9847576d981da459185396949fa9fa0be86de1e88b040088d8d9675d7de1e5aa546c35334b705519f03950458bc212cee9b8ad9a6c9575316c33479af391cb97d7906a5b30af5fbb5c678424042ec257dec57423a82d963e62f764bcda1eb177900d11ff22f7bec75647c0299932"], 0x4c}, 0x1, 0x0, 0x0, 0xc050}, 0x24000885) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x3, 0x332, [0x20000240, 0x0, 0x0, 0x20000270, 0x2000046c], 0x0, &(0x7f0000000000), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x0, 0x0, 0x17, 'macvtap0\x00', 'netpci0\x00', 'gretap0\x00', 'veth0_to_batadv\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, [0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="7ac5bc4f0a10", 0xfffffffffffffffd}}}}, {0x3, 0x1c, 0x892f, 'syzkaller1\x00', 'ipvlan1\x00', 'vlan1\x00', 'bridge_slave_0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0xee, 0x126, [@state={{'state\x00', 0x0, 0x8}, {{0x7ff}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x1}}}], [], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x5, 0x19, 0x9200, 'rose0\x00', 'veth0\x00', 'gre0\x00', 'ip6tnl0\x00', @empty, [0xff, 0xff, 0x0, 0xff], @multicast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x9e, 0x9e, 0xd6, [@state={{'state\x00', 0x0, 0x8}, {{0x6}}}], [], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}]}, 0x3aa) (async) setreuid(0xee00, r0) (async) socket$inet(0x2, 0x5, 0x3f) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) 20:38:05 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40308, 0x0) mount$binderfs(&(0x7f0000000180), &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000240), 0x1900000, &(0x7f0000000680)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746168733d676c6f206106000000783d30303030303030303010303030303030303230303030202c61707072616973652c736d61636b66737472616e736d7574653d6d61736b2c7375626a5f726f6c653d5e2b7b2c726f6f74636f6e746578743d73746166665f752c726f6f74636f6e746578743d73797361646d5f75ad387000"/156]) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x1018001, &(0x7f0000000400)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030313737372c6d61783d3030303030303030303030303030303030303030ea6266ad7d565e8e1a19703030322c6d61783d3030303030303030303030308c9a1bd6d7162b5213bfdb4630303030303030303030372c6d61783debe5606a12ef447730303030303030303030303030303030303030303031312c6d61783d30313737373737373737373737373737373737373737372c6d61736b3d5e4d41595f524541442c66756e633d504f4c494359"]) r0 = geteuid() setreuid(0xffffffffffffffff, r0) r1 = geteuid() setreuid(0xffffffffffffffff, r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x20048041) mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={[{@stats}, {@stats}], [{@smackfsdef={'smackfsdef', 0x3d, '%'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) mount$binderfs(&(0x7f0000000340), &(0x7f0000000380)='./binderfs\x00', &(0x7f00000003c0), 0x2000, &(0x7f0000000840)=ANY=[@ANYBLOB="852f4255c0afa78fe7df9bc6593fe61cbf11072a60807d387bf732e62b65c0cdc4f9bb1b386a0f70f867dd896d2f66e77565469c94eefe557303b85993d943c183b5fbcecefc8536eac12946da43257d394acc3250664fc3d9f991717d731c4a9357f9e2dbb0a2465402afe80803780ee40f1d6dc8e7ec96546f", @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYBLOB="612ad1ae34e0ef0ee3c1fca5a5eb5af2fd828daf28c625e0863e13d9351ae295a52f1d9405fab73abab6861b07f3dac91dc9a3685f2690b92e2705321860fe3d36c697d03c51d5adb90e17aedcad7cafe0888bb67567ba39f5fecd2b0995af147ba169cb084d59ba6455f0b7bb8bf2143a70952e6374359b7c7c37b023ca7ce069171ffe0a9c47", @ANYRESDEC=r3, @ANYRESHEX=r1]) r5 = socket(0x3, 0x6, 0x6) connect$bt_rfcomm(r5, &(0x7f0000000280)={0x1f, @none, 0x1}, 0xa) r6 = pidfd_getfd(r2, r5, 0x0) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000600)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) [ 1449.112745][ T6396] Bluetooth: hci3: command 0x040f tx timeout 20:38:05 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x0, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) 20:38:05 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:05 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40308, 0x0) mount$binderfs(&(0x7f0000000180), &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000240), 0x1900000, &(0x7f0000000680)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746168733d676c6f206106000000783d30303030303030303010303030303030303230303030202c61707072616973652c736d61636b66737472616e736d7574653d6d61736b2c7375626a5f726f6c653d5e2b7b2c726f6f74636f6e746578743d73746166665f752c726f6f74636f6e746578743d73797361646d5f75ad387000"/156]) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x1018001, &(0x7f0000000400)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030313737372c6d61783d3030303030303030303030303030303030303030ea6266ad7d565e8e1a19703030322c6d61783d3030303030303030303030308c9a1bd6d7162b5213bfdb4630303030303030303030372c6d61783debe5606a12ef447730303030303030303030303030303030303030303031312c6d61783d30313737373737373737373737373737373737373737372c6d61736b3d5e4d41595f524541442c66756e633d504f4c494359"]) r0 = geteuid() setreuid(0xffffffffffffffff, r0) r1 = geteuid() setreuid(0xffffffffffffffff, r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x20048041) mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={[{@stats}, {@stats}], [{@smackfsdef={'smackfsdef', 0x3d, '%'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) mount$binderfs(&(0x7f0000000340), &(0x7f0000000380)='./binderfs\x00', &(0x7f00000003c0), 0x2000, &(0x7f0000000840)=ANY=[@ANYBLOB="852f4255c0afa78fe7df9bc6593fe61cbf11072a60807d387bf732e62b65c0cdc4f9bb1b386a0f70f867dd896d2f66e77565469c94eefe557303b85993d943c183b5fbcecefc8536eac12946da43257d394acc3250664fc3d9f991717d731c4a9357f9e2dbb0a2465402afe80803780ee40f1d6dc8e7ec96546f", @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYBLOB="612ad1ae34e0ef0ee3c1fca5a5eb5af2fd828daf28c625e0863e13d9351ae295a52f1d9405fab73abab6861b07f3dac91dc9a3685f2690b92e2705321860fe3d36c697d03c51d5adb90e17aedcad7cafe0888bb67567ba39f5fecd2b0995af147ba169cb084d59ba6455f0b7bb8bf2143a70952e6374359b7c7c37b023ca7ce069171ffe0a9c47", @ANYRESDEC=r3, @ANYRESHEX=r1]) r5 = socket(0x3, 0x6, 0x6) connect$bt_rfcomm(r5, &(0x7f0000000280)={0x1f, @none, 0x1}, 0xa) r6 = pidfd_getfd(r2, r5, 0x0) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000600)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40308, 0x0) (async) mount$binderfs(&(0x7f0000000180), &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000240), 0x1900000, &(0x7f0000000680)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746168733d676c6f206106000000783d30303030303030303010303030303030303230303030202c61707072616973652c736d61636b66737472616e736d7574653d6d61736b2c7375626a5f726f6c653d5e2b7b2c726f6f74636f6e746578743d73746166665f752c726f6f74636f6e746578743d73797361646d5f75ad387000"/156]) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x1018001, &(0x7f0000000400)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030313737372c6d61783d3030303030303030303030303030303030303030ea6266ad7d565e8e1a19703030322c6d61783d3030303030303030303030308c9a1bd6d7162b5213bfdb4630303030303030303030372c6d61783debe5606a12ef447730303030303030303030303030303030303030303031312c6d61783d30313737373737373737373737373737373737373737372c6d61736b3d5e4d41595f524541442c66756e633d504f4c494359"]) (async) geteuid() (async) setreuid(0xffffffffffffffff, r0) (async) geteuid() (async) setreuid(0xffffffffffffffff, r1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x20048041) (async) mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={[{@stats}, {@stats}], [{@smackfsdef={'smackfsdef', 0x3d, '%'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) (async) mount$binderfs(&(0x7f0000000340), &(0x7f0000000380)='./binderfs\x00', &(0x7f00000003c0), 0x2000, &(0x7f0000000840)=ANY=[@ANYBLOB="852f4255c0afa78fe7df9bc6593fe61cbf11072a60807d387bf732e62b65c0cdc4f9bb1b386a0f70f867dd896d2f66e77565469c94eefe557303b85993d943c183b5fbcecefc8536eac12946da43257d394acc3250664fc3d9f991717d731c4a9357f9e2dbb0a2465402afe80803780ee40f1d6dc8e7ec96546f", @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYBLOB="612ad1ae34e0ef0ee3c1fca5a5eb5af2fd828daf28c625e0863e13d9351ae295a52f1d9405fab73abab6861b07f3dac91dc9a3685f2690b92e2705321860fe3d36c697d03c51d5adb90e17aedcad7cafe0888bb67567ba39f5fecd2b0995af147ba169cb084d59ba6455f0b7bb8bf2143a70952e6374359b7c7c37b023ca7ce069171ffe0a9c47", @ANYRESDEC=r3, @ANYRESHEX=r1]) (async) socket(0x3, 0x6, 0x6) (async) connect$bt_rfcomm(r5, &(0x7f0000000280)={0x1f, @none, 0x1}, 0xa) (async) pidfd_getfd(r2, r5, 0x0) (async) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000600)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async) 20:38:05 executing program 5: r0 = geteuid() (async) r1 = geteuid() (async) r2 = geteuid() setreuid(r1, r2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000040)=0x0, 0x0) (async, rerun: 32) r6 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) (rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0xf2, 0x0, 0x20, r6, 0xfffffffb, '\x00', r5, r4, 0x0, 0x4, 0x0, 0xd}, 0x48) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000040), 0x0) r9 = pidfd_getfd(r4, r3, 0x0) pidfd_getfd(r9, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x4, 0x0, 0x5, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0x3d}, @cb_func={0x18, 0x8}, @generic={0xfc, 0x2, 0x0, 0x4, 0x81}, @generic={0xff, 0x4, 0x3, 0x0, 0xe01e}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x3d, 0xb4, &(0x7f00000001c0)=""/180, 0x40f00, 0x8, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x4, 0x90f, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r4, 0x1, r7, r3, r8]}, 0x80) (async, rerun: 32) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\'\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf250a00000008000600", @ANYRES32=r5, @ANYBLOB="050029000000000005002a000000000008000600", @ANYRES32=0x0, @ANYBLOB="0800320008000000050023400000000008002c000700005d2aaf35a7fde75f97f812b382a6ab4b00ef7aa4214b5255b4d5d81a6e0bdce9dee65bcd62baa16056a30d07838f9a4ccb8287d8467947596b9b92b32c19589de39dc2ca5e59ae9565254374ac71aa9d1e4d8300000100000000006c9847576d981da459185396949fa9fa0be86de1e88b040088d8d9675d7de1e5aa546c35334b705519f03950458bc212cee9b8ad9a6c9575316c33479af391cb97d7906a5b30af5fbb5c678424042ec257dec57423a82d963e62f764bcda1eb177900d11ff22f7bec75647c0299932"], 0x4c}, 0x1, 0x0, 0x0, 0xc050}, 0x24000885) (async, rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x3, 0x332, [0x20000240, 0x0, 0x0, 0x20000270, 0x2000046c], 0x0, &(0x7f0000000000), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x0, 0x0, 0x17, 'macvtap0\x00', 'netpci0\x00', 'gretap0\x00', 'veth0_to_batadv\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, [0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="7ac5bc4f0a10", 0xfffffffffffffffd}}}}, {0x3, 0x1c, 0x892f, 'syzkaller1\x00', 'ipvlan1\x00', 'vlan1\x00', 'bridge_slave_0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0xff], 0xee, 0xee, 0x126, [@state={{'state\x00', 0x0, 0x8}, {{0x7ff}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x1}}}], [], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x5, 0x19, 0x9200, 'rose0\x00', 'veth0\x00', 'gre0\x00', 'ip6tnl0\x00', @empty, [0xff, 0xff, 0x0, 0xff], @multicast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x9e, 0x9e, 0xd6, [@state={{'state\x00', 0x0, 0x8}, {{0x6}}}], [], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}]}, 0x3aa) (async) setreuid(0xee00, r0) (async) socket$inet(0x2, 0x5, 0x3f) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) 20:38:05 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) pidfd_open(0x0, 0x0) 20:38:05 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 20:38:06 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:06 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) pidfd_open(0x0, 0x0) [ 1449.213163][T17280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.229187][T17288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:06 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:06 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40308, 0x0) mount$binderfs(&(0x7f0000000180), &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000240), 0x1900000, &(0x7f0000000680)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746168733d676c6f206106000000783d30303030303030303010303030303030303230303030202c61707072616973652c736d61636b66737472616e736d7574653d6d61736b2c7375626a5f726f6c653d5e2b7b2c726f6f74636f6e746578743d73746166665f752c726f6f74636f6e746578743d73797361646d5f75ad387000"/156]) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x1018001, &(0x7f0000000400)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030313737372c6d61783d3030303030303030303030303030303030303030ea6266ad7d565e8e1a19703030322c6d61783d3030303030303030303030308c9a1bd6d7162b5213bfdb4630303030303030303030372c6d61783debe5606a12ef447730303030303030303030303030303030303030303031312c6d61783d30313737373737373737373737373737373737373737372c6d61736b3d5e4d41595f524541442c66756e633d504f4c494359"]) r0 = geteuid() setreuid(0xffffffffffffffff, r0) (async) r1 = geteuid() setreuid(0xffffffffffffffff, r1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x20048041) (async) mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={[{@stats}, {@stats}], [{@smackfsdef={'smackfsdef', 0x3d, '%'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) (async) mount$binderfs(&(0x7f0000000340), &(0x7f0000000380)='./binderfs\x00', &(0x7f00000003c0), 0x2000, &(0x7f0000000840)=ANY=[@ANYBLOB="852f4255c0afa78fe7df9bc6593fe61cbf11072a60807d387bf732e62b65c0cdc4f9bb1b386a0f70f867dd896d2f66e77565469c94eefe557303b85993d943c183b5fbcecefc8536eac12946da43257d394acc3250664fc3d9f991717d731c4a9357f9e2dbb0a2465402afe80803780ee40f1d6dc8e7ec96546f", @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYBLOB="612ad1ae34e0ef0ee3c1fca5a5eb5af2fd828daf28c625e0863e13d9351ae295a52f1d9405fab73abab6861b07f3dac91dc9a3685f2690b92e2705321860fe3d36c697d03c51d5adb90e17aedcad7cafe0888bb67567ba39f5fecd2b0995af147ba169cb084d59ba6455f0b7bb8bf2143a70952e6374359b7c7c37b023ca7ce069171ffe0a9c47", @ANYRESDEC=r3, @ANYRESHEX=r1]) (async, rerun: 32) r5 = socket(0x3, 0x6, 0x6) (rerun: 32) connect$bt_rfcomm(r5, &(0x7f0000000280)={0x1f, @none, 0x1}, 0xa) r6 = pidfd_getfd(r2, r5, 0x0) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000600)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) 20:38:06 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x40027, 0x0) [ 1449.327103][T17300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:06 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0x0, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:06 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) 20:38:06 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0x0, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:06 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x40027, 0x0) 20:38:06 executing program 4: r0 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) setrlimit(0x2, &(0x7f0000000040)={0x7fffffffffffffff, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r1 = userfaultfd(0x100000) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x1120780, 0x0) 20:38:06 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) pidfd_open(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) pidfd_open(0x0, 0x0) (async) 20:38:06 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40308, 0x0) mount$binderfs(&(0x7f0000000180), &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000240), 0x1900000, &(0x7f0000000680)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746168733d676c6f206106000000783d30303030303030303010303030303030303230303030202c61707072616973652c736d61636b66737472616e736d7574653d6d61736b2c7375626a5f726f6c653d5e2b7b2c726f6f74636f6e746578743d73746166665f752c726f6f74636f6e746578743d73797361646d5f75ad387000"/156]) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x1018001, &(0x7f0000000400)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030313737372c6d61783d3030303030303030303030303030303030303030ea6266ad7d565e8e1a19703030322c6d61783d3030303030303030303030308c9a1bd6d7162b5213bfdb4630303030303030303030372c6d61783debe5606a12ef447730303030303030303030303030303030303030303031312c6d61783d30313737373737373737373737373737373737373737372c6d61736b3d5e4d41595f524541442c66756e633d504f4c494359"]) r0 = geteuid() setreuid(0xffffffffffffffff, r0) r1 = geteuid() setreuid(0xffffffffffffffff, r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x20048041) mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={[{@stats}, {@stats}], [{@smackfsdef={'smackfsdef', 0x3d, '%'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) mount$binderfs(&(0x7f0000000340), &(0x7f0000000380)='./binderfs\x00', &(0x7f00000003c0), 