fffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 298.194899][T12389] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.246110][T12392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:21 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x5b86ca3f27f16fde) 00:34:21 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x80047441, 0x20000000) 00:34:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:21 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:21 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 298.588651][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:21 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:21 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000001600)="e68dbf119aaf00a3b535a0e5a68077370d454686dabe0204e061ca51a96ada1b882925266364c6cd6a7d41521ab632c124e05e21991e026721a1ffca7086e46a39e5ecb76a5a15e2b19a1073dea04298e254409c905478f8fb210a6f5aa285a41548e7ceaf18e9bc34a78bcf362cff76c5f5aa92860fc5110224c0dd9506b5c8", 0x80}, {&(0x7f0000001680)="7aba8bfd9e9c8c88a456d8181a0d783623ffcb9e7585b6c722c2cf650d04a730fe5a275d6091877ae9461e0f5e15d31e98e59ea231845ae84134396afdb4e66e0af296c612da22f3c510ea7379e7dcf5649416be264099a625c1d601de4fa5200878d24cbc4465905b252a2018f5155089348344d18d4de48661090f622f0372d3ab8cdc4f07fc4087c57f59125a7a21eb14a25cb63b91d11ba8bed76d01dcbe80daa72299bb9a108db41e2eae4f59a20f31fc3bc3ef12159a1e834b6abc580bcf2fffecabde6674f980d0c0e1fcf4b2329465b6657288128bdcdb010836418e1a6d391150ff230049938ec30f75a610ad7bdfc3ad93ba2f16", 0xf9}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="a41c01671f16543cea8bd98214ec534bc50f0e5a6a66b5930dc25a89eb057aa00cc9b083874349164500b7390e362a0d3f177c54b616f64cdb23af8c09254f01ffb9065d0258a3a92166da7e7ded7e1cc5324bd6ab1133480eeb5439beec437d37f5616f0170260194c3b3c7c0f145005fefe8eb5f8ac5cd5116327400eb01c93ca9dc53c6b488641f83ac1c7e662f5a60bc244b54ade5e0347bd7e42a2168c1", 0xa0}, {&(0x7f0000002840)="97a1f1e20aadd7c9cf9f42fc499008d7746dc04624cb9bfc9b7a03f8222bdf49429962", 0x23}, {&(0x7f0000002880)="92a9e50bcd0e617e7ca7e247cb94cb3f232b25b1baa0550c7cc4465b8d3447965b6b6e59c48a842554385f4e9448ed2039a3ca55de52a6b8bb36de2c19b2a34754f0c1354946966f9fdd176a7c43aa5e04c5d6aeebd6d67b6361d5942897a2235b3a18cf578123", 0x67}, {&(0x7f0000002900)="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", 0xc1e}], 0x7}, 0x0) 00:34:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:21 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:21 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:21 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x80047441, 0x20000000) 00:34:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x40) [ 298.941755][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:21 executing program 1: bpf$MAP_CREATE(0x9, &(0x7f0000001c40), 0x40) 00:34:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) [ 299.341682][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:22 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 00:34:22 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:22 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x541b, 0x20759000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:34:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:22 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 299.705463][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005480)={0x19, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:34:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:22 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:22 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:34:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001c40)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x0) 00:34:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd70000000000021000000", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x12, 0xa2, 0x4, 0x1, 0x0, 0x1}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x2c000811) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg(r0, &(0x7f0000005400)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, 0x0, 0x0) 00:34:23 executing program 3: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd70000000000021000000", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:23 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:23 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005480)={0x18, 0x4, &(0x7f00000019c0)=@framed={{}, [@generic]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x1000, &(0x7f0000002c80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:34:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd70000000000021000000", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:23 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000002cc0), 0x8) 00:34:23 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:23 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) 00:34:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd700000000000210000000800", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:24 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f00000005c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x78) 00:34:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd700000000000210000000800", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:24 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @empty}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) 00:34:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:24 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x83) 00:34:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:24 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x6040, 0x0) 00:34:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd700000000000210000000800", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:24 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:24 executing program 5: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001240)=0xffffffffffffffff, 0x4) 00:34:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:24 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)}, 0x48) 00:34:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd70000000000021000000080003", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:24 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) 00:34:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 00:34:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd70000000000021000000080003", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:24 executing program 5: perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x4, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x3b6af0}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7308}, 0x3f9c) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000340)="4f15a39a2df43b14ed5f2c578d4db055ee07f5a3d802cf8b50b4e7df21e18cb5fc59569f9e048c6343d4d93a8de61654aea60f37d00726bbbaf8413fa35f711e8ebd6b86b0d049ac43de63ad10d251b4fdb14d20706d042b10384fce5ec562f80eea2946c9cfc7f1078325732582af6da35442dfadaacf63643c41a7e5f882e09016d46b27739751f7cb3c9747d087919a9ce3b13b0c9a2774a54d8d5a2c5053ac2eebb14cad"}, {&(0x7f0000000240)="ae61a8d192171409dc2c19809ce70f90c61b402d89906f876fbb89196fa57c9dd7ed6fe73d4a9a050d32416a7e622c1c9943ab04d4e7db1546fab943d95d0a7057459e2d58c83e7f97ddda17b3aff67efc92f873b90a00b5d3c8226357fc7dce76f9ccb0c757e1f3f3d77ab2c382b1f474dbfc9f"}], 0x47, &(0x7f0000000000), 0x0, 0xb9efff7f}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000006c0), 0x4) 00:34:24 