0x2000, &(0x7f0000000840)=ANY=[@ANYBLOB="852f4255c0afa78fe7df9bc6593fe61cbf11072a60807d387bf732e62b65c0cdc4f9bb1b386a0f70f867dd896d2f66e77565469c94eefe557303b85993d943c183b5fbcecefc8536eac12946da43257d394acc3250664fc3d9f991717d731c4a9357f9e2dbb0a2465402afe80803780ee40f1d6dc8e7ec96546f", @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYBLOB="612ad1ae34e0ef0ee3c1fca5a5eb5af2fd828daf28c625e0863e13d9351ae295a52f1d9405fab73abab6861b07f3dac91dc9a3685f2690b92e2705321860fe3d36c697d03c51d5adb90e17aedcad7cafe0888bb67567ba39f5fecd2b0995af147ba169cb084d59ba6455f0b7bb8bf2143a70952e6374359b7c7c37b023ca7ce069171ffe0a9c47", @ANYRESDEC=r3, @ANYRESHEX=r1]) r5 = socket(0x3, 0x6, 0x6) connect$bt_rfcomm(r5, &(0x7f0000000280)={0x1f, @none, 0x1}, 0xa) r6 = pidfd_getfd(r2, r5, 0x0) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000600)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) 20:38:06 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0x0, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:06 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) pidfd_open(0x0, 0x0) 20:38:06 executing program 4: r0 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) setrlimit(0x2, &(0x7f0000000040)={0x7fffffffffffffff, 0x4}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) r1 = userfaultfd(0x100000) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x1120780, 0x0) 20:38:06 executing program 1: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x300, 0x70bd2a, 0x2, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x927}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1400400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x40}}, 0x20000000) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) 20:38:06 executing program 2: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:06 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0x0, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1449.681663][T17327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:06 executing program 1: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x300, 0x70bd2a, 0x2, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x927}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1400400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 32) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) (async, rerun: 32) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x40}}, 0x20000000) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) 20:38:06 executing program 4: r0 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) (async, rerun: 32) setrlimit(0x2, &(0x7f0000000040)={0x7fffffffffffffff, 0x4}) (async, rerun: 32) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) (async) r1 = userfaultfd(0x100000) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x1120780, 0x0) (rerun: 64) [ 1449.734144][T17333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:06 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'rw\x00'}, 0x9) 20:38:06 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0x0, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1449.826748][T17341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:06 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="409c3f00080211000001080211000000ffffffffffff1400060045c0030128dd3d3ccb8ab3d157c312f17580197d8e8b1dd741f1ef130a7ceff2b935018cf04ece7184c4397dd530b573ba200490ef80aa4bcae356b4737ad4db3c151dbaddac812800d164975a4cf5a1a3fbb14111f0ed650f647f5c648daf7b7132b75c72db559a8ab05d4a4b6ae95330a078dea51e6fb87f21ffc38e042b0ac69cbcf1ea3b156252c05629f7457fd452aa35ca1f81116502f2598404b986186daff379466f22f68cbbac72034196b5be6081ebb1958db870f14481c1e147752b735c14346d7654cf661f43485aef3fe51a42786b77768ae4f5bd9e002cf413d51bb409f9b6b8ea4b47901fa3db7adb3256ddf7878641c56d512b06859646633231f2cb97093bc90f7e0b5e7d90f2d3a18df9024a3a31dd87cef902ecdfcd40893d1ff926ecb2091ca6653e8a6ae1486374211c0e67fc7e0116ba53e3e08c40e3c81a10c329ce20ac3b585520047737a9cede02f9622b3f5a13aeda5e274dda90b33ca4707a4d6386d7e00b18b18241afc477874477d759ae22482236b4697ad1baaada1228a7f729cec8eaf809ca0414a89b33a16ad6284ceded41b33bbecac0c71df299fbce96e6e2f51a2ebb351addeccf3ab224c830c9f8fca8aef19c01e9a11dcaad6882651e214cd93b5367a936c5eb8237cc78ec086375fd399203e6e73914deff41067f3bb7f9"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:06 executing program 1: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x300, 0x70bd2a, 0x2, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x927}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfff}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) (async, rerun: 64) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1400400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x40}}, 0x20000000) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) 20:38:06 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0x0, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1450.143865][T17359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:07 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) pidfd_open(0x0, 0x0) 20:38:07 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 20:38:07 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) r0 = geteuid() mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0xc084, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYBLOB=',smackfsfloor=./binderfs\x00,euid<', @ANYBLOB="294c4e7e5bcf785ec055e0131d3d6ed8f166f26c505df9cb085bb25533a07359805270de0a3fe7fc41e4cbcd233e44cd213f1d2b2d321a7a27f0574329b28aa28e6d39d98ea5912caa6f69e36662db7bb450ef2a0c11f33c4bd565983bc67acad57141ff7cd6f42aaaf952df496f600447cfc6856ce0a8f539bd9ea30497eed098f9b230f9e956f5f75e44dd02c0be652e319f9422713598064923260c2bfee22110ab9df85bf700e1815d0b0ca5224fdc004286efd8d1a52a35f1660644f36e1b71a6e2e5d00caab4de4cd44a73cabed324ded742f4ab3c18ec11278f77350d7d8848f92dd94031f0027182c5086a0fc90cba97", @ANYBLOB="ac7365636c6162656c2c646566436f80346578743d73746166665f752c00"]) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000001500040026bd7000fbdbdf25050235000100c51780a8bfdcfd0c6ac9a60d018dc06c59f2ddb451c784b7641bbae1fb8196f4bd67db92214b7a1379d5b5000000980001009fe2f769f5fec549e31954c3e3e37b19ba2f0d67b86ac31520e3ea896aef6cdb0518b1fbf923134ceec654af0f3fa9a793f642ce901a408904c5b5ba61be2bc403058aee55d6d4dd553e8572f681f56deb7a4cb9e53c91ef4e41bd823bbebb4ef67fedc6ce0624a21c6a5dcb84ad86f207e7ed7c455a9716438b769002f0f12c03d3af6ab55ac045d581ab611fb39a725c3f9bba0000"], 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000001640)=0x3) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) get_robust_list(r2, &(0x7f00000015c0)=&(0x7f0000000400)={&(0x7f0000000340)={&(0x7f00000001c0)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000001600)=0x18) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001940)={r3, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001740)=[{}], 0x8, 0x10, &(0x7f0000001780), &(0x7f00000017c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001800)}}, 0x10) 20:38:07 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x0, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1450.190372][T17359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:07 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x0, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:07 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303737373737373737373737373737373737373737372c73746174733d676c6f42616c2c6d61783d30303030303030303030303030303030303030303030342c6d61783d30303030303030303030303030303030303030303037372c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61736b3d5e4d41595f57524954452c736d61636b6673666c6f6f723d295e2c66756e633d4649524d174152455f434845434b2cd51f636c6162656c2c7063723d30303030303030303030303030303030303031332c00"]) setfsgid(0xffffffffffffffff) 20:38:07 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) r0 = geteuid() mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0xc084, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB="29585b650d0ca1d01d9d7e9b851668121d78a7c56671b1393a26fd6de54a9e1a0c7a8079437e140d497d381102201b6540e80773a12c2b2042a4f34603fcaa376418e5670b18c8b1178ebdc6c5d754c0cfd5aef3b2a9cf0a7ea6ad6eacd72b8b7222155cce6838b566a754e57d6853bdb65d2d875db96d6b4a96351b97f12b90f6f72823c251077f6e3d9e901b8fa33f55f3654372e8500c6c09911194394ec492a0e0a2bfc9bdcbca5cc903a1e36d79099ade6c21185ba99b5d403b625649c3d9eb32a5b8ae0bf8a15b1b048491110a5242566fab772c528871d41da35d5a7d99792f0842719575f2e00a71460cf60acbf584ccdebf02f797cca8215fbe3c58114eed5e3aa145d416b1c637a17ddb3aec360bdd56b562fd1fab74a86a89516e91653b887a361d812d6dfd3be1164a19ed2d309e8fabd002adcf4a4cd1ed1c07bfec7c0b0de65b50b2864af8dd9429c915737dd818109dcc4fda4dc27e1089e882621271eea7d21b59fd027de70b98816c863f52cba6599ea8d3f8b2df4871ae700b91cefab639c0db29a175039333105cc41b66689072479c9a6ad1ab95b69496991d17ce1476bd46459837a2c0e4bd2d7507427d3b7e0ebaf568dbf6de2e43dfa2d5a5e7ebeeccea9bd916308d014316b834a205bdf6dabf26c8fcac79cbcea9f647ee5e7c102505b86bbe739854b9c2767cf0c7a7a0c61487027ba6de133f2ef201b0cbc1e113a334c403195fa0bdb61c5a92808a7e45179da09e0946a8102c533c4fd1c4d1d3a3029145b4143e2fba66b0ae52390a416005aff2e61d2e362b14bda8d39c28594ba6fc248d03de1f7841b284751cb0680a4ad203eee9f3532171d98ae5b9e0bb6ace75d3d9e622a761292878e39fe10d42566ae8c88625a4fcedff83d1dfb4a21ce0e4fbd3faaeb196787f32fa25d77c64cf6fa471aecb9728422b267f30418ad65a602fa900568669458dcfc19d1ff564f3b3440ecd4c56e042d2d5abb6f0e5b60fdbe543499ce5a10c29335e545739631fb771085b1df73a3edbf6f30d3c64185eb7e48b50b820c20e3abad7ae887c2f96c9fff8c15de659a2183bba84726a22dd8aa45f14581dda0d5f22c8266a7d71e370275a622279a8e8c113418c8220a133a124301a51fa5383c2e8c7fe175945781f34a20f92d7a9ea6ef220e8aefd226a76f5ffdc28fa2cb0e19b68d694c025f4c85ce2c95cef6d66a0ed26bbf1c719d1817480c924e0892d4f2f4047b60066de76e05d2a54b40d9cb2a2af00200e7a40924bfe12a012d22c8b8e2ea1e26172672db6e8f0026d9e13838d1956758902aec74c399b77e10ba61a43361dfd9164231cde4032e8d8e87cb67c7694b978f267719b4fa64eb8dd20959d7c055598b8aec2ba2eb5f80cf132db23e9981433620594bb053c6b7abb56a444866654d9fe822f637a42e44fbadf2608cf4e6ccec1c7ce6bc0dd7f8b5c60e5967738932d5f8bb981838e5737bfb0b2460eb7f354194afaa0b55ba53832dc8ac6d0376642476a2f4e9efbe9faf19a722064d7241c12b03792cdf6c8554d25da369ac0aec28424e61cd4121c56ed2d60ac5c49e937f4eaf7e1bc8387120bc8f92177a5000964b9708aba29da5033c67c21f3121b5902f8242af59b5a0f1abe4b05dbb94281132a3278692d49cb278fd45f2a56fa2d086f8bbab9c60f7aaf5097f9aac9be80d3d5b2b6362dee9953e43100fc17d8675fdaf7f5c563da4a0211f49a1b58a1fccf5d4f3921754b4aa5dda3677d30a872799caa96b5dc668f857065d549c1147802d2aa0669d0d494bce77c2475c8f02a335eb2d863d0c84e9448afe8a6ee43d0c2750cdc390c3460ce2f36904d671d493d3b71fccb1f73f844e9e3119a65f05774d0bc02fcd353df770ed37dd40c9b7ea0fe4ebb9e561cac092b5449cfed5353b2dbb02f542add21f8666195bb0d2bd1a00fc945302c2ff6644c5029d3c7c75b1b65125243defc30facddb3aadfac5a23c06dea0a50b242dd4f6ae441f0a6c60d1212cc639887203f989b16ced8ab664eb891f32559228767b082b3c35bf162021d0cb6e8415b67de04f3ebeb49b90d751554a33805a0d78c7a2137247b3173f46d5bb54201a18e8e6b5b3a49b3c661c3c61a94d4cc1881d77316bd20960921adaa7539286b74904a208fd7e2bbe4a1727ca1ee4a1e1b2df3bd72ab341725a554e4f3df30b4ca9b1ca4bc4267c6067363734105c8387c5118063cdb396a200d6f7fff59fb1c32c642b1f0dcda9af99525c088cc13e684d0f351b525ae428e69901cf62c8fd83a6d78c303423973bbc141b8147700dd3b53a82ddfdd8ce4e3b8b5c5a904cd48864efa717935ee0c61ce1a61506c7aee9172f0c8494ac71143c0c0c6c557c9b8f0615c74617121b43267e1108b4f9bd01dec029d4c04b2c9c4d3b89d1a6f44571e916a4dcb588861ff60b0a19b287f10b27c246d971b564b5a5f591c1df045c5aab413e43c30784620d1a376a00b1f07a2932a632bb8f5dddbd79466fda137b968dafac4b919628038d9a8966620c599631f8553a02a747ea3e1eedd9805511907b05c46cd727cb19daba3045450256e696acc2bfe5e07e1e5c3793876d32d2ced26bee24cb4ae43e157973a196aa7c1852b2d490f5568ebd279b24070ff59212fd0af6b240c722d55219f8b4a8c599c5d23a1f3b18da12da0c7f89285d807c4133836ab86e4a40ec9778c6cd565b6c4780a8d88a282dc4d01d90b16218039a01c98e3de00268b90c93dc0b5a27f4d3b83b10411c8fe6006e97d959c13808249a23d6268b697b58586dee4a5217d72175684d62f405884f4e7b11711c6cf666ee3b228f22141fb02957e1fb6f62851080877f38ed88e311f0c3df3b63303939627e23bc579ea91a1442a90366a12fa5a30c09b8d888c7553f24af6b55d4e6210f13124893f8b743d8c29074370c00b01f0842a8d7de1fdae2592090eb9a661d6ece7d627663801ce43b99983cd4baf35aeb4a9c5af6d4aa7659ef21c6341c61c61cf4bad20f2115d9d54f6643ebb0d644f238e12065813a7d2aa16935a7b41142779c86e362953b791044b39a85e0084153b4e7376c04ed40c28e78bb6d081f99abacc8e558d2dc5d237a993e23566be710feaa903ae6909fa695ac6d232477798fc84076402621bc83b25aa03146dcd9d5a5b4236438c993e3ca48db9feb5f85640f64f553e64f6b2f212677e31adf7e1d48a624ce8533ec36644e50ecfe1517954fc54fffa326376fd4e8f05ded3b1723a8f87ca3cb466750cb7aa95ae7a18fb9b0e56d600fe74c4b2ec91eddc6f249d259ecba485d6ce8cd5352543b685b5b6146866cde6382e8fd908b909c8be147a175b01e06c15eda5e8108734f4f50810998962ef11fd83811e35583d28eb293bf712ebd79560b54f8c229e698fc405249b6a5b948319b14375ae7af38fd9ba8ef3a5c6bc3e0b497b0a4cb20cc57afdaad41d9b282504302ba35300e66e921724b803cbd3ce69004f94781a833b56969f106b1eb585dbbe3b89f495533bcea49b3ae04595153002e3b0ddbb821ad87105d3f5e226ea424600ca9979f370c32e02e3d9a8d2318b66dfce1833f7a7d1ba80d5b28a98c8792c7c941be7545bfb65127d76c54360011be11c99621f981885eee493361f7fc23b3559a1e92817b5c09dc1ca5ebf6b05d625dbc4b351444b52e6b617b00d9f886c4cac8c3b4d94ce9e2db99330e4ff05445c738f4bbcad6ee5f6a5dcd4ec720d6a08462e8aaa2f5f35d8ac2701ef5465ffce87c382a69f49ec5a608042774bd2fcde46cf935e7491c4894f28e84d92314f434c8468115566c6a2651b0bfece0c5ef3049e0a0dbc0b19b244a9bd0862dc79cf1dbfb652ac8b03d6606534bde51bf65545f8b6c580af95ba2d327176c92dbe68521d5f10a45fe62e6399166ee8ccc1172eea7609829efdac54577ca275be5e6ef846505a757a5de8cf623f25f0076dae7951fa695e6652ba7b8eb63901d26395c76afe29abd394619674dac7b58bc95716b6ac767d55b5e03a26d9899c08f067d9d76be7de001c0194112f8d1451c8d8384342f50f4c2d27712854a850de5bd281819b0b2ee637f31a1e833b17628c31aaf2851a905ee110862da70190d88266cfe0b42914384ac0d702fd12edc93aa2bb29a16f05c3d701f92c24d84e1a5fc2136c0359e42a47d8f1a5e6ce75b0b1185c058e30df69d0ddfd66fb7814aba247139bc30f02c41bb33bb788df05f65d87f475ecdf3dd5c6faf95c3cca2eaa5b7277d462469995c4312478d6f4808a612416cd00defa5edee9c42a55446a3237db53d0f74b848039d1c9ff8f91a6a5da01b2093ccefc9c9f15fc9b45fd9ef056f22693d535cff50573259a343c04c01ded8a6cbe29e8506ecf41dc09eff7c86f7a24c238b75eee6b99e62c4dc3dbe219cb0153daecab0c02ffdb4ce351188b2186e06c3afac6b9dd02da0bc12d118d4affee78e5e70693f8b569ef61e33c334398cb0d021d33264dc5b3cc4d26c3dc1ddc18a908cbeed4d60c9b35b25818b3ef16676e8af5aa58aa9d29b939c460ba56fc5e5eb998188258016c328ad5d3ba1d249797c23b9fb56086bad2437d757eb3e8659e35f25e389cb7da4d96dd34f5b4e54b871c8c291a30277b4bd3889d1b88a2420b32d6d85e2f136a0cc66935cfcdbdb87eee5635b0f133f4d0291340c9253c696ddea346ae328e7b86f7f26e2064f7b1685be949f062ff7b21593b1995559cfadd5965e565bf22a5a7010d59b328600ad97d5279de7ed268683af2acc8df8e64aadbcb465c9abfe152cec3722a41020151be505708e4d2621a62e3687629aad8dad59951297458819034c2ff7513125aec9281ba9af59f2a34b7176f058a5a4f67837f72e91687ec8d45e93fc433f7b37490e6dbfae66a2dbac2d6b9e19c1759aa538a31c7802bb58e519a92cc8ce87df969d88e5075721fef6d92485ffbc8172ca2629a70c5e6b461d3e445f7d573d929c75a2a990973bad76084a66f98600efce6225ff02c295390142192fcedac1e45552701202720b940db3c29e6d819b336bfbdc0168efe9ae0483dcef30048d83c6ce16762616e35f455fde8cba8696dae4799bf10eb6c5bb7fb77d57507cd715d23f30bb9a6d3ab8cab8187cae73f2d0bb867b158b8430ccdaca524d494336f5be6504b802e64af60f475695c2bf30b4e10aaece61ee16da80801e3bf68503eae10959e669ca9e2c5cc49830d62ad7f19167ae2295a376b3424bedfce8fbf2c881ed26dde830ca43a5111cb498f455b8e613be2eefac1a7010bdb51eb687c8394a52a440eda6a2786ab6317ddbc7b5163d0607c8705df5171d2a9c58be8b6d51949e588d83679a30188a7b063d3ee2ce1f5b63ef0a594a97d3f893885760fce99e2807b0a9d45e29d5484dbe9e93bfac7ed7da9692193533426aef6470b7fa175724f6320ad49c0ee5dcdac82eb65e70e2ebb1a041a3bbbdcd19ae39db0e3e07a3a60b3ef3866a82f3098935e1749c8a433fc412acd00e061e5d14145889fbe0b61fe28a29cad1325e0fd7e5a110d913e0f3cfe7e1e99eba7536295de53ed6b67276aab4fe59a12b6d32197395c533d9813f5fb5d994240e3c3260cbb7d6d86fc7b8059510bc29fa626c177af5ce459f853652ef89e746f72fdc34c1c5b909709eeb844d7b15cdc19f474418b863157593df643b8676bfa6c49aae83af01767f3e59afb62163014088941af5fe6382e5888ccdeaf502306f8eac87bf45b9762bdd8c1b1156ac35f6", @ANYBLOB=',smackfsfloor=./binderfs\x00,euid<', @ANYBLOB="294c4e7e5bcf785ec055e0131d3d6ed8f166f26c505df9cb085bb25533a07359805270de0a3fe7fc41e4cbcd233e44cd213f1d2b2d321a7a27f0574329b28aa28e6d39d98ea5912caa6f69e36662db7bb450ef2a0c11f33c4bd565983bc67acad57141ff7cd6f42aaaf952df496f600447cfc6856ce0a8f539bd9ea30497eed098f9b230f9e956f5f75e44dd02c0be652e319f9422713598064923260c2bfee22110ab9df85bf700e1815d0b0ca5224fdc004286efd8d1a52a35f1660644f36e1b71a6e2e5d00caab4de4cd44a73cabed324ded742f4ab3c18ec11278f77350d7d8848f92dd94031f0027182c5086a0fc90cba97", @ANYBLOB="ac7365636c6162656c2c646566436f80346578743d73746166665f752c00"]) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000001500040026bd7000fbdbdf25050235000100c51780a8bfdcfd0c6ac9a60d018dc06c59f2ddb451c784b7641bbae1fb8196f4bd67db92214b7a1379d5b5000000980001009fe2f769f5fec549e31954c3e3e37b19ba2f0d67b86ac31520e3ea896aef6cdb0518b1fbf923134ceec654af0f3fa9a793f642ce901a408904c5b5ba61be2bc403058aee55d6d4dd553e8572f681f56deb7a4cb9e53c91ef4e41bd823bbebb4ef67fedc6ce0624a21c6a5dcb84ad86f207e7ed7c455a9716438b769002f0f12c03d3af6ab55ac045d581ab611fb39a725c3f9bba0000"], 