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd70000000000021000000080003", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:24 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000003440)) 00:34:25 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:25 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:34:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:25 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:25 executing program 1: bpf$MAP_CREATE(0x2, &(0x7f0000001c40), 0x40) [ 302.920565][T12661] __nla_validate_parse: 18 callbacks suppressed [ 302.920583][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x3}, 0x40) 00:34:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:25 executing program 1: perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x335bc0}], 0x8, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x9}, {0x7, 0x5}, {0x8}, {0xb, 0x3}, {0x1}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000001900)=""/142, 0x66, 0x8e}, 0x20) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 00:34:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:25 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:26 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) [ 303.337699][T12681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:26 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000027c0)={&(0x7f0000000540)=@nfc, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x1010, 0x0, 0x0, "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"}, {0xff8, 0x0, 0x0, "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"}], 0x2008}, 0x0) 00:34:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:26 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 303.914664][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x145000) 00:34:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:26 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005480)={0x18, 0x4, &(0x7f00000019c0)=@framed={{}, [@generic={0x18}]}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x1000, &(0x7f0000002c80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:34:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:26 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 304.197525][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:27 executing program 5: ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) syz_mount_image$udf(&(0x7f0000002680), 0x0, 0x0, 0x6, &(0x7f0000002a80)=[{0x0, 0x0, 0x9fd}, {0x0}, {&(0x7f0000002840), 0x0, 0x6}, {0x0, 0x0, 0x8000}, {0x0, 0x0, 0x4}, {&(0x7f0000002980)="c8a2941d6b9db9f2d179034c38a4c34fd407b1f736093ba0ddb0e1541867e53f23cf073d0eb7fdf08dba6fbd92275f590a391dd381290683ff45f91d08127caee04fb83cf92033210c1b96b39df4c8e30b994797a476935034a68130924b280ddb7d636b2cfcaebe260e5465b4dde8cca8a2e20ae2408f886fcc9d7cf63c73dbc1c256a17ce1cd65506d7d1c3f7cdd64b02e950c090347b326582097de4f6c392d088427af07f4af62aec668e8a42eb753cdddb11ec0", 0xb6}], 0x0, &(0x7f0000002c00)={[], [{@audit}, {@dont_appraise}]}) 00:34:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="850000002e0000003500000000000000850000002a000000950000000000000003000000271e3503200ffa95a2c8c037c5a142dfa8d76287066c5197fabd5f9810e81ae0b737129a9934d839cd34d7aeed8d38e65cb6e22ff5dde54704d255a2350ea7c09c4f42a5f0a8320e13822c45c0f8612c10b10000002701d3712c7e93363af3206a32d95433bb755a2dd576090c4867a7b6393e366c6386d5ec7209d031f40f3012e9576e51a7f550afc852003bf3e4195cc037102124d85cec074c6949e129890152213c8b2759a07e6d067a97f5fe47fe5f17fdab800f4104dbaba46aa43a815b1e5c6d1d224f64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c110ef4b253d110ee282ab76f593d928cf95846be6277c043725cdb8c5324812696a623cd8a4f8dc8dcba00b1b2d2747c40400c28c0000fabf8496b9a951667d510ba0e37b56c0ebfb19a342682fb98c1452b6518a6ef73f7f7b2744419af53e5309ec91d83cf4fbd775d9c07d8d591a4dac60ff000000b78863e629b3b20000000000000000003600000000000000449c810d3174c87ee545867a3126af7a8b20744e00000000000000000000000000000000ca4537fed0fa81f29ad592a24d6d9334b3e9caf89cb05c1dcfe37d9a0a66bf8d0a4a585734b3ca74013efb27474cc4d47b51d5d0fbe88af5e6d63839c2853f162a"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 00:34:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:27 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 304.442618][T12732] loop5: detected capacity change from 0 to 128 [ 304.502688][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:27 executing program 5: syz_mount_image$udf(&(0x7f0000002680), &(0x7f00000026c0)='./file1\x00', 0x22, 0x1, &(0x7f0000002a80)=[{0x0}], 0x3000050, &(0x7f0000002c00)={[], [{@audit}, {@dont_appraise}, {@euid_eq}]}) 00:34:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:27 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:27 executing program 1: pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r0, &(0x7f00000008c0)={0x18}, 0x18) [ 304.748216][T12749] UDF-fs: bad mount option "audit" or missing value [ 304.812160][T12749] UDF-fs: bad mount option "audit" or missing value [ 304.862104][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:27 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:27 executing program 1: syz_mount_image$udf(0x0, 0x0, 0x0, 0x1, &(0x7f0000002a80)=[{&(0x7f0000002700)='8', 0x1, 0x9fd}], 0x0, 0x0) 00:34:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000000c0)={{r1}, 0x0, 0x1a, @inherit={0x58, &(0x7f0000000040)={0x1, 0x2, 0x6, 0x100000000, {0x8, 0x8b, 0x7, 0x80000001, 0x10001}, [0xe68c130, 0x6]}}, @subvolid=0x1b}) socketpair(0x1a, 0x6, 0xb1, &(0x7f00000010c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000011c0)={&(0x7f0000001180)='./file0\x00', 0x0, 0x10}, 0x10) syz_mount_image$udf(&(0x7f0000002680), &(0x7f00000026c0)='./file1\x00', 0x22, 0x6, &(0x7f0000002a80)=[{&(0x7f0000002700)="385e6195a3362a2be1722ac798c30775bf8061f968867d0203d2a2564eb394760f0cab81fede06c966", 0x29, 0x9fd}, {&(0x7f0000002740)="d5ba5ff4bf97539d76fcdf489cff5f9f66f8df38e6f695c7e0946a7720f377e998a979d2edd26d1035e3119de0f364bd3cbf035f694f411a527b75b2d3824f6013a90a5289e83908127ca2df15d55221e3982562791b9751969b70056b91f087bb0d62124044e14a06e6cb9f085b99a11b6fb3438aa07fafbd25ef2e5ccdd7a4f4a39a3ebac54b3fefbb20af0362ffd282b2d737b2780d8451a542446c9a9273542c1ad510be0bd2cc326ae31ae42f237b4452cf4c7bcb1f56287cc3f8c05fd994b067886e2bf2ff0dbe6b6cb2cd11871c51403aaeaa62d3b9b2fe067ce7a990402669869bd9356a", 0xe8, 0x2}, {&(0x7f0000002840)="83e6e07ef1e3762be8190e5ca6ff68505efafc96a0900ddaeb6f82f98085e68ee9ccc8a022af98d2e830e47f9e8ef71739926645ec2f42a159cb0c6a852105dd739f060ea90c8a0004a8821127768b1db8add38ee27c813b88953bf32b574bd1c6d19e8b91b93d06678ce360ae5f86a85c867cf6f236e1c24d9f6b1f9b118533f302244ea16db08d7290df00d9009231bd18df128d2295db19965630c463c645768c8bc683ff24f50784", 0xaa, 0x6}, {&(0x7f0000002900)="43862a131f0237424119547cadadfffd6cc669d21892c44f7bd76956a2663d40a29546605abf957d33084a28e6ed", 0x2e, 0x8000}, {&(0x7f0000002940)="69070d0ea7c9ac0ea11e79ce16f3320b759469bc5d270b6936c39b9cfd13d7349c20fa26dd702640", 0x28, 0x4}, {&(0x7f0000002980), 0x0, 0x3ff}], 0x3000050, &(0x7f0000002c00)={[{@partition={'partition', 0x3d, 0xfffffffffffffff8}}], [{@audit}, {@dont_appraise}, {@fowner_gt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@smackfstransmute}, {@euid_eq}]}) 00:34:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 305.133665][T12774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.157145][T12775] loop1: detected capacity change from 0 to 9 00:34:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:28 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 305.185153][T12776] loop5: detected capacity change from 0 to 128 00:34:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 305.265914][T12775] loop1: detected capacity change from 0 to 9 [ 305.281261][T12776] UDF-fs: bad mount option "audit" or missing value 00:34:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:28 executing program 1: ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) syz_mount_image$udf(0x0, &(0x7f00000026c0)='./file1\x00', 0x0, 0x5, &(0x7f0000002a80)=[{&(0x7f0000002700)='8', 0x1, 0x9fd}, {&(0x7f0000002740)="d5", 0x1}, {&(0x7f0000002840)="83", 0x1}, {&(0x7f0000002900)='C', 0x1, 0x8000}, {0x0}], 0x0, 0x0) 00:34:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:28 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x101910b00, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x40002, 'rr\x00'}, 0x2c) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000140)) 00:34:28 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 305.460112][T12792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.575569][T12804] loop1: detected capacity change from 0 to 128 00:34:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:28 executing program 1: syz_mount_image$udf(0x0, &(0x7f00000026c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) shutdown(r1, 0x0) 00:34:28 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 305.814367][T12816] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="8400", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:28 executing program 1: clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) unshare(0x2a000400) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000380)=@ceph_nfs_confh={0x10}, 0x0) 00:34:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:28 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="8400", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:28 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x221, 0x101c01) write$hidraw(r0, &(0x7f0000000280)='C', 0x1) [ 306.148741][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:29 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="8400", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:29 executing program 5: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) write$hidraw(0xffffffffffffffff, &(0x7f0000000040)="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", 0xf00) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000001040)={0xff, "71191c92c4e0b3077f81bd5959a658fda857787b8582b88e61f8c8a7502d9eef872db08b8b2232d3263449690788788ecdfcc3de6cb6ea555d6fd830b609c4fc"}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000010c0)={0xe0c, "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"}) r0 = syz_open_dev$hidraw(&(0x7f0000001f00), 0xfffffffffffffffe, 0xbcad70afa45e1dd7) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000001f40)={0x7, "b419ce94b894e19b88e2bffc1344b7f6dbcf562d72b8fd036c1be6324da8b074e38a2ac09a68c878ff90d74f808f1bb6cbfcc0e9acb10df6566afb7e9be7ba46"}) syz_open_dev$hidraw(&(0x7f0000001fc0), 0x6, 0x1) syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000002000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x4, 0x50, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x1}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x9, 0x9, 0x9, 0x3, 0x3], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0xcf, 0x1, "", '$w'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x58, 0x9, 0x8, {0x7, 0x25, 0x1, 0x2, 0xb1, 0xca8f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x40, 0x3, "d38234a8ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x81, 0x8, {0x7, 0x25, 0x1, 0x0, 0x81, 0x91b7}}}}}}}]}}, &(0x7f0000002400)={0xa, &(0x7f00000020c0)={0xa, 0x6, 0x201, 0x1, 0x5, 0x1, 0x20, 0x9}, 0x13a, &(0x7f0000002100)={0x5, 0xf, 0x13a, 0x5, [@generic={0xd8, 0x10, 0x2, "e10375fe852020c8b80f827e066ad4dd6bafae243a4ad64e3d2bdb10cff8f59bd0d68af7a62acfbad328ec208ce677fed62fdae1fa39309d6f6e4a5ce128d6dd8153e24bc7936947c30f5b39c2e25017c5f8da31a3c84b73049e027d15e4d80874bad4469266e3c7f91714df8074cb0d02d72fcf8849355b07643afa47ae90b22cb7569cf35179741366f48c524777700a60f91d4a787c7ce4e0c77054235e30df400f5cb16c623e9b38c9f2d1a802a75125e7bc56bf4e1f5c36f091daeb04aec79355df6d385ffd2880a2d8ca2c33f78814e26fd2"}, @ptm_cap={0x3}, @generic={0x49, 0x10, 0xa, "753ffdd5ecbc17a96d3d0eb8b564dea2e31b003663a746dd61a2bb69ba6c2bda17870a20865d925e6e5bda10114d44a61ad2e6629390b4511ce0b164c190745cd5cf5b079768"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x1, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3f, 0x3f, 0x93}]}, 0x4, [{0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x43e}}, {0x100, &(0x7f0000002280)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x813}}]}) syz_open_dev$hidraw(&(0x7f0000002480), 0x1ff, 0x32000) r1 = syz_open_dev$hidraw(&(0x7f00000024c0), 0x401, 0x8c000) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000002500)="c37bd225b284ce600e8370971087f2616afac7265df7210b55f1d13762f3") r2 = syz_open_dev$hidraw(&(0x7f0000002540), 0x20, 0x208000) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000002580)="16126495632580e14489bed9636dccb35f34e526544fb0da26717fc3deb64fafd97b2766c2950db0803b02eedc5c2105bb12b2d8371ed4556de490de8f37d508342c7e5e1d376d36740714e89b08218d81b40cf2dbce8637fe8683c29191653b7f9ab0638fea3429184063078b6e17c5d0c1074ba90f420d10e6f60147ea9ab606c2ae9aa260cad8c3025ef8531139f910c09aac") r3 = syz_open_dev$hidraw(&(0x7f0000002640), 0x7fffffff, 0x561900) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000002680)=""/190) r4 = syz_open_dev$hidraw(&(0x7f0000002740), 0x200, 0x6080) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000002780)) r5 = syz_open_dev$hidraw(&(0x7f00000027c0), 0x6, 0x10c00) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000002800)="ce0f6afb4ddd8d68894f1ff07837bdd8aa60f26d7034f87520bd598ff79ad5ca5720d97652958a33bf73d6726280ea8bea5a9fac2c672914088b5a8314492e9c83bf647b2cda1df1aa7aa147c6ee7c3ab1929bbc") 00:34:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000500), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x14, 0x0, 0x0}) 00:34:29 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:29 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xe58, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0x0, 0x1]) 00:34:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 307.216201][ T9748] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 307.471847][ T9748] usb 6-1: Using ep0 maxpacket: 16 [ 307.707902][ T9748] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 307.732851][ T9748] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.774690][ T9748] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.986604][ T9748] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.044345][ T9748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.103673][ T9748] usb 6-1: Product: à ’ [ 308.116524][ T9748] usb 6-1: SerialNumber: à “ 00:34:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xe58, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x40284504, &(0x7f0000000040)=""/169) 00:34:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:31 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xc80f0) 00:34:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 308.506693][T12919] __nla_validate_parse: 3 callbacks suppressed [ 308.506709][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 308.546358][ T9748] usb 6-1: 0:2 : does not exist 