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000001640)=0x3) (async) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) get_robust_list(r2, &(0x7f00000015c0)=&(0x7f0000000400)={&(0x7f0000000340)={&(0x7f00000001c0)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000001600)=0x18) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001940)={r3, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001740)=[{}], 0x8, 0x10, &(0x7f0000001780), &(0x7f00000017c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001800)}}, 0x10) [ 1450.252365][T17366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:07 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303737373737373737373737373737373737373737372c73746174733d676c6f42616c2c6d61783d30303030303030303030303030303030303030303030342c6d61783d30303030303030303030303030303030303030303037372c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61736b3d5e4d41595f57524954452c736d61636b6673666c6f6f723d295e2c66756e633d4649524d174152455f434845434b2cd51f636c6162656c2c7063723d30303030303030303030303030303030303031332c00"]) (async) setfsgid(0xffffffffffffffff) [ 1450.318066][T17371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.338198][T17373] binder: Bad value for 'max' 20:38:07 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x0, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1450.425658][T17381] binder: Bad value for 'max' 20:38:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) (async) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) (async) gettid() (async) sched_getparam(r0, &(0x7f00000000c0)) (async) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) (async) gettid() (async) sched_getparam(r2, &(0x7f00000000c0)) (async) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) getgid() (async) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) (async) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) (async) 20:38:07 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) r0 = geteuid() mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0xc084, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYBLOB=',smackfsfloor=./binderfs\x00,euid<', @ANYBLOB="294c4e7e5bcf785ec055e0131d3d6ed8f166f26c505df9cb085bb25533a07359805270de0a3fe7fc41e4cbcd233e44cd213f1d2b2d321a7a27f0574329b28aa28e6d39d98ea5912caa6f69e36662db7bb450ef2a0c11f33c4bd565983bc67acad57141ff7cd6f42aaaf952df496f600447cfc6856ce0a8f539bd9ea30497eed098f9b230f9e956f5f75e44dd02c0be652e319f9422713598064923260c2bfee22110ab9df85bf700e1815d0b0ca5224fdc004286efd8d1a52a35f1660644f36e1b71a6e2e5d00caab4de4cd44a73cabed324ded742f4ab3c18ec11278f77350d7d8848f92dd94031f0027182c5086a0fc90cba97", @ANYBLOB="ac7365636c6162656c2c646566436f80346578743d73746166665f752c00"]) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000001500040026bd7000fbdbdf25050235000100c51780a8bfdcfd0c6ac9a60d018dc06c59f2ddb451c784b7641bbae1fb8196f4bd67db92214b7a1379d5b5000000980001009fe2f769f5fec549e31954c3e3e37b19ba2f0d67b86ac31520e3ea896aef6cdb0518b1fbf923134ceec654af0f3fa9a793f642ce901a408904c5b5ba61be2bc403058aee55d6d4dd553e8572f681f56deb7a4cb9e53c91ef4e41bd823bbebb4ef67fedc6ce0624a21c6a5dcb84ad86f207e7ed7c455a9716438b769002f0f12c03d3af6ab55ac045d581ab611fb39a725c3f9bba0000"], 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005) (async) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000001640)=0x3) (async, rerun: 32) r2 = gettid() (rerun: 32) sched_getparam(r2, &(0x7f00000000c0)) (async) get_robust_list(r2, &(0x7f00000015c0)=&(0x7f0000000400)={&(0x7f0000000340)={&(0x7f00000001c0)}, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000001600)=0x18) (async, rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001940)={r3, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001740)=[{}], 0x8, 0x10, &(0x7f0000001780), &(0x7f00000017c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001800)}}, 0x10) 20:38:07 executing program 1: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303737373737373737373737373737373737373737372c73746174733d676c6f42616c2c6d61783d30303030303030303030303030303030303030303030342c6d61783d30303030303030303030303030303030303030303037372c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61736b3d5e4d41595f57524954452c736d61636b6673666c6f6f723d295e2c66756e633d4649524d174152455f434845434b2cd51f636c6162656c2c7063723d30303030303030303030303030303030303031332c00"]) (async) setfsgid(0xffffffffffffffff) 20:38:07 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 20:38:07 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x0, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:07 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @initial, @broadcast, @device_b, {0x0, 0xe23}}, {0x2, 0x0, 0x3, 0x0, 0x40}}, {@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @from_mac, @device_a, @initial, {0x7, 0x5}}, {0x8, 0x1, 0x1, 0x1, 0x5}}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="eff68baf1ef8d26e6b7be6059ef5ceda5800663c4b88e1e28c9fc6bb11a618bfc387b201a637f65790b354f589fe818d9857c64a2f521d4e3a2ed3189f99efd09b64540c2c6a0c5b936c721f54b1833f5690512832d20b9ed0314334dc07768f513289a6d756a7bffebb284222290ca4ab0bf3557c598e4841eab140191b460f6c80d6e68f82e112f716bf180dcc9807deac6c8e9d9d61fa77ff5baab7021e5d0716432363c9d78a1f4794f26c52faef3e00833bd96228381f9e8ece40680c12b83d6d86e1ad0dcbeb2985dc73a1d01c6ad7a72260fd148ecd869005180d2bed68cc89b8c00958a62c70cb70c4fdde76547749d06993d4bf338e9764e1dc7b1c2b4c91aebd32cb3499c4aa6a18cbcbf52be0bf0a238a6dd2fc7eee003e83b09f29cfcd97ab03e7abaece22207a6972b1bc7f9bb2e37f948362c3227f9be11ae5de9133aaab01ceed6bc2104e4405ada66724dccd9d48c15dad19acee13d8e2b7b5700aacb7b29f5a8738f364fb2f0d7497ca99cd1c4ac3d50a45545e9a8a437d357aa8093d15a401e268df6a6a7f71eac93b6da3f8a05cd86a89ccc8decc33099bfb5dba54a5fa321f1935adb7a00ef995e299ad2921cb8beef2218a6365720199cfe6e1c535a703dabd7d36c7074554e5d1d625911097c26dadf25495e6e388b60d04411a2345bf7f8222ac1d998b1b94a9bef2fe6f85d4067d3e585d02fd9c13588d2d2ced7cdd16197c05feba8ff1d9b23e1516cfb063db558d4e5bdbddd122e3f70c7b3284e9f8f81082b7a44ddb5f132784921383960855477016ebfbfcd0c67e96fa3a433c71d9fbd5b8be19cf022c18b49f565f3fbe61b27c1232c79c9df3d4fac570b62dd9931e4ae3e2b23bb71cac563499942cfa4ef3040b14efd1fb4acc400412a154895e3bdd5c1c18dbd5fbc5d75b5a64de30b5807f0359500c4f1e479a0d05fbef45dca92179610c8999ec248f8d6043ca63624e12b52e305f2c1e897004d1e1ca47163443b46f0a1e0c8c24623b547de9ed8bfd96510e16b1d5bbb865a873228fd92cc600212dedc235239ca2de7b1ebcbfdb2cdaaf3cf79232d7cc22bbd6f9a41c9b70aaab57f13c9c9694669054259b7ba4e7bd6d0acc482f47381fc3249a9c8d613200ef2cf747a9ca06570a8fc0517088fd2890e292b5a7e8cce78deabaaf06d3c60b6df56250731a97e729cefa76ca083dddb233da441b94dad6e66a8af80469cccb48de28f37d5cfdf8843342b3acc8935dce9482db0b84b3585a1c4443fb1c6f6e6e7dc5ab5097fdafbf99960417abded6bf7701f76c08a570d92948cfa14004c484b000b8312bebe5e2cf63a908f1cbbdf95c18c2faa499dc412cbbcb0256c74a42c2a2c72ac6eca5bac7a6eb0f9c74cfcef7ed3f98b4966178df565f51cdf56816c3f8e0ec435fb005044b8d18a6f4a4cc553789bd92ddf047d9ae3dd6f489e47abd358d75cb85f5448762e7973d25d30f1d588b0b82785a9b37570058f9daafc4b25fb119056cc92f5ae6084980b5c8e7d3b5ad55ad0b207b4f4f40d493351bc21cfe275f66dbcb5613bfc02d442c230d6b9175a90047c3d5a6ab1190460e3c974125b4f659a9f1a597ce664e91b828a626b04ad77469782a091d3aacbc4a4b021c6fe2ef3209466bddb24c99428c855969799672ce2df7ea03d607de13819694d846042385bd45c73869073154bd16f74c4d9dab0625b15699fc3c3c273cae9fac98cfdea6fbcd75d658b61af65bd25e31949e11f606f1b85c1b2f4a4a7ad1ece6d3c33a5d8cf1bcdcbe8615d24cf9c266cf47fe34dd6cb501f3906ac2c76e05d9dfd176e2216a518ba311a024073e13aa1d62acfe3b89c62551aafdcc81da431a3b651830e5b4af1920458b568f2cbdda64346dd16b153d52eac0341080d7f5d595ebd0f14fea9c990c0e1b006de457baaf30ff2b8996a150b8db5b9defd77affa82e0c3d67d817fa4127b578037b46638a55fb2e796c1640335bc78092a8549e6d5915ddcc7308ea5b8dc3aae5db2e94d217cabb199730268cb8205f4efa7abbbaedb009b657c5e57aa00f1bf033ca6f1c6198fe5ca4af51306d71fd1f05f51f40cbfaa9fea9e4984da905d0840b432287a35492ff55eaba1954d28965c95023dde4350fa6c58a4f6033db28213948eddd3fcce0cd651b05ac5fc61997d1aac31f0173ea1abf3b18aafc82357fc1cb1e9bd9760fbe63970c57a668686e4901b572472898a4f6516d11614672"}, 0x672) 20:38:07 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x0, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:07 executing program 1: setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0xfffffffffffffffa) [ 1450.908194][T17389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.925791][T17394] binder: Bad value for 'max' [ 1450.932969][T17392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.962280][T17397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:07 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x0, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1451.013127][T17397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.037106][ T27] audit: type=1400 audit(1650141487.850:200): avc: denied { append } for pid=17402 comm="syz-executor.1" name="nullb0" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 20:38:07 executing program 1: setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0xfffffffffffffffa) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0xfffffffffffffffa) (async) [ 1451.048762][T17392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:07 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) sched_getscheduler(0x0) get_robust_list(r0, &(0x7f00000000c0)=&(0x7f0000000080)={&(0x7f0000000040)={&(0x7f0000000000)}}, &(0x7f0000000100)=0x18) r1 = geteuid() setreuid(0xffffffffffffffff, r1) syz_clone3(&(0x7f0000000380)={0x2111c8a80, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x6}, &(0x7f0000000240)=""/41, 0x29, &(0x7f0000000280)=""/138, &(0x7f0000000340)=[0xffffffffffffffff, r0, r0], 0x3}, 0x58) get_robust_list(r2, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) ioprio_get$uid(0x3, r1) 20:38:07 executing program 1: setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0xfffffffffffffffa) [ 1451.192795][ T6396] Bluetooth: hci3: command 0x0419 tx timeout 20:38:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) (async) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) (async) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) (async) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) getgid() (async) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) (async) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:08 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x0, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:08 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = syz_clone3(&(0x7f00000002c0)={0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x1c}, &(0x7f0000000100)=""/249, 0xf9, &(0x7f0000000240)=""/31, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) sched_setparam(r0, &(0x7f0000000340)=0x7f) 20:38:08 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) (async) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) (async) sched_getscheduler(0x0) (async) get_robust_list(r0, &(0x7f00000000c0)=&(0x7f0000000080)={&(0x7f0000000040)={&(0x7f0000000000)}}, &(0x7f0000000100)=0x18) r1 = geteuid() setreuid(0xffffffffffffffff, r1) syz_clone3(&(0x7f0000000380)={0x2111c8a80, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x6}, &(0x7f0000000240)=""/41, 0x29, &(0x7f0000000280)=""/138, &(0x7f0000000340)=[0xffffffffffffffff, r0, r0], 0x3}, 0x58) get_robust_list(r2, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) (async) ioprio_get$uid(0x3, r1) 20:38:08 executing program 2: syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) [ 1451.286578][T17397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.360604][T17436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.394169][T17443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.413239][T17443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:08 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = syz_clone3(&(0x7f00000002c0)={0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x1c}, &(0x7f0000000100)=""/249, 0xf9, &(0x7f0000000240)=""/31, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) sched_setparam(r0, &(0x7f0000000340)=0x7f) 20:38:08 executing program 4: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40300, 0x0) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) (async) sched_getscheduler(0x0) (async, rerun: 32) get_robust_list(r0, &(0x7f00000000c0)=&(0x7f0000000080)={&(0x7f0000000040)={&(0x7f0000000000)}}, &(0x7f0000000100)=0x18) (rerun: 32) r1 = geteuid() setreuid(0xffffffffffffffff, r1) syz_clone3(&(0x7f0000000380)={0x2111c8a80, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x6}, &(0x7f0000000240)=""/41, 0x29, &(0x7f0000000280)=""/138, &(0x7f0000000340)=[0xffffffffffffffff, r0, r0], 0x3}, 0x58) get_robust_list(r2, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) (async) ioprio_get$uid(0x3, r1) 20:38:08 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x0, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:08 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) r0 = syz_clone3(&(0x7f00000002c0)={0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x1c}, &(0x7f0000000100)=""/249, 0xf9, &(0x7f0000000240)=""/31, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) sched_setparam(r0, &(0x7f0000000340)=0x7f) 20:38:08 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x0, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:08 executing program 4: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) setfsgid(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, 0x1000}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2}) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pidfd_getfd(r1, r3, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) 20:38:08 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) r0 = syz_clone3(&(0x7f00000002c0)={0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x1c}, &(0x7f0000000100)=""/249, 0xf9, &(0x7f0000000240)=""/31, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) sched_setparam(r0, &(0x7f0000000340)=0x7f) 20:38:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000180)="10bd7b110587a99e6f40c643aa1f0dd91d9853ee500014293eb77cb9348dbd3836b88ba0dba89b19ac49a3560bd2bc38d83d9005aaba689a4838d6cf4cbe42b53ca90a65c26980ab2b47bcef0112ce10a773b8d17e98ce160ac610a7fd4a163743af44d3a531d2a0c015967b39289c65ef8e67b27af8e0608b25ec58593acfcb5678925bb585404da4c67557bdab10a0d1687a4f92140682e67f7cc7defa5bd1268f720623bc223edf68d3f1c12445396dd9d0327479b349a4174aa27900e292a474e62affc94da42586ff468b5705f4a369e21b0f3de408eeb0eca6964687efe9cdb6b772470747522ccdbfa9f8", 0xee, 0x4, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) 20:38:08 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:08 executing program 4: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) (async) setfsgid(0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, 0x1000}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2}) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pidfd_getfd(r1, r3, 0x0) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) 20:38:08 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:08 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:08 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x40027, 0x0) 20:38:08 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:08 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x40027, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) 20:38:08 executing program 4: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) setfsgid(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, 0x1000}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2}) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pidfd_getfd(r1, r3, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) (async) setfsgid(0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, 0x1000}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2}) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) pidfd_getfd(r1, r3, 0x0) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) (async) [ 1451.840462][T17474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.850531][T17473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.894263][T17479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.929727][T17474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.935243][T17473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:08 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x40027, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) 20:38:08 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:08 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) [ 1452.122757][T17500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.137816][T17502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000180)="10bd7b110587a99e6f40c643aa1f0dd91d9853ee500014293eb77cb9348dbd3836b88ba0dba89b19ac49a3560bd2bc38d83d9005aaba689a4838d6cf4cbe42b53ca90a65c26980ab2b47bcef0112ce10a773b8d17e98ce160ac610a7fd4a163743af44d3a531d2a0c015967b39289c65ef8e67b27af8e0608b25ec58593acfcb5678925bb585404da4c67557bdab10a0d1687a4f92140682e67f7cc7defa5bd1268f720623bc223edf68d3f1c12445396dd9d0327479b349a4174aa27900e292a474e62affc94da42586ff468b5705f4a369e21b0f3de408eeb0eca6964687efe9cdb6b772470747522ccdbfa9f8", 