00:34:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:31 executing program 1: r0 = syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xa2e40) ioctl$EVIOCGID(r0, 0x80084502, 0x0) 00:34:31 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000140), 0x3af3, 0x101001) write$hidraw(r0, 0x0, 0x7) 00:34:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 308.717590][ T9748] usb 6-1: USB disconnect, device number 2 00:34:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:31 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000100), 0x1, 0x189200) read$hidraw(r0, 0x0, 0x0) 00:34:31 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x221, 0x101c01) write$hidraw(r0, &(0x7f0000000280)='C', 0xfffffdef) 00:34:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000640), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001180)=""/82) 00:34:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 308.847699][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:31 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:31 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x0) ioctl$EVIOCGKEY(r0, 0x541b, 0x0) 00:34:31 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0x30840) 00:34:31 executing program 5: getpid() socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x3b6af0}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000340)="4f15a39a2df43b14ed5f2c578d4db055ee07f5a3d802cf8b50b4e7df21e18cb5fc59569f9e048c6343d4d93a8de61654aea60f37d00726bbbaf8413fa35f711e8ebd6b86b0d049ac43de63ad10d251b4fdb14d20706d042b10384fce5ec562f80eea2946c9cfc7f1078325732582af6da35442dfadaacf63643c41a7e5f882e09016d46b27739751f7cb3c9747d087919a9ce3b13b0c9a2774a54d8d5a2c5053ac2eebb14cad"}, {&(0x7f0000000240)="ae61a8d192171409dc2c19809ce70f90c61b402d89906f876fbb89196fa57c9dd7ed6fe73d4a9a050d32416a7e622c1c9943ab04d4e7db1546fab943d95d0a7057459e2d58c83e7f97ddda17b3aff67efc92f873b90a00b5d3c8226357fc7dce76f9ccb0c757e1f3f3d77ab2c382b1f474dbfc9f"}], 0x47, &(0x7f0000000000), 0x0, 0xb9efff7f}, 0x0) [ 309.111123][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:32 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc25434e49a3a1e0b, 0x0) close(r0) 00:34:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5001000010001307198040056565bd0000000000", @ANYRES32=0x0, @ANYBLOB="090000000000000008000a00140000002500120008000100766574684db8"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4084) chdir(&(0x7f0000000240)='./file0\x00') creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 00:34:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 309.299542][T12984] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 309.341954][T12984] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. 00:34:32 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:32 executing program 2: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001600), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xffffffffffffff5c, &(0x7f0000000180)="92f2c66eed730908ccde45db6bfc3dde1ea13bc68ece0619ffe96d3e4d87f80126a5f83aec15a9d96f0d458381576525fa861b04f179cc1cee4af1a1416da0cb373a8f3fc908cb0cc8e5da693dce5c52ae46fa881026dc62cbe991c3eba594ed25a2de74e841a746dc30c3e58853c1c2c793a95d52a53d98d4a0cebe0ad43767c23e82d195fe17addba1cd1df1c3e336925a3746387f75395c26c7490e7b5d317aa9b94162cb5159e981f84ffdecaff81aef74dd29b7d1903584d6e0a775522b1e90bb00487c5d6bca1a34c5a0c906a0d11c2a15e403230f4aaf95586cc3a81cedbe83136bf87301415e6e54b2fdcf25cb4aba0ffb"}) [ 309.495149][T12984] batman_adv: batadv0: Adding interface: veth3 [ 309.523513][T12984] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 00:34:32 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 309.610187][T12984] batman_adv: batadv0: Interface activated: veth3 [ 309.661272][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:32 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 309.760710][T12984] syz-executor.1 (12984) used greatest stack depth: 17752 bytes left 00:34:32 executing program 5: r0 = syz_open_dev$hidraw(&(0x7f0000000100), 0x1, 0x0) read$hidraw(r0, 0x0, 0x0) 00:34:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000500), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x40004580, 0x0) 00:34:32 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xe58, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/169) 00:34:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:33 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 310.209045][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:33 executing program 2: syz_open_dev$evdev(&(0x7f0000000040), 0xffff, 0x28040) 00:34:33 executing program 1: syz_open_dev$evdev(0xfffffffffffffffc, 0x0, 0xc80f0) syz_open_dev$evdev(0x0, 0x0, 0x0) 00:34:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001600), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "0813b600000000000000f5ffffff0000000000000000000000000200"}) 00:34:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:33 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:33 executing program 1: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) write$hidraw(0xffffffffffffffff, &(0x7f0000000040)="6728e48e5654901dd407aea899fb943ab511890fb2785e72c15136d1863c13515fe92c3f8e22147fe54fd5b132664e1c83c6d8f8fa7f1b08d550ba33199823c3bb18f54362355da29cd89fed2c2a2cb1c026a2cabe7e47d20de494b42cb1bd38a2e5f5e01be5516d270d4e5630555dd1c55a63515e72936c08d00beeeaaa18e93e67cb9b19dfbd82316285bfa6f40ce1096126751f59f130bc4018ab4a4bb6cb30ecdc2ece763d19775c669836af12ef2f6bc8cd3e7e7651b109b5ffba27f85b989b3ebd7e7c386e00e2fb99bb95b2f23dd8f084fab5a6ec0dce812a2307598bd796abcc8f9136f7dd342bba100d8654eed40bef1e3dfeeb4adb9bacc5a0249d84b2566d4b3d13d3fcf61c87885ff3288762439ede7016dca7c28756380b8b059dc7884bda95b7c0304e467ad059ba5e210b30102c77791cb60f6fabb1e56d17f465f26dd4a7f56dbd335f1d826f6fbfc8bf945f2ec5a670c970f6caa54aa8e59cda812aed6bfaa05f369e2f6db4cebae6481083bf4a009fa38dde50eb1354ece113f91ee8bf7ff36cc05d6bd8b6de3f4199279ad9d08cd70dd82dcda50fb56bfbd2bcbe6bcbba34975d58e68985cd05a0fdbe21e66459a04dffadf27b68620cca715915406f51d05fcca5cdbcd09ae6d9ed9a2d398a24ae180b1d7090d49d383382fc5baac7d93db46cce8c200aeb28ae795f2a3185696987dd62ad8b0532f2f0687d4f8bbdeaf4edb61319e5d73b2331efe8226abd0a734311e378ea815a7b1cdb27e8233a1dd400060342beda8d29c2ecc83eb68ab49aa53a87acd9f28e7ea1f941df2fe4971fac334fd0ea9d0145d9b8ee4b632e1dd18090b9bb08b7c6d6e8ac4eebb4bfe27b7877198fc639845df725ea33a34bddbbf19607246b80062da313879fa6d4cae6ef783f11b73930d7b3ba0bf49e03c7554427f37703fb799a5837dc8ad0367328afacc659f8d1c176919e9c7a3cb39ec7192b12859846bd70ea96ddd90738d281ae9c55de47d83a27662ec2b887d4dc59a16abb9077d4b9d84da589b30df70c55119dcac3649db5a69a59f81cb59bf8957ecd1819d8d7d51b158aa72ea06e9ee1c5ed76985c9df4615db836bbcd020e9cfda2b6cd41de33d4bf70ad679fa22b0b563faa9f0d9c7397530d5f229eca272ba282302649186664c06eb858d0ed8191cfd0f498b960467c53ade9601d2dd0e1fa48df15700f3a85f830263a88760119c79c17421afbe04e392b4b2c5bca9c8a3dffce529b513f22257f71c4c95a0b0e0a3810d87d26df2738d323b41620f080f65e23f0f72451243da528e09b93718588a34476e773bb4259ec970b4f76a73c99a6776ba4a0b75d5013c989e53753fdfeb75b7f3a6600a4b8fb199d2408d8760e8ded41f29bc51c3b5f4dab7707c8481afed693465614fb71753f62849acf1a2e3e6b6fd31909b178561864e870d08ff2d6b4a19fa6dc7619d4ac8e93f90eece073dff101bfaabfd2b6cd772b1ed26d69a36f729edbc40cc25a9de7f1c450431673af3b73abd4a71a50690aea7708dc97710e5130354114de2098eade3956096f317e7f9eec5236e5d0fc741e0821bd980e61c5ecac336b75e05290f793ea442bab1402c37577fd2960146f67799f9c9041418d2c297b020eedbe274e7df5b04892e4e9ca0ca580217ab35299ad3f9db3452f0e8ef86a2add2cf08b0eb865f115415f4d2ead49a3eea8d84bca32f120b4b2353da528feae823a466cd5c3f3459305dbc6ff4093a3b8409abf71eeeec7ee4d9ea47b227378d64754ebae3e5c0c700e75da8fc0f06c324dff0f99f8c37fc6f498634194909a4f15d155178638e9bb055c4ce75c16c70cf7adb4c6667bbd89365127ca3be710ee956e554b077874d72434e74757b312b24b0eabdefe1a61e1e13714d929516e01136d1fa6e20d86a9af8ae6280651569e854e38587c1b1cf6e6cada1d934dafee1b8cc9772ca51e604edca2a32080f2dc2247f232239e4184d54a229e370ccb0a8983b2398ea4421fc1688ba5928e3b70c7468e14d00fc5813d2b9e491189f82e0adad07f698f3ae5935b9f1dc87e625a046779020fd22d8d2c8379490efc83cf3ad4331666bc2f1f8304d18ee54a232ef3ff10c7e1d1fd7da4de59ecde68cb77dbf4b0df626fe526123e95c9cc47b11efe27ef7e1fc3e4b0b4855c4d4b024a59c9594f8641355c253d603c04f8f2e0ad189fb78c6a8436a0168496b3e701cec22594d2bc9edc894a767744c3905722703b40e65c13509372adb87a3d5b532587f1ad9345ad1848a04c510a2ee2dacac5197756907672005d5e50298d047d6a2a4b13e2326769fb8fd6d8cb9ac7522066bc93b7e84a9a0ec2d0c17b7e672c424d790938b68367b5b43411bdcd73de271c74936d29416a3cb32d1299c0e6a76c5b08b124c86ad97ff7ffbdc98a9c476ec82a7ff8d8a02727494758474b5034f342ad945f0dec54fdd8a22e47eec00b25e4e4a93cadb6034d71611031fa0ae75910ec1b4e8dbd921a90628ea966915f89452a2e8d5e1fff222a5521cc8e33f725dd0f8a36a8e411d8260f01b30a96eff1f2311523827861e90f5b7a066402a6751bf485747a80af183c7cdc84d7468bb90f5de506c1ab66cbd7e81bf26637092e69c426ef24b820c0a1e887483b2dc886738701468b082cde3d38b0929ebe7d2adf966f8edcc85f2d05b9aa3886a3cb8962d8ffda48ad24f232e1fea20781d841b6d511debf61be7232f6b708d3327ade8d5b24e836d0e54896eb48eae71fe2df3a8a94394f37c814eb3e143ba0113d46f1aa410aa1e387cf65c2dada5cd84b368a54f4f6257dbf887626eafb67cb431016899fc782ac2dd9d323c5cd7efb8c16ae6796e2ca52f8220ed9edb6c488455721577a2f1e9d821357bb00d8baef898d9420faadf7ed5ae4b685f53e950d95522944898c467b119e05a9894ac10619bf2cc7652b8a3fa8816d142c09ebaf25d4691b044c564c7d2dbd1ad6c9623f120295040ec56830908dde167ee4bfaee8272d91b4a50fe79dd1752644d5933d78214fccd78787c065521c9e74b48a919f2a437e4efbf961ffff4389505e2087728eaff6aabb7925376e69a925c1335fa4487cf6bb6ef20ff43020eb71f564265702d03bef6a964f198595e8f577ccc2eaa7f9b2e024afc23726723c68a1401d7c6891058c73710ade17a63d8d74a2aff9b2f31d0cdc40bf8c825837a26863940e908a20c2564bea61e20de4e192405c23a98a41d4c024358eac502172ad9c6bf4a060d27c429af71d7a1315848b74025d52b81319d34e1f14a42b0ecd408fca00d700bea397799b79ea4134f1780bcd2bfda3d50313e18e8c19e27d452713d20936c184699209e8670e8f4bc33c5ac2c9582dc3916de56852bbe2ffe30d17b7d3c637b7c85c8920c0c3e176da4f6b822f6a5365ef59ffe9aa74ad97a4d9b73106ba1fc8f3c87ca9793b7c200d27a5ab4181ec95fd6b67dff00e57849c8cf93c8d0e0da2e6df2712cf9519a733ac232cacca8ad1827a72c32d57bd457a943549ecc93e6841bcec0eef3cdf1d75ee450ca6de4090e0d52195fd11f8a4e095f67af0af8704fbcb3dfe31bf781040759ade739becaf09f9273033f8cd56cec8b2223c5e331f7b24f7ec4a7aea655c12bfdab1e64ba1dd1d2522c7823cedf0e064bf39e8a7ac093e510ea78bcb160a350cd3da1761a0862643a6744c0d06016f7398e3da6539b8ce65dab19bf2cf3409af592a2a8e3bb487308cfbbfc990237e2be4505d782871895a404c0840d83d781aac09fc0ac1430ed89bbfc56d6ac19c5585415b31b8907a99a76a1788daa18f89dc066fd524154915f9d6365652e97066b7aed686fa5a669cf86ccf24d6695b3ae164bb9fc147f6c7c4e444bc5d7dc7ea9b4efc966159093bd7154af532fa0425d5742f488c643a1eec0e33c6307c9576b89b56d5eb4c59fb590466ba1e6613f49ac36ca64272eedb322f51aae905a59bf2e044d7db199f4840b5c8e1c3cd9b8a9cca351013432ae62f12bdb753079d303b4243ecd7154e2804396ec0ca6292905d712c05b3894afedd90ffc26d7e6eca1a64653723f6d110a5898230ee9942cb97416e1c39fadc04f48602bc657dd075a4fa8afd0a7e4e7e4d060fd44d1b97808936087092fbbfa86fe478170e18cd421b8409bbae58bda9518500fa5ee3cd698183e53135cb720925c04d95cd01b5619213c7f33fb61f317c0865821a8e44332f10db99186740ceeeb34fce07e481120da79c73671ed1178788c5bb97ade8491906a16186bb58f3e54cc3e2990bb1362b8f94f83c55e0e398278a53d3572140b73a87ebd257b338ec675ceb57aa605082a8d00e8d229a00aac848f9de9628d148bc6a1559568c627697730e5b5803e57766089d51d03039d66bf2db2c424ca9d61a82d3ccad37e426153112a05f590d800cf931017fc7482f9d090f03e2194c3db65014401d1d01449e57d8ffb64b6507f5758d975ef2c94e6e716718783caa278b452cda28a47046cf43fcc42e7f57ba71ddb57ad14dce4ffaaf8e224325a01d32e5aa41d59b631e9d9307fbce57664d5be81ee903314cbbc0b31cc9d7b10e8bbca103a7c6e7ab2d3bd1f5a598ba28838d89030aa1c2801bf7f4270c80ff2d1c0ab25db676f66cd64df6307d33026e8b753759f20054005dfdd49d8329948e3c9b65b80d866adab9ce7ddd3d44bed9ef8dc0824638f3aba5bb8c3254b3e541b43d48915683e95ee5ef85a676a580c31f4453cc6e63916478c18da508607dd85aa7af95018bee1c4809312357c2b804442def6e1f26a890e98cd05079b454f4d0ecb33ca4ef5af9788147f315a87e0b2d818d2c2ee0655eb60c7f1aa69b41e82f3d0588d1c14521dc0c26c46fb6a878ed6b771c412850a9a9b48f0d5f56bfddc9e676913ec5cf2b5f4fbd1d0d900d4005836a09a012e641eca0ce81a03e99eea8bc772219c60725d3bd7d199a9a4d560816baab81f64534b23c0f1f113d19435e8cfd1bffca493165930f0240d9c31ab226c661b5732047f2d74754134b9c84f170a66d25650a7ac1aa93a29f398a27a2038ea46f2db8e6e21f51976b8177ede9ca27d8e98607e25ef5899417d5c6f3e951b0b0af279a71e7aaab1c535fee99c9c0a6d987c75677b03ba327b0ba96a968ee9feceae16f8643d25c057a7902703ecb18c2c6d35f94f8457827fbd904d69da1fb405e3ef005c1c07b25893d7ac6c79897e682ba42dbf6291bdb72a980b84f38da575901fb1b8ccfe75207bc5f7f936f3e44ca790d76bfdbc7306db9643fe9c2177810050effc8685fc0ff26dd4bf65697ab26be132adf4379ce38eca3a1e31d4a0f810b90569345259691d74575e14d4294d325678b04f539d44e9194d3b53b4178ec4c98992c15223145657ae14d97d0073651d73fe586de42236bb1e9e0da8f907056b1c53b74c75d7a514716e44306366b56d8e522b315f63026a9fb7b72ce3179ac0722da521c95151603e2fe9bae6726a69470bedddb284f56cd7a0f011a98dadcc7b37584d927504549d244cea6ad7255bb2955c1af99493852f2feff4d5efbba7f04508478ccdbe01bb914e53252c3489dd5f44667f1ca0901990a1a64064a141ebb9d83ce243bf081db5ffecedbe3471d4324bef23f14bfc1a4ac82de5e6a7209f6038f2c41e4c1ad352c9cfebb676afe86800f5c74697d310bcd8482c68b8b1cc9375f5e1f697ad5d2dfe9a51bd0c62c6c63ba0a944c3a5032e0596a84bd24ce113f9403992b0d6e5eba2ccc", 0x1000) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000001040)={0xff, "71191c92c4e0b3077f81bd5959a658fda857787b8582b88e61f8c8a7502d9eef872db08b8b2232d3263449690788788ecdfcc3de6cb6ea555d6fd830b609c4fc"}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000010c0)={0xe0c, "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"}) r0 = syz_open_dev$hidraw(&(0x7f0000001f00), 0xfffffffffffffffe, 0xbcad70afa45e1dd7) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000001f40)={0x7, "b419ce94b894e19b88e2bffc1344b7f6dbcf562d72b8fd036c1be6324da8b074e38a2ac09a68c878ff90d74f808f1bb6cbfcc0e9acb10df6566afb7e9be7ba46"}) syz_open_dev$hidraw(&(0x7f0000001fc0), 0x6, 0x1) r1 = syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000002000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x4, 0x50, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x1}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x9, 0x9, 0x9, 0x3, 0x3], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0xcf, 0x1, "", '$w'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x58, 0x9, 0x8, {0x7, 0x25, 0x1, 0x2, 0xb1, 0xca8f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x40, 0x3, "d38234a8ad"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x81, 0x8, {0x7, 0x25, 0x1, 0x0, 0x81, 0x91b7}}}}}}}]}}, &(0x7f0000002400)={0xa, &(0x7f00000020c0)={0xa, 0x6, 0x201, 0x1, 0x5, 0x1, 0x20, 0x9}, 0x13a, &(0x7f0000002100)={0x5, 0xf, 0x13a, 0x5, [@generic={0xd8, 0x10, 