0xee, 0x4, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) 20:38:09 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) 20:38:09 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0x0, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1452.342991][T17510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:09 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:09 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0x0, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:09 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) (async) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) 20:38:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, 0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000180)="10bd7b110587a99e6f40c643aa1f0dd91d9853ee500014293eb77cb9348dbd3836b88ba0dba89b19ac49a3560bd2bc38d83d9005aaba689a4838d6cf4cbe42b53ca90a65c26980ab2b47bcef0112ce10a773b8d17e98ce160ac610a7fd4a163743af44d3a531d2a0c015967b39289c65ef8e67b27af8e0608b25ec58593acfcb5678925bb585404da4c67557bdab10a0d1687a4f92140682e67f7cc7defa5bd1268f720623bc223edf68d3f1c12445396dd9d0327479b349a4174aa27900e292a474e62affc94da42586ff468b5705f4a369e21b0f3de408eeb0eca6964687efe9cdb6b772470747522ccdbfa9f8", 0xee, 0x4, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, 0x0, 0x0) (async) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000180)="10bd7b110587a99e6f40c643aa1f0dd91d9853ee500014293eb77cb9348dbd3836b88ba0dba89b19ac49a3560bd2bc38d83d9005aaba689a4838d6cf4cbe42b53ca90a65c26980ab2b47bcef0112ce10a773b8d17e98ce160ac610a7fd4a163743af44d3a531d2a0c015967b39289c65ef8e67b27af8e0608b25ec58593acfcb5678925bb585404da4c67557bdab10a0d1687a4f92140682e67f7cc7defa5bd1268f720623bc223edf68d3f1c12445396dd9d0327479b349a4174aa27900e292a474e62affc94da42586ff468b5705f4a369e21b0f3de408eeb0eca6964687efe9cdb6b772470747522ccdbfa9f8", 0xee, 0x4, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) (async) 20:38:09 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="409c3f00080211000001080211000000ffffffffffff1400060045c0030128dd3d3ccb8ab3d157c312f17580197d8e8b1dd741f1ef130a7ceff2b935018cf04ece7184c4397dd530b573ba200490ef80aa4bcae356b4737ad4db3c151dbaddac812800d164975a4cf5a1a3fbb14111f0ed650f647f5c648daf7b7132b75c72db559a8ab05d4a4b6ae95330a078dea51e6fb87f21ffc38e042b0ac69cbcf1ea3b156252c05629f7457fd452aa35ca1f81116502f2598404b986186daff379466f22f68cbbac72034196b5be6081ebb1958db870f14481c1e147752b735c14346d7654cf661f43485aef3fe51a42786b77768ae4f5bd9e002cf413d51bb409f9b6b8ea4b47901fa3db7adb3256ddf7878641c56d512b06859646633231f2cb97093bc90f7e0b5e7d90f2d3a18df9024a3a31dd87cef902ecdfcd40893d1ff926ecb2091ca6653e8a6ae1486374211c0e67fc7e0116ba53e3e08c40e3c81a10c329ce20ac3b585520047737a9cede02f9622b3f5a13aeda5e274dda90b33ca4707a4d6386d7e00b18b18241afc477874477d759ae22482236b4697ad1baaada1228a7f729cec8eaf809ca0414a89b33a16ad6284ceded41b33bbecac0c71df299fbce96e6e2f51a2ebb351addeccf3ab224c830c9f8fca8aef19c01e9a11dcaad6882651e214cd93b5367a936c5eb8237cc78ec086375fd399203e6e73914deff41067f3bb7f9"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:09 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:09 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0x0, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1452.997147][T17520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.006742][T17521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.055010][T17524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.063458][T17520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.091251][T17521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:09 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0x0, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1453.099229][T17527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.114716][T17529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.159351][T17527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:10 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0x0, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:10 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) (async) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) (async) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) (async) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) (async) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) (async) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000040), 0x0) (async) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) (async) 20:38:10 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0x0, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:10 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x4d4}, @broadcast, @from_mac=@broadcast}, 0x10) [ 1453.499228][T17545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.560331][T17556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:10 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x4d4}, @broadcast, @from_mac=@broadcast}, 0x10) 20:38:10 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x0, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:10 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) 20:38:10 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x4d4}, @broadcast, @from_mac=@broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x4d4}, @broadcast, @from_mac=@broadcast}, 0x10) (async) 20:38:10 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:10 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="409c3f00080211000001080211000000ffffffffffff1400060045c0030128dd3d3ccb8ab3d157c312f17580197d8e8b1dd741f1ef130a7ceff2b935018cf04ece7184c4397dd530b573ba200490ef80aa4bcae356b4737ad4db3c151dbaddac812800d164975a4cf5a1a3fbb14111f0ed650f647f5c648daf7b7132b75c72db559a8ab05d4a4b6ae95330a078dea51e6fb87f21ffc38e042b0ac69cbcf1ea3b156252c05629f7457fd452aa35ca1f81116502f2598404b986186daff379466f22f68cbbac72034196b5be6081ebb1958db870f14481c1e147752b735c14346d7654cf661f43485aef3fe51a42786b77768ae4f5bd9e002cf413d51bb409f9b6b8ea4b47901fa3db7adb3256ddf7878641c56d512b06859646633231f2cb97093bc90f7e0b5e7d90f2d3a18df9024a3a31dd87cef902ecdfcd40893d1ff926ecb2091ca6653e8a6ae1486374211c0e67fc7e0116ba53e3e08c40e3c81a10c329ce20ac3b585520047737a9cede02f9622b3f5a13aeda5e274dda90b33ca4707a4d6386d7e00b18b18241afc477874477d759ae22482236b4697ad1baaada1228a7f729cec8eaf809ca0414a89b33a16ad6284ceded41b33bbecac0c71df299fbce96e6e2f51a2ebb351addeccf3ab224c830c9f8fca8aef19c01e9a11dcaad6882651e214cd93b5367a936c5eb8237cc78ec086375fd399203e6e73914deff41067f3bb7f9"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:11 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x0, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1454.181267][T17560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.207641][T17566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.221070][T17567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.239561][T17560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.240958][T17568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.254109][T17566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.277458][T17560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.293673][T17570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.306952][T17571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:11 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x0, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1454.426268][T17568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:11 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x0, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:11 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) 20:38:11 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x4d4}, @broadcast, @from_mac=@broadcast}, 0x10) 20:38:11 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x0, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1454.763575][T17582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:11 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @initial, @broadcast, @device_b, {0x0, 0xe23}}, {0x2, 0x0, 0x3, 0x0, 0x40}}, {@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @from_mac, @device_a, @initial, {0x7, 0x5}}, {0x8, 0x1, 0x1, 0x1, 0x5}}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="eff68baf1ef8d26e6b7be6059ef5ceda5800663c4b88e1e28c9fc6bb11a618bfc387b201a637f65790b354f589fe818d9857c64a2f521d4e3a2ed3189f99efd09b64540c2c6a0c5b936c721f54b1833f5690512832d20b9ed0314334dc07768f513289a6d756a7bffebb284222290ca4ab0bf3557c598e4841eab140191b460f6c80d6e68f82e112f716bf180dcc9807deac6c8e9d9d61fa77ff5baab7021e5d0716432363c9d78a1f4794f26c52faef3e00833bd96228381f9e8ece40680c12b83d6d86e1ad0dcbeb2985dc73a1d01c6ad7a72260fd148ecd869005180d2bed68cc89b8c00958a62c70cb70c4fdde76547749d06993d4bf338e9764e1dc7b1c2b4c91aebd32cb3499c4aa6a18cbcbf52be0bf0a238a6dd2fc7eee003e83b09f29cfcd97ab03e7abaece22207a6972b1bc7f9bb2e37f948362c3227f9be11ae5de9133aaab01ceed6bc2104e4405ada66724dccd9d48c15dad19acee13d8e2b7b5700aacb7b29f5a8738f364fb2f0d7497ca99cd1c4ac3d50a45545e9a8a437d357aa8093d15a401e268df6a6a7f71eac93b6da3f8a05cd86a89ccc8decc33099bfb5dba54a5fa321f1935adb7a00ef995e299ad2921cb8beef2218a6365720199cfe6e1c535a703dabd7d36c7074554e5d1d625911097c26dadf25495e6e388b60d04411a2345bf7f8222ac1d998b1b94a9bef2fe6f85d4067d3e585d02fd9c13588d2d2ced7cdd16197c05feba8ff1d9b23e1516cfb063db558d4e5bdbddd122e3f70c7b3284e9f8f81082b7a44ddb5f132784921383960855477016ebfbfcd0c67e96fa3a433c71d9fbd5b8be19cf022c18b49f565f3fbe61b27c1232c79c9df3d4fac570b62dd9931e4ae3e2b23bb71cac563499942cfa4ef3040b14efd1fb4acc400412a154895e3bdd5c1c18dbd5fbc5d75b5a64de30b5807f0359500c4f1e479a0d05fbef45dca92179610c8999ec248f8d6043ca63624e12b52e305f2c1e897004d1e1ca47163443b46f0a1e0c8c24623b547de9ed8bfd96510e16b1d5bbb865a873228fd92cc600212dedc235239ca2de7b1ebcbfdb2cdaaf3cf79232d7cc22bbd6f9a41c9b70aaab57f13c9c9694669054259b7ba4e7bd6d0acc482f47381fc3249a9c8d613200ef2cf747a9ca06570a8fc0517088fd2890e292b5a7e8cce78deabaaf06d3c60b6df56250731a97e729cefa76ca083dddb233da441b94dad6e66a8af80469cccb48de28f37d5cfdf8843342b3acc8935dce9482db0b84b3585a1c4443fb1c6f6e6e7dc5ab5097fdafbf99960417abded6bf7701f76c08a570d92948cfa14004c484b000b8312bebe5e2cf63a908f1cbbdf95c18c2faa499dc412cbbcb0256c74a42c2a2c72ac6eca5bac7a6eb0f9c74cfcef7ed3f98b4966178df565f51cdf56816c3f8e0ec435fb005044b8d18a6f4a4cc553789bd92ddf047d9ae3dd6f489e47abd358d75cb85f5448762e7973d25d30f1d588b0b82785a9b37570058f9daafc4b25fb119056cc92f5ae6084980b5c8e7d3b5ad55ad0b207b4f4f40d493351bc21cfe275f66dbcb5613bfc02d442c230d6b9175a90047c3d5a6ab1190460e3c974125b4f659a9f1a597ce664e91b828a626b04ad77469782a091d3aacbc4a4b021c6fe2ef3209466bddb24c99428c855969799672ce2df7ea03d607de13819694d846042385bd45c73869073154bd16f74c4d9dab0625b15699fc3c3c273cae9fac98cfdea6fbcd75d658b61af65bd25e31949e11f606f1b85c1b2f4a4a7ad1ece6d3c33a5d8cf1bcdcbe8615d24cf9c266cf47fe34dd6cb501f3906ac2c76e05d9dfd176e2216a518ba311a024073e13aa1d62acfe3b89c62551aafdcc81da431a3b651830e5b4af1920458b568f2cbdda64346dd16b153d52eac0341080d7f5d595ebd0f14fea9c990c0e1b006de457baaf30ff2b8996a150b8db5b9defd77affa82e0c3d67d817fa4127b578037b46638a55fb2e796c1640335bc78092a8549e6d5915ddcc7308ea5b8dc3aae5db2e94d217cabb199730268cb8205f4efa7abbbaedb009b657c5e57aa00f1bf033ca6f1c6198fe5ca4af51306d71fd1f05f51f40cbfaa9fea9e4984da905d0840b432287a35492ff55eaba1954d28965c95023dde4350fa6c58a4f6033db28213948eddd3fcce0cd651b05ac5fc61997d1aac31f0173ea1abf3b18aafc82357fc1cb1e9bd9760fbe63970c57a668686e4901b572472898a4f6516d11614672"}, 0x672) 20:38:11 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x0, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:11 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0x0, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1454.884227][T17593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.935833][T17593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:11 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0x0, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:12 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 20:38:12 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000002c0)={@none, 0x7, 0x4, 0x81, 0x7, 0x7, "e98f4085d91fa090dbef05b744f4bbbaa00d6763a0fa0e551d55c1cbeed9c7a347625f9cc05c50214f2643e614372834842d72c38d5effbc7a37f95a609e0909bd307576dea21ea92e50afd176f011c02c4a781dc7cb6675721f19110211ccfb355ba967c55790e7d52876248e186aa9b6c58b55d15fc72ab90d5998c174475b"}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xff, 0x80, 0x3}, 0x10) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x20000, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socketpair(0x5, 0x80000, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x40) 20:38:12 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0x0, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:12 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000a80)=0xffffffffffffffff, 0x4) 20:38:12 executing program 3: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x404c095) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 20:38:12 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @initial, @broadcast, @device_b, {0x0, 0xe23}}, {0x2, 0x0, 0x3, 0x0, 0x40}}, {@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @from_mac, @device_a, @initial, {0x7, 0x5}}, {0x8, 0x1, 0x1, 0x1, 0x5}}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x672) 20:38:12 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x0, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1455.393054][T17604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1455.405492][T17606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1455.423988][T17607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1455.469052][T17612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1455.491678][T17607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:12 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x0, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:12 executing program 4: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x0, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:12 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x0, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:12 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x30d00, 0x0) pidfd_getfd(r1, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'wlan0\x00', 0x2000}, 0x18) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000001c0)=0x7) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="000005c2ed2ac76c9842f9f397756035b0d6883b", @ANYRES16=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) 20:38:12 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x0, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1455.778269][T17625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:13 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 20:38:13 executing program 3: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x404c095) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) 20:38:13 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x0, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:13 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7f}, @initial, @broadcast, @device_b, {0x0, 0xe23}}, {0x2, 0x0, 0x3, 0x0, 0x40}}, {@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x80}, @from_mac, @device_a, @initial, {0x7, 0x5}}, {0x8, 0x1, 0x1, 0x1, 0x5}}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x672) 20:38:13 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) 20:38:13 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x30d00, 0x0) pidfd_getfd(r1, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'wlan0\x00', 0x2000}, 0x18) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000001c0)=0x7) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="000005c2ed2ac76c9842f9f397756035b0d6883b", @ANYRES16=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) [ 1456.227403][T17632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.248728][T17636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.259036][T17638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:13 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x0, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1456.283111][T17640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.318691][T17632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:13 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x0, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1456.345773][T17643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:13 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x0, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:13 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x0, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:13 executing program 