0x2, "e10375fe852020c8b80f827e066ad4dd6bafae243a4ad64e3d2bdb10cff8f59bd0d68af7a62acfbad328ec208ce677fed62fdae1fa39309d6f6e4a5ce128d6dd8153e24bc7936947c30f5b39c2e25017c5f8da31a3c84b73049e027d15e4d80874bad4469266e3c7f91714df8074cb0d02d72fcf8849355b07643afa47ae90b22cb7569cf35179741366f48c524777700a60f91d4a787c7ce4e0c77054235e30df400f5cb16c623e9b38c9f2d1a802a75125e7bc56bf4e1f5c36f091daeb04aec79355df6d385ffd2880a2d8ca2c33f78814e26fd2"}, @ptm_cap={0x3}, @generic={0x49, 0x10, 0xa, "753ffdd5ecbc17a96d3d0eb8b564dea2e31b003663a746dd61a2bb69ba6c2bda17870a20865d925e6e5bda10114d44a61ad2e6629390b4511ce0b164c190745cd5cf5b079768"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x1, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3f, 0x3f, 0x93}]}, 0x4, [{0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x43e}}, {0x100, &(0x7f0000002280)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x813}}]}) syz_open_dev$hidraw(&(0x7f0000002480), 0x1ff, 0x32000) r2 = syz_open_dev$hidraw(&(0x7f00000024c0), 0x401, 0x8c000) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000002500)="c37bd225b284ce600e8370971087f2616afac7265df7210b55f1d13762f3") r3 = syz_open_dev$hidraw(&(0x7f0000002540), 0x20, 0x208000) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000002580)="16126495632580e14489bed9636dccb35f34e526544fb0da26717fc3deb64fafd97b2766c2950db0803b02eedc5c2105bb12b2d8371ed4556de490de8f37d508342c7e5e1d376d36740714e89b08218d81b40cf2dbce8637fe8683c29191653b7f9ab0638fea3429184063078b6e17c5d0c1074ba90f420d10e6f60147ea9ab606c2ae9aa260cad8c3025ef8531139f910c09aac") syz_open_dev$hidraw(&(0x7f0000002640), 0x7fffffff, 0x561900) syz_usb_disconnect(r1) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000002780)) r4 = syz_open_dev$hidraw(&(0x7f00000027c0), 0x6, 0x10c00) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000002800)="ce0f6afb4ddd8d68894f1ff07837bdd8aa60f26d7034f87520bd598ff79ad5ca5720d97652958a33bf73d6726280ea8bea5a9fac2c672914088b5a8314492e9c83bf647b2cda1df1aa7aa147c6ee7c3ab1929bbc") 00:34:33 executing program 2: pipe(0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:34:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 310.520193][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:33 executing program 5: fcntl$setown(0xffffffffffffffff, 0x6, 0x0) 00:34:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:33 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:33 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 310.752684][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 310.926229][ T9864] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 310.953373][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 310.976043][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd 00:34:33 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 311.086176][ T9773] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 311.176120][ T9864] usb 2-1: Using ep0 maxpacket: 16 [ 311.207153][ T5] usb 3-1: device descriptor read/64, error 18 [ 311.286265][ T9773] usb 6-1: device descriptor read/64, error 18 [ 311.386124][ T9864] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 311.395414][ T9864] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.411708][ T9864] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.506005][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 311.559203][ T9773] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 311.586657][ T9864] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.604263][ T9864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.615683][ T9864] usb 2-1: Product: à ’ [ 311.660448][ T9864] usb 2-1: SerialNumber: à “ [ 311.706019][ T5] usb 3-1: device descriptor read/64, error 18 [ 311.756010][ T9773] usb 6-1: device descriptor read/64, error 18 [ 311.844780][ T5] usb usb3-port1: attempt power cycle [ 311.876413][ T9773] usb usb6-port1: attempt power cycle 00:34:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 312.046075][ T9864] usb 2-1: 0:2 : does not exist [ 312.067525][ T9864] usb 2-1: USB disconnect, device number 2 [ 312.266048][ T5] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 312.295998][ T9773] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 312.366373][ T5] usb 3-1: Invalid ep0 maxpacket: 0 [ 312.386480][ T9773] usb 6-1: Invalid ep0 maxpacket: 0 [ 312.516233][ T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 312.546159][ T9773] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 312.607224][ T5] usb 3-1: Invalid ep0 maxpacket: 0 [ 312.612810][ T5] usb usb3-port1: unable to enumerate USB device [ 312.646411][ T9773] usb 6-1: Invalid ep0 maxpacket: 0 [ 312.652381][ T9773] usb usb6-port1: unable to enumerate USB device 00:34:36 executing program 2: open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 00:34:36 executing program 1: open(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x28, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4c}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb3, 0x0, 0x3f}}}}}]}}]}}, 0x0) 00:34:36 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:36 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 313.700252][T13134] __nla_validate_parse: 1 callbacks suppressed [ 313.700267][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:36 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000980)) 00:34:36 executing program 2: lseek(0xffffffffffffffff, 0x0, 0x0) 00:34:36 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:36 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:36 executing program 2: io_setup(0x1002, &(0x7f00000014c0)) [ 313.984228][ T9773] usb 2-1: new high-speed USB device number 3 using dummy_hcd 00:34:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:36 executing program 5: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000240)) [ 314.081002][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.195932][ T9773] usb 2-1: device descriptor read/64, error 18 [ 314.485873][ T9773] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 314.685974][ T9773] usb 2-1: device descriptor read/64, error 18 [ 314.806067][ T9773] usb usb2-port1: attempt power cycle [ 315.215833][ T9773] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 315.311413][ T9773] usb 2-1: Invalid ep0 maxpacket: 0 [ 315.475785][ T9773] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 315.585998][ T9773] usb 2-1: Invalid ep0 maxpacket: 0 [ 315.591514][ T9773] usb usb2-port1: unable to enumerate USB device 00:34:39 executing program 1: msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5) 00:34:39 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8, 0x0) 00:34:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 00:34:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:39 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:39 executing program 5: bpf$MAP_UPDATE_ELEM(0x9, &(0x7f0000001080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:34:39 executing program 2: syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x22) 00:34:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 00:34:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:39 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) [ 316.957997][ T3251] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.964370][ T3251] ieee802154 phy1 wpan1: encryption failed: -22 00:34:39 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001640)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 00:34:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:39 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 00:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280), 0x4) 00:34:40 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='rpc_pipefs\x00', 0x0, 0x0) 00:34:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, @private2, @mcast2}}) 00:34:40 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:40 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x8, 0x0, 0x0) 00:34:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891e, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 00:34:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:40 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 00:34:40 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:40 executing program 5: syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{0x0}, {0x0, 0x0, 0xeffffffffffffe01}, {0x0, 0x0, 0x3}], 0x0, &(0x7f0000000240)={[{'/dev/dri/card#\x00'}, {'/dev/dri/card#\x00'}, {'+\xf9.!'