3: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x404c095) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) (rerun: 32) 20:38:13 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x0, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1456.666251][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.706656][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.731540][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.751642][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.763944][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.781220][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.793101][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.814748][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.826664][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.837633][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.850811][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.861805][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.872464][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.887705][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.899134][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.910889][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.921784][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.936457][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.948361][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.960511][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.971634][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.982481][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.994156][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.004731][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:13 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 20:38:13 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x0, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:13 executing program 2: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x0, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:13 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000040), 0x0) 20:38:13 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x30d00, 0x0) pidfd_getfd(r1, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'wlan0\x00', 0x2000}, 0x18) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000001c0)=0x7) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="000005c2ed2ac76c9842f9f397756035b0d6883b", @ANYRES16=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) [ 1457.015864][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.026858][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:13 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x0, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:13 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) [ 1457.064826][T17662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.082818][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.139559][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.148518][T17668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.170629][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:14 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0x0, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1457.184690][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.193134][T17668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.210520][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.225426][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.260523][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:14 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0x0, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1457.313360][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.360792][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:14 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) [ 1457.524107][T17683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.567311][T17683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:14 executing program 3: r0 = gettid() r1 = gettid() sched_getparam(r1, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000400)={0x40000080, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x1f}, &(0x7f0000000240)=""/178, 0xb2, &(0x7f0000000300)=""/130, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x7}, 0x58) r3 = gettid() sched_getparam(r3, &(0x7f00000000c0)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000140), 0x0) syz_clone3(&(0x7f0000000500)={0x100048100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f00000000c0)=""/7, 0x7, &(0x7f0000000140), &(0x7f0000000480)=[r0, r1, r2, r3, 0x0], 0x5, {r4}}, 0x58) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) 20:38:14 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) [ 1457.793187][T17688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:14 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="409c3f00080211000001080211000000ffffffffffff1400060045c0030128dd3d3ccb8ab3d157c312f17580197d8e8b1dd741f1ef130a7ceff2b935018cf04ece7184c4397dd530b573ba200490ef80aa4bcae356b4737ad4db3c151dbaddac812800d164975a4cf5a1a3fbb14111f0ed650f647f5c648daf7b7132b75c72db559a8ab05d4a4b6ae95330a078dea51e6fb87f21ffc38e042b0ac69cbcf1ea3b156252c05629f7457fd452aa35ca1f81116502f2598404b986186daff379466f22f68cbbac72034196b5be6081ebb1958db870f14481c1e147752b735c14346d7654cf661f43485aef3fe51a42786b77768ae4f5bd9e002cf413d51bb409f9b6b8ea4b47901fa3db7adb3256ddf7878641c56d512b06859646633231f2cb97093bc90f7e0b5e7d90f2d3a18df9024a3a31dd87cef902ecdfcd40893d1ff926ecb2091ca6653e8a6ae1486374211c0e67fc7e0116ba53e3e08c40e3c81a10c329ce20ac3b585520047737a9cede02f9622b3f5a13aeda5e274dda90b33ca4707a4d6386d7e00b18b18241afc477874477d759ae22482236b4697ad1baaada1228a7f729cec8eaf809ca0414a89b33a16ad6284ceded41b33bbecac0c71df299fbce96e6e2f51a2ebb351addeccf3ab224c830c9f8fca8aef19c01e9a11dcaad6882651e214cd93b5367a936c5eb8237cc78ec086375fd399203e6e73914deff41067f3bb7f9"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:14 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0x0, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:14 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 20:38:14 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x0, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1457.962506][T17694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:14 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x0, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1458.035271][T17694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:14 executing program 2: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x0, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:14 executing program 3: r0 = gettid() r1 = gettid() sched_getparam(r1, &(0x7f00000000c0)) (async) syz_clone3(&(0x7f0000000400)={0x40000080, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x1f}, &(0x7f0000000240)=""/178, 0xb2, &(0x7f0000000300)=""/130, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x7}, 0x58) (async) r3 = gettid() sched_getparam(r3, &(0x7f00000000c0)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000140), 0x0) (async) syz_clone3(&(0x7f0000000500)={0x100048100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f00000000c0)=""/7, 0x7, &(0x7f0000000140), &(0x7f0000000480)=[r0, r1, r2, r3, 0x0], 0x5, {r4}}, 0x58) (async) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) 20:38:14 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x0, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:15 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="409c3f00080211000001080211000000ffffffffffff1400060045c0030128dd3d3ccb8ab3d157c312f17580197d8e8b1dd741f1ef130a7ceff2b935018cf04ece7184c4397dd530b573ba200490ef80aa4bcae356b4737ad4db3c151dbaddac812800d164975a4cf5a1a3fbb14111f0ed650f647f5c648daf7b7132b75c72db559a8ab05d4a4b6ae95330a078dea51e6fb87f21ffc38e042b0ac69cbcf1ea3b156252c05629f7457fd452aa35ca1f81116502f2598404b986186daff379466f22f68cbbac72034196b5be6081ebb1958db870f14481c1e147752b735c14346d7654cf661f43485aef3fe51a42786b77768ae4f5bd9e002cf413d51bb409f9b6b8ea4b47901fa3db7adb3256ddf7878641c56d512b06859646633231f2cb97093bc90f7e0b5e7d90f2d3a18df9024a3a31dd87cef902ecdfcd40893d1ff926ecb2091ca6653e8a6ae1486374211c0e67fc7e0116ba53e3e08c40e3c81a10c329ce20ac3b585520047737a9cede02f9622b3f5a13aeda5e274dda90b33ca4707a4d6386d7e00b18b18241afc477874477d759ae22482236b4697ad1baaada1228a7f729cec8eaf809ca0414a89b33a16ad6284ceded41b33bbecac0c71df299fbce96e6e2f51a2ebb351addeccf3ab224c830c9f8fca8aef19c01e9a11dcaad6882651e214cd93b5367a936c5eb8237cc78ec086375fd399203e6e73914deff41067f3bb7f9"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 20:38:15 executing program 3: r0 = gettid() r1 = gettid() sched_getparam(r1, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000400)={0x40000080, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x1f}, &(0x7f0000000240)=""/178, 0xb2, &(0x7f0000000300)=""/130, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x7}, 0x58) r3 = gettid() sched_getparam(r3, &(0x7f00000000c0)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000140), 0x0) syz_clone3(&(0x7f0000000500)={0x100048100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f00000000c0)=""/7, 0x7, &(0x7f0000000140), &(0x7f0000000480)=[r0, r1, r2, r3, 0x0], 0x5, {r4}}, 0x58) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) gettid() (async) gettid() (async) sched_getparam(r1, &(0x7f00000000c0)) (async) syz_clone3(&(0x7f0000000400)={0x40000080, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x1f}, &(0x7f0000000240)=""/178, 0xb2, &(0x7f0000000300)=""/130, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x7}, 0x58) (async) gettid() (async) sched_getparam(r3, &(0x7f00000000c0)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) (async) ptrace$poke(0x4, r0, &(0x7f0000000140), 0x0) (async) syz_clone3(&(0x7f0000000500)={0x100048100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2b}, &(0x7f00000000c0)=""/7, 0x7, &(0x7f0000000140), &(0x7f0000000480)=[r0, r1, r2, r3, 0x0], 0x5, {r4}}, 0x58) (async) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) 20:38:15 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 20:38:15 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1458.291734][T17713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.330988][T17717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.343477][T17718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.353268][T17716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.390418][T17720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.529812][T17730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:15 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:15 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:15 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) get_robust_list(r4, &(0x7f0000000a00)=&(0x7f00000009c0)={&(0x7f0000000900)={&(0x7f00000008c0)}, 0x0, &(0x7f0000000980)={&(0x7f0000000940)}}, &(0x7f0000000a40)=0x18) 20:38:15 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, 0x0, 0x0) 20:38:15 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1458.934381][T17734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.945784][T17738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.993241][T17740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:15 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x0, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:15 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:15 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 20:38:15 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x0, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:16 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) [ 1459.181100][T17747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.219706][T17749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:16 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, 0x0, 0x0) 20:38:16 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x0, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1459.263145][T17754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.353786][T17758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.394960][T17755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:16 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:16 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:16 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="44cf4e00", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf250f000000080034000100008008003a000700000008000b0006000000050029000100000008003a00010000800800390000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000804) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) 20:38:16 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, 0x0, 0x0) 20:38:16 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1459.894652][T17768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:16 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1459.966110][T17772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.003943][T17772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:16 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:16 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x94c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0xde, 0x10e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9c4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:16 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 20:38:16 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x94c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0xde, 0x10e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9c4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:17 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r1 = accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000540)={0x6, @remote, 0x4e24, 0x3, 'wrr\x00', 0x0, 0x7ff, 0x61}, 0x2c) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) [ 1460.191515][T17779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.226083][T17782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:17 executing program 3: mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6fd53d30303030303030303030303030303030303030303030332c6d61783d303030303030303030303030308adaa4303030303030303031312c4c61783d30303030303030303030303030303030303030303030322c736d61636b66736861743d28407b282c2c2d40275b5b5d2c646566636f6e74657874b8fab5d23d73797374656d5f092c6d61736b3d4d4159"]) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) [ 1460.247693][T17781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.265411][T17784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.314857][T17789] binder: Bad value for 'stats' [ 1460.345128][T17789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:17 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:17 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x94c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0xde, 0x10e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0x9c4) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:17 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) 20:38:17 executing program 3: mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6fd53d30303030303030303030303030303030303030303030332c6d61783d303030303030303030303030308adaa4303030303030303031312c4c61783d30303030303030303030303030303030303030303030322c736d61636b66736861743d28407b282c2c2d40275b5b5d2c646566636f6e74657874b8fab5d23d73797374656d5f092c6d61736b3d4d4159"]) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) 20:38:17 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1460.836160][T17798] binder: Bad value for 'stats' [ 1460.854255][T17800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.875122][T17798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:17 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1460.907203][T17801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:17 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:17 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:17 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() 20:38:17 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) accept$inet(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) 20:38:18 executing program 3: mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6fd53d30303030303030303030303030303030303030303030332c6d61783d303030303030303030303030308adaa4303030303030303031312c4c61783d30303030303030303030303030303030303030303030322c736d61636b66736861743d28407b282c2c2d40275b5b5d2c646566636f6e74657874b8fab5d23d73797374656d5f092c6d61736b3d4d4159"]) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6fd53d30303030303030303030303030303030303030303030332c6d61783d303030303030303030303030308adaa4303030303030303031312c4c61783d30303030303030303030303030303030303030303030322c736d61636b66736861743d28407b282c2c2d40275b5b5d2c646566636f6e74657874b8fab5d23d73797374656d5f092c6d61736b3d4d4159"]) (async) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) (async) [ 