}, {}, {'/dev-dri/card#\x00'}], [{@subj_user={'subj_user', 0x3d, '/dev/dri/card#\x00'}}]}) 00:34:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x0, 0x2, 0x10001, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:34:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:40 executing program 2: getresuid(&(0x7f0000000d80), 0x0, 0x0) 00:34:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 317.772695][T13243] loop5: detected capacity change from 0 to 147454 [ 317.837254][T13243] VFS: unable to find oldfs superblock on device loop5 00:34:40 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:40 executing program 1: memfd_create(&(0x7f0000001b00)='/proc/self/net/pfkey\x00', 0x3) 00:34:40 executing program 2: socket(0x2, 0x1, 0x5) [ 317.925507][T13243] loop5: detected capacity change from 0 to 147454 00:34:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 317.973562][T13243] VFS: unable to find oldfs superblock on device loop5 00:34:40 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4080) 00:34:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) 00:34:40 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:41 executing program 2: getresgid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) 00:34:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:41 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 00:34:41 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_COOKIE={0xfffffffffffffe07}]}, 0x20}}, 0x0) 00:34:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:41 executing program 2: setfsuid(0xee01) syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0) 00:34:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @ethernet={0x0, @broadcast}, @tipc, @qipcrtr}) [ 318.508162][T13296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:34:41 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:41 executing program 1: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f00000000c0), 0xd0, 0x0) 00:34:41 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x109000, 0x0) 00:34:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:41 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:41 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) 00:34:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001540)={'ip6_vti0\x00', &(0x7f00000014c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}}) 00:34:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) 00:34:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) getsockname(r0, &(0x7f00000009c0)=@xdp, &(0x7f0000000a40)=0x80) 00:34:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:41 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 00:34:41 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:41 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) 00:34:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:41 executing program 5: io_setup(0x1f, &(0x7f0000000000)) 00:34:41 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:41 executing program 1: memfd_create(&(0x7f0000000340)='-\x00', 0x6) [ 319.186888][T13338] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 00:34:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:42 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a", 0x3, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:42 executing program 1: select(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)={0x77359400}) 00:34:42 executing program 5: get_mempolicy(0x0, &(0x7f00000000c0), 0x468, &(0x7f0000ffb000/0x2000)=nil, 0x3) [ 319.404067][T13352] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, 0x0) 00:34:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:42 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a", 0x3, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:42 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x5cef819f, 0x40000) 00:34:42 executing program 2: clock_gettime(0x5, &(0x7f0000001a80)) [ 319.678641][T13370] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) 00:34:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:42 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a", 0x3, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 319.944752][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:43 executing program 1: syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) 00:34:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) 00:34:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10}}], 0x10}, 0x0) 00:34:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:43 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92", 0x4, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gretap0\x00', 0x0}) [ 320.445003][T13400] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:43 executing program 2: socketpair(0x29, 0x2, 0xa7b0, &(0x7f0000000040)) 00:34:43 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92", 0x4, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 320.549487][T13403] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 320.556429][T13403] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 320.569433][T13405] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 320.577028][T13405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 320.630949][T13405] vhci_hcd vhci_hcd.0: Device attached [ 320.641480][T13403] vhci_hcd vhci_hcd.0: Device attached [ 320.683683][T13408] vhci_hcd: connection closed [ 320.683815][T13406] vhci_hcd: connection closed [ 320.688637][ T101] vhci_hcd: stop threads [ 320.698190][T13419] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) 00:34:43 executing program 1: syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) 00:34:43 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92", 0x4, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:43 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000280)) r0 = getpid() timer_create(0x3, &(0x7f0000000000)={0x0, 0x3e, 0x4, @tid=r0}, &(0x7f0000000040)) 00:34:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 320.820043][ T101] vhci_hcd: release socket [ 320.825937][ T20] vhci_hcd: vhci_device speed not set [ 320.856510][ T101] vhci_hcd: disconnect device [ 320.899871][ T101] vhci_hcd: stop threads [ 320.905754][ T20] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 320.924604][ T101] vhci_hcd: release socket 00:34:43 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0x7, 0x0, 0x0) [ 320.948829][T13431] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 320.951354][ T101] vhci_hcd: disconnect device 00:34:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0) 00:34:43 