1461.203427][T17810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.216075][T17812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.231864][T17812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:18 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1461.248270][T17810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.343993][T17817] binder: Bad value for 'stats' [ 1461.383332][T17817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.427401][T17817] binder: Bad value for 'stats' [ 1461.459220][T17821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:18 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getgid() syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:18 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:18 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:18 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) [ 1461.603779][T17825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:18 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) [ 1461.666536][T17828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:18 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f00000001c0)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @random="463dc608fc00", {0x8, 0x5}}, 0x1e, @val={0x8c, 0x18, {0x308, "7ca6a26dd0d6", @long="785d7ded046c764d43b91f5735f5bc63"}}}, 0x34) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xbd2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x36}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4015}, 0x1) [ 1461.851435][T17834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.899680][T17834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:19 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) 20:38:19 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:19 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) 20:38:19 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() 20:38:19 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) r2 = geteuid() setreuid(r2, r1) 20:38:19 executing program 3: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f00000001c0)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @random="463dc608fc00", {0x8, 0x5}}, 0x1e, @val={0x8c, 0x18, {0x308, "7ca6a26dd0d6", @long="785d7ded046c764d43b91f5735f5bc63"}}}, 0x34) (async, rerun: 64) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xbd2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x36}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4015}, 0x1) (rerun: 64) [ 1462.203269][T17840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.256186][T17840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:19 executing program 5: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getgid() syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000400)=""/239, 0xef, &(0x7f0000000500)=""/65, &(0x7f0000000580)=[r0], 0x1, {r3}}, 0x58) 20:38:19 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, 0x0) r2 = geteuid() setreuid(r2, r1) [ 1462.336709][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.382361][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.440309][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.451660][T17853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:19 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, 0x0) r2 = geteuid() setreuid(r2, r1) [ 1462.486496][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.505925][T17854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:19 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, 0x0) r2 = geteuid() setreuid(r2, r1) 20:38:19 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) [ 1462.558967][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.593969][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.641307][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:19 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) geteuid() setreuid(0x0, r1) [ 1462.723758][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:19 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) [ 1462.796712][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:19 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) geteuid() setreuid(0x0, r1) [ 1462.854870][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.904168][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.923122][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.935974][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:19 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000a80)='./binderfs/binder1\x00') r0 = geteuid() setreuid(0xffffffffffffffff, r0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x6, 0x99c, [0x0, 0x20000040, 0x20000314, 0x200005e8], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x2, 0x883e, 'wlan1\x00', 'batadv0\x00', 'nr0\x00', 'nr0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0xff], 0xde, 0x12e, 0x15e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x1, {0x1, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0xff, 0xff, 0xff], 0x1, 0x4, 0x0, 0x4e, @local, [0xff, 0xff, 0xff], 0x4e20, 0x4e24, 0xcaf, 0x7, 0x4, 0x4, 0x2d, 0xff, 0x8000, 0x3}, 0x365, 0x500}}}], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, {0x1}}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x11, 0x11, 0x22f0, 'ip6_vti0\x00', 'team0\x00', 'hsr0\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x116, 0x146, [@limit={{'limit\x00', 0x0, 0x20}, {{0xfffffe00, 0x9, 0x3, 0x6d, 0x5, 0x8}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0xa9a19365a009a7f6}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x8, 0x8863, 'xfrm0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', 'rose0\x00', @multicast, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xe6, 0x18e, 0x1be, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3, 0x24, 0x5, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0x10000, 0x7, 0x11d0, 0x1041f, 0x7, 0x63}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x3, 0x9, 0x0, 0x0, "a690a337a7a57dc9a937dc3a6cfd64ed3849d186042c163e8e5a56cf7eb6a0e45efef3ffbaf7f37772fa3c91f0ce9da879ea263031616b417a349ac6c6c8b3aa"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x4, 0xf8, 'veth1_virt_wifi\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'syz_tun\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x2, 0x9, 0x70d, 0x0, 0x0, "96d2807226014a2cb8fe19471448e9c9f7bbec44a5e8cf228c5dfc4d76337b1e2ec8dac2cb129c1610f416782ac2e53dfc7a335c5a0077a13f18c4b8aae781e0"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x11, 0x15, 'gretap0\x00', 'veth1_virt_wifi\x00', 'ipvlan1\x00', 'veth0_to_batadv\x00', @broadcast, [0xff, 0xff, 0x0, 0xff], @random="fe5e095272f9", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0x1ce, 0x21e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x5, 0x8808, 0x2, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80000001, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x7fff, {0x1}}}}}, {0x9, 0xb1c102870333ffa8, 0x884c, 'wlan0\x00', 'tunl0\x00', 'ipvlan1\x00', 'macsec0\x00', @random="2a36bc4cb732", [0x0, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x12e, 0x1a6, [], [@common=@nflog={'nflog\x00', 0x50, {{0xbaa1, 0x1ff, 0x9, 0x0, 0x0, "cb5c2ffc72872a2fe9733f98629c2de0fcde06791d40b2c4efa07a1489bc2cd1629f13c6a10dd113448a12b3689f5ac5eff7d0aae7d07847ae9a3c60d8658a5c"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x4, {0x6}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0xd4c, 0x6, 0x0, 0x0, "b68a5dcc2a8a0ce12da76c6b79a27faa9f3ff2d544be9ad75c0b2fe369e5509abb509490aaefad5b9f37efbc30ad4a3f5a4ac68cebd736b84ec89d2583cb710b"}}}}]}]}, 0xa14) r1 = geteuid() setreuid(0x0, r0) geteuid() setreuid(0x0, r1) [ 1462.994055][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.056833][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:38:19 executing program 2: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x205) syslog(0x3, &(0x7f0000000380)=""/100, 0x64) r0 = gettid() sched_getparam(r0, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000b40)={0x8000200, &(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980), {0x33}, &(0x7f00000009c0)=""/122, 0x7a, &(0x7f0000000a40)=""/133, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5}, 0x58) r2 = gettid() sched_getparam(r2, &(0x7f00000000c0)) syz_clone3(&(0x7f0000000c00)={0x880000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x1a}, &(0x7f0000000700)=""/220, 0xdc, &(0x7f0000000800)=""/228, &(0x7f0000000bc0)=[r1, r0, r0, r0, r0, r0, r0, r2, r0], 0x9}, 0x58) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040), 0x0) getgid() 20:38:19 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mount$binderfs(0x0, &(0x7f0000000200)='./binderfs\x00', 0x0, 0x40027, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x100801, &(0x7f0000000580)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,stats=global,max=00000000000000000000010,stats=global,stats=global,max=00000000000000000001000,stats=global,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c0001c9a6b386abf73043b862deac165dc7bbac404d7c85d8153872742c17d47edf72e0b3ebc14281dabc77c34ddd8576f0714ef50f27cafe190e6c24ece72f8cf670924dc9b92e26b38c2a4926d33800a7895813"]) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0x10) syz_clone3(&(0x7f0000000840)={0xc20a3400, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f00000006c0)=""/22, 0x16, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) [ 1463.102816][T17846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.185296][T17873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.234138][T17844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.245991][T17873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1464.853299][ T3868] IPVS: stopping backup sync thread 16910 ... [ 1464.991217][ T3868] device hsr_slave_0 left promiscuous mode [ 1464.997874][ T3868] device hsr_slave_1 left promiscuous mode [ 1465.004516][ T3868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.011931][ T3868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.020700][ T3868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.028872][ T3868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.046865][ T3868] device bridge_slave_1 left promiscuous mode [ 1465.053273][ T3868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.061588][ T3868] device bridge_slave_0 left promiscuous mode [ 1465.067967][ T3868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.079165][ T3868] device veth1_macvtap left promiscuous mode [ 1465.085406][ T3868] device veth0_macvtap left promiscuous mode [ 1465.091487][ T3868] device veth1_vlan left promiscuous mode [ 1465.097707][ T3868] device veth0_vlan left promiscuous mode [ 1465.279727][ T3868] team0 (unregistering): Port device team_slave_1 removed [ 1465.294141][ T3868] team0 (unregistering): Port device team_slave_0 removed [ 1465.310091][ T3868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.324507][ T3868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.390744][ T3868] bond0 (unregistering): Released all slaves [ 1467.912792][ T3616] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1470.257688][ T3624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1470.266291][ T3624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1470.274236][ T3624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1470.282123][ T3624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1470.289790][T29157] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1470.298747][ T3624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1470.386714][T17884] chnl_net:caif_netlink_parms(): no params data found [ 1470.435811][T17884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.443146][T17884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.451013][T17884] device bridge_slave_0 entered promiscuous mode [ 1470.462422][T17884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.469816][T17884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.478552][T17884] device bridge_slave_1 entered promiscuous mode [ 1470.501784][T17884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.516577][T17884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.545207][T17884] team0: Port device team_slave_0 added [ 1470.552690][T17884] team0: Port device team_slave_1 added [ 1470.575363][T17884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.582325][T17884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1470.608346][T17884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.621201][T17884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.628284][T17884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1470.655302][T17884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.687034][T17884] device hsr_slave_0 entered promiscuous mode [ 1470.693799][T17884] device hsr_slave_1 entered promiscuous mode [ 1470.700261][T17884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1470.708145][T17884] Cannot create hsr debugfs directory [ 1470.785417][T17884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.792618][T17884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.799966][T17884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.807090][T17884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.853006][T17884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.867358][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1470.876126][T17877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.885119][T17877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.896617][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1470.909970][T17884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.921833][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1470.930472][T10636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.937598][T10636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1470.953479][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1470.961900][T17877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.969022][T17877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1470.984165][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1471.001660][T17884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1471.014780][T17884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1471.027497][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1471.036245][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1471.045273][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1471.053844][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1471.062782][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1471.087449][T17884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.095782][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1471.103833][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1471.335945][ T6396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1471.354709][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1471.365011][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1471.372783][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1471.384221][T17884] device veth0_vlan entered promiscuous mode [ 1471.396756][T17884] device veth1_vlan entered promiscuous mode [ 1471.417012][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1471.427001][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1471.438367][T17884] device veth0_macvtap entered promiscuous mode [ 1471.449270][T17884] device veth1_macvtap entered promiscuous mode [ 1471.467411][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1471.477904][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.490139][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1471.500791][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.510988][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1471.521606][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.531928][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1471.542391][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.552442][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1471.563184][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.580063][T17884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.589477][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1471.598871][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1471.607039][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1471.616102][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1471.627180][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1471.639039][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.649009][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1471.659460][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.669303][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1471.680284][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.696395][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1471.707465][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.717606][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1471.728232][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1471.739371][T17884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.749827][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1471.759011][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1471.828460][ T3868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.846496][ T3868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.861585][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.865374][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1471.873000][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.886908][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1471.923801][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.937230][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.948339][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.959276][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.970753][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.981651][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.994244][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.006441][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.018022][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.029409][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.042992][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.054568][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.066247][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.080713][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.092133][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.104512][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.117931][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.128718][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.140130][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.151424][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.164058][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.175234][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.187865][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.199187][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.211178][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.222018][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.233239][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.246285][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.257148][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.268200][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.279473][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.290281][T17903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.310483][T17902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.313233][T17877] Bluetooth: hci3: command 0x0409 tx timeout [ 1473.125185][ T8] device hsr_slave_0 left promiscuous mode [ 1473.131515][ T8] device hsr_slave_1 left promiscuous mode [ 1473.138026][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.145582][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.155145][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.162628][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.171253][ T8] device bridge_slave_1 left promiscuous mode [ 1473.177797][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.190716][ T8] device bridge_slave_0 left promiscuous mode [ 1473.197121][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.209429][ T8] device veth1_macvtap left promiscuous mode [ 1473.215584][ T8] device veth0_macvtap left promiscuous mode [ 1473.221636][ T8] device veth1_vlan left promiscuous mode [ 1473.229064][ T8] device veth0_vlan left promiscuous mode [ 1473.412873][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1473.433872][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1473.449131][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1473.462120][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1473.526693][ T8] bond0 (unregistering): Released all slaves [ 1474.742775][ T3624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1474.751476][ T3624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1474.759614][ T3624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1474.769831][ T3624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1474.777392][ T3624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1474.784829][ T3624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1474.880098][T17906] chnl_net:caif_netlink_parms(): no params data found [ 1474.928839][T17906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.936152][T17906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.944934][T17906] device bridge_slave_0 entered promiscuous mode [ 1474.953261][T17906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.960384][T17906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.970799][T17906] device bridge_slave_1 entered promiscuous mode [ 1474.996425][T17906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.007587][T17906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.034009][T17906] team0: Port device team_slave_0 added [ 1475.042112][T17906] team0: Port device team_slave_1 added [ 1475.064305][T17906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.071859][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.098088][T17906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.111764][T17906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.118861][T17906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.144920][T17906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1475.177286][T17906] device hsr_slave_0 entered promiscuous mode [ 1475.184043][T17906] device hsr_slave_1 entered promiscuous mode [ 1475.190472][T17906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1475.198364][T17906] Cannot create hsr debugfs directory [ 1475.275273][T17906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.282366][T17906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1475.289758][T17906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.296845][T17906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.348105][T17906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.361602][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1475.370474][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.378967][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.388504][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1475.401539][T17906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.414228][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1475.422671][T17878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.429743][T17878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.441888][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1475.457351][T10635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.464422][T10635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1475.487468][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1475.497293][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1475.509224][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1475.522395][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1475.534750][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1475.545908][T17906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1475.566119][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1475.575225][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1475.591812][T17906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1475.820210][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1475.840071][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1475.848939][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1475.856871][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1475.870249][T17906] device veth0_vlan entered promiscuous mode [ 1475.882810][T17906] device veth1_vlan entered promiscuous mode [ 1475.904260][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1475.913410][T10629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1475.925935][T17906] device veth0_macvtap entered promiscuous mode [ 1475.938683][T17906] device veth1_macvtap entered promiscuous mode [ 1475.953977][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1475.964572][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.974849][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1475.986269][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.996815][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1476.007303][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.017255][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1476.027758][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.038130][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1476.049480][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.061945][T17906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1476.071506][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1476.079742][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1476.088464][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1476.098354][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1476.109178][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1476.120116][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.130123][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1476.140625][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.150457][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1476.161094][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.171654][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1476.182668][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.192483][T17906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1476.204743][T17906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1476.216052][T17906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1476.225555][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1476.234707][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1476.306818][ T3868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.329280][ T3868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.340985][ T4476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.345269][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1476.357029][ T4476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.366589][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1476.407695][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.420879][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.431831][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.444714][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.455440][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.467297][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.480912][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.491586][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.507062][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.518381][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.529645][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.540346][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.551432][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.566213][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.576869][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.588114][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.598804][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.611139][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.626381][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.638216][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.648997][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.661109][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.671872][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.684040][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.694896][T17925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.711646][T17924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.444487][ T8] device hsr_slave_0 left promiscuous mode [ 1477.450788][ T8] device hsr_slave_1 left promiscuous mode [ 1477.461226][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1477.468705][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.481829][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.489406][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.499052][ T8] device bridge_slave_1 left promiscuous mode [ 1477.505559][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.514553][ T8] device bridge_slave_0 left promiscuous mode [ 1477.520778][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.539094][ T8] device veth1_macvtap left promiscuous mode [ 1477.545169][ T8] device veth0_macvtap left promiscuous mode [ 1477.551214][ T8] device veth1_vlan left promiscuous mode [ 1477.557116][ T8] device veth0_vlan left promiscuous mode [ 1477.729089][ T8] team0 (unregistering): Port device team_slave_1 removed [ 1477.745655][ T8] team0 (unregistering): Port device team_slave_0 removed [ 1477.760137][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1477.774815][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1477.834674][ T8] bond0 (unregistering): Released all slaves [ 1479.131445][ T3624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1479.140572][ T3624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1479.148568][ T3624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1479.156904][ T3624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1479.165821][ T3624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1479.173608][ T3624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1479.261048][T17928] chnl_net:caif_netlink_parms(): no params data found [ 1479.310142][T17928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.317362][T17928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.326648][T17928] device bridge_slave_0 entered promiscuous mode [ 1479.335760][T17928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.343345][T17928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.351126][T17928] device bridge_slave_1 entered promiscuous mode [ 1479.377740][T17928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.389587][T17928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.418181][T17928] team0: Port device team_slave_0 added [ 1479.426419][T17928] team0: Port device team_slave_1 added [ 1479.449100][T17928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.456142][T17928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.483647][T17928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.496230][T17928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.503508][T17928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.529809][T17928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.556693][T17928] device hsr_slave_0 entered promiscuous mode [ 1479.563885][T17928] device hsr_slave_1 entered promiscuous mode [ 1479.570318][T17928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1479.579086][T17928] Cannot create hsr debugfs directory [ 1479.655027][T17928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.662098][T17928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.669418][T17928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.676537][T17928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.727695][T17928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.740000][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1479.749932][T17879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.758640][T17879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.768260][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1479.782148][T17928] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.793579][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1479.801907][T17879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.809023][T17879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.823916][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1479.832274][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.839376][T10636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.860461][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1479.870017][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1479.883278][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1479.898158][T17928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1479.909944][T17928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1479.921797][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1479.930788][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1479.939780][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1479.959523][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1479.967199][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1479.980622][T17928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1480.213559][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1480.231355][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1480.241657][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1480.250337][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1480.261423][T17928] device veth0_vlan entered promiscuous mode [ 1480.274538][T17928] device veth1_vlan entered promiscuous mode [ 1480.297590][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1480.307008][T17877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1480.318974][T17928] device veth0_macvtap entered promiscuous mode [ 1480.329900][T17928] device veth1_macvtap entered promiscuous mode [ 1480.344216][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1480.355305][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.366874][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1480.377419][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.387352][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1480.398699][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.408553][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1480.418983][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.428909][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1480.439410][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.451139][T17928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1480.460987][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1480.469620][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1480.478247][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1480.487053][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1480.501129][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1480.513214][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.523355][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1480.538764][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.548926][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1480.562844][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.572780][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1480.587480][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.598546][T17928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1480.609225][T17928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.620717][T17928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.630205][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1480.639464][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1480.713915][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.722311][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.741869][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1480.757726][ T3868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.766086][ T3868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.775760][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1480.808526][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.821494][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.833192][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.846590][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.857707][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.870549][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.883499][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.894897][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.907342][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.918302][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.931019][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.942251][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.953724][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.970387][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.981179][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.991856][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.002494][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.014661][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.025841][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.038856][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.050321][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.061009][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.072151][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.086570][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.098063][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.110032][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.122321][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.134033][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.145087][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.156442][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.167513][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.178941][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.190048][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.193425][T10636] Bluetooth: hci3: command 0x0409 tx timeout [ 1481.206637][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.219128][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.230146][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.241476][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.252357][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.264087][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.275882][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.288492][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.299376][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.310815][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.325752][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.336392][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.347137][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.359349][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.371320][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.382679][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.394031][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.405434][T17947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.421513][T17946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1482.170246][ T45] device hsr_slave_0 left promiscuous mode [ 1482.176816][ T45] device hsr_slave_1 left promiscuous mode [ 1482.184413][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.191822][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.201067][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.209820][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.219479][ T45] device bridge_slave_1 left promiscuous mode [ 1482.227313][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.238577][ T45] device bridge_slave_0 left promiscuous mode [ 1482.244988][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.258396][ T45] device veth1_macvtap left promiscuous mode [ 1482.264515][ T45] device veth0_macvtap left promiscuous mode [ 1482.270563][ T45] device veth1_vlan left promiscuous mode [ 1482.276552][ T45] device veth0_vlan left promiscuous mode [ 1482.451832][ T45] team0 (unregistering): Port device team_slave_1 removed [ 1482.467231][ T45] team0 (unregistering): Port device team_slave_0 removed [ 1482.479935][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1482.498866][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.565516][ T45] bond0 (unregistering): Released all slaves [ 1484.234668][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.240984][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.912667][ T3624] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1490.313035][ T3624] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1494.712744][ T3624] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1499.112690][ T3624] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1503.432768][ T3624] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1507.832698][ T3624] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 1510.167112][ T3616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1510.175730][ T3616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1510.184106][ T3616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1510.193951][ T3616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1510.201507][ T3616] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1510.208999][ T3616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1510.295728][T17968] chnl_net:caif_netlink_parms(): no params data found [ 1510.343079][T17968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.350218][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.358274][T17968] device bridge_slave_0 entered promiscuous mode [ 1510.366307][T17968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.373493][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.381303][T17968] device bridge_slave_1 entered promiscuous mode [ 1510.405546][T17968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1510.417641][T17968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1510.446924][T17968] team0: Port device team_slave_0 added [ 1510.455220][T17968] team0: Port device team_slave_1 added [ 1510.476834][T17968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.483926][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1510.510833][T17968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1510.523862][T17968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1510.530815][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1510.558296][T17968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1510.589172][T17968] device hsr_slave_0 entered promiscuous mode [ 1510.595933][T17968] device hsr_slave_1 entered promiscuous mode [ 1510.603689][T17968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1510.611253][T17968] Cannot create hsr debugfs directory [ 1510.685996][T17968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.693117][T17968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.700538][T17968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.707666][T17968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.755599][T17968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.770410][T10668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1510.780898][T10668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.788743][T10668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.798333][T10668] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1510.815742][T17968] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.826112][T10668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1510.838692][T10668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.845803][T10668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.863878][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1510.872314][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.879413][T10636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.900683][T10668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1510.910100][T10668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1510.923118][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1510.936020][T10668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1510.951020][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1510.960970][T17968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1510.979978][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1510.987508][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1511.000860][T17968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1511.233471][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1511.255081][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1511.263813][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1511.271479][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1511.283377][T17968] device veth0_vlan entered promiscuous mode [ 1511.294824][T17968] device veth1_vlan entered promiscuous mode [ 1511.318065][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1511.328262][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1511.339025][T17968] device veth0_macvtap entered promiscuous mode [ 1511.350682][T17968] device veth1_macvtap entered promiscuous mode [ 1511.367552][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1511.378428][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.388476][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1511.399199][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.409362][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1511.420755][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.430988][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1511.444016][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.454608][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1511.465331][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.476966][T17968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.486019][T10668] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1511.494711][T10668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1511.502824][T10668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1511.511343][T10668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1511.524773][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1511.535324][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.545561][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1511.560475][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.571460][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1511.582674][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.592493][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1511.603769][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.613650][T17968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1511.625062][T17968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.636324][T17968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1511.646394][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1511.655215][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1511.718412][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.733274][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.744561][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1511.758299][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.767367][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.778114][T17879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1511.807880][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.820133][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.844414][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.855709][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.866941][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.878451][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.889941][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.901663][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.912349][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.925533][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.937192][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.949565][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.960174][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.972128][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.984077][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.997136][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.008638][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.020044][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.031241][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.043430][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.055895][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.066753][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.079984][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.090740][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.101706][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.113503][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.124498][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.135978][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.147911][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.160544][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.171875][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.182504][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.193438][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.208975][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.221308][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.232952][T10668] Bluetooth: hci3: command 0x0409 tx timeout [ 1512.246013][T17987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 2022/04/16 20:39:09 executor 3 failed 11 times: executor 3: exit status 67 SYZFAIL: netlink_send_ext: bad netlink ack type type=41 (errno 22: Invalid argument) SYZFAIL: child failed (errno 0: Success) loop exited with status 67