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0x5, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 321.017606][T13437] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 321.024180][T13437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.043493][T13434] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 321.050046][T13434] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) 00:34:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 321.130787][T13437] vhci_hcd vhci_hcd.0: Device attached [ 321.136508][T13434] vhci_hcd vhci_hcd.0: Device attached 00:34:43 executing program 5: io_setup(0xf42, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x10000, 0x0, 0x0, 0x0, 0x0) [ 321.183000][T13441] vhci_hcd: connection reset by peer [ 321.188696][T13439] vhci_hcd: connection closed [ 321.189132][ T251] vhci_hcd: stop threads [ 321.215257][ T251] vhci_hcd: release socket 00:34:44 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) [ 321.238682][ T251] vhci_hcd: disconnect device [ 321.241664][T13453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.268344][ T251] vhci_hcd: stop threads [ 321.308316][ T251] vhci_hcd: release socket 00:34:44 executing program 1: syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) 00:34:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:44 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0x5, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 321.334957][ T251] vhci_hcd: disconnect device 00:34:44 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xc}, 0x40) 00:34:44 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) [ 321.475669][T13466] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 321.482234][T13466] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) 00:34:44 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0x5, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 321.521161][T13470] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 321.525925][T13473] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.527737][T13470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.538142][T13470] vhci_hcd vhci_hcd.0: Device attached [ 321.555612][T13466] vhci_hcd vhci_hcd.0: Device attached 00:34:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) 00:34:44 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80140, 0x0) 00:34:44 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 321.688079][T13468] vhci_hcd: connection closed [ 321.688780][ T134] vhci_hcd: stop threads [ 321.701849][T13472] vhci_hcd: connection closed [ 321.720553][ T134] vhci_hcd: release socket 00:34:44 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:44 executing program 1: syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) [ 321.775659][ T134] vhci_hcd: disconnect device [ 321.799849][ T134] vhci_hcd: stop threads [ 321.817142][T13489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.829538][ T134] vhci_hcd: release socket 00:34:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000140)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xbb\xbb\xb0]\t\x0f\x89d:\xfc%\xb4\x8f8b6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82{)\xde\t\xbb\x8a\x16\xa4L\xa6\xba\xd9\xd7\xd6\x18\x82b\x87\xc0^\xfd\xac\x8e\xfd\xdf\xb8\xe2\xd4\xd8%\xb1\x8e\x80\xaa\xbfM\xb3\xe0K\xf6U\a\x00\x00\x00>\x80\x00\x00\x00\x00\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000580)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d:\x8f\xecb6\xd6\xd7AF,\xa3\x00~\xbbW\x00s\xac\xb6\x12N\xd6\xc0\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\xda\xb6O\xc6l\xd3\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x11\x00\x00\x19\x91Rw\xb8\x86.\x94V\xca\x02p\xe1\xa9\xac\x85\xa7\xe8\xcf\xfd&\xfa\xb0\xe8\x19\x06\x00\x00\x002I\xb7-H\x8at@\xcc\xab\x16\xael\xed\xdb\xac\x00\xfc\xde\x8d\x7f#^x\xdafXL\xde-L\f\xb5u\xdeO\xe4\xbf\x06\x16\x99\xc0\xde@>A\x8b\xe0\xc7gB\xdb\xb2Y^C?\x86\x9e\xdb\xca\x15\xba\xfd\x94\xa4\xe7\r\x93\xc3\xd8\x8fhK\xcc*]\x85A\xc7\x93t\xb5\x88\xc75\xdfQ\xcde\xd0\xb2\xbfgV\xae\x84\xb5\xf9\x8d\x81\x96\xb5=\x8cf\x13\xdf\x00\xcfEI\xed^\xc0\xe9?\x18\x81\xd5\xa9]4BWt\xa0(\x9e\x02\xb76h\x1e\x7f4V\xf5\x1e\x0eh\xb3\xbf\xc0\xd9\xa4\x8c\x9c\xe6\xa2\x0e\xdd \xf2\xd4\xdd\x16\xd5$%\x95\xf3g6\xe2\xd6\x17\xe1\xca\'/\xcf_\xec\x97\x88_\x15\xd2{\xc1\xa7\x8e\xb1\xe0L\xd0\xd9\x856\xcd\n.a\xc6P\xb9\x066JE\xf1\x01\x88B\x14\xbf3\x80e\xa18\x86\x0e!u\xd3\x8ay\x8cSY(\x86\\(\xd8\xe4\xc3\xe7v\xefsJ\x04\xf4\xc4\x8fvq{\x1a.T\xbe~hk-\xf4\xaa\x06\xf62k\xfa5n\x10V;w\x9d\xf1\xb3\xb2\xc3\xef~\xda\x16L\xcb\xb2\xeaA8L\x16\xad\x7f\xe8\xce\xe7z\xf7\xdc\xc7 DI\x1a\x91\x81D\xec\x02\x8a\xfb\n\x8d\x84w\xa4\vB\xb0\xd6:\xbd[\xba\xecUz8\xf1=\xff\xb0\x8d\xbd\xda\xb2\x04\xd8j.\xd5\x89f\xc2\xe0j\xe3\xe2\xf7P\xc1z\x95~_\xdc\x15\b\xf6\xfaBkr\xfaZ\xf6\xd5\xadg\xa0\x15\xa8\xcb\xb9\xa7\xef\x7f\x92K\x8e\x99-\xe7\xa3\xb4\x00@\xc3\b0\xe0\'MdQG?\xa6/\xd1o\r&\xe1\x03\xce\x86\xe1\xd5NL\xb4\xd9\xd3\x90\xb7\x81\xde\xde2\x01N\x819P\xda\x8e\b\x9f\x95\v6\x86m\xb9[j\xaa\x98\x82\xb0i\xd1\xa4G&WV{') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) [ 321.848629][ T134] vhci_hcd: disconnect device 00:34:44 executing program 5: socketpair(0x18, 0x0, 0x3, &(0x7f0000002880)) [ 321.914839][T13495] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 321.921396][T13495] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) 00:34:44 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 321.962678][T13495] vhci_hcd vhci_hcd.0: Device attached [ 321.980632][T13501] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 321.987189][T13501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) 00:34:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 322.088806][T13501] vhci_hcd vhci_hcd.0: Device attached [ 322.123302][T13496] vhci_hcd: connection closed [ 322.123594][T13503] vhci_hcd: connection closed [ 322.135945][ T101] vhci_hcd: stop threads [ 322.145378][ T101] vhci_hcd: release socket [ 322.191020][ T101] vhci_hcd: disconnect device 00:34:45 executing program 5: timer_create(0xde0233091bff7a4e, 0x0, 0x0) 00:34:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) [ 322.226818][ T101] vhci_hcd: stop threads [ 322.260197][ T101] vhci_hcd: release socket 00:34:45 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 322.290300][ T101] vhci_hcd: disconnect device 00:34:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:45 executing program 5: io_setup(0xf42, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:45 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x420}, 0x420}}, 0x0) 00:34:45 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000100)={0xa}) 00:34:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000140)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xbb\xbb\xb0]\t\x0f\x89d:\xfc%\xb4\x8f8b6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82{)\xde\t\xbb\x8a\x16\xa4L\xa6\xba\xd9\xd7\xd6\x18\x82b\x87\xc0^\xfd\xac\x8e\xfd\xdf\xb8\xe2\xd4\xd8%\xb1\x8e\x80\xaa\xbfM\xb3\xe0K\xf6U\a\x00\x00\x00>\x80\x00\x00\x00\x00\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000580)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d:\x8f\xecb6\xd6\xd7AF,\xa3\x00~\xbbW\x00s\xac\xb6\x12N\xd6\xc0\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\xda\xb6O\xc6l\xd3\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x11\x00\x00\x19\x91Rw\xb8\x86.\x94V\xca\x02p\xe1\xa9\xac\x85\xa7\xe8\xcf\xfd&\xfa\xb0\xe8\x19\x06\x00\x00\x002I\xb7-H\x8at@\xcc\xab\x16\xael\xed\xdb\xac\x00\xfc\xde\x8d\x7f#^x\xdafXL\xde-L\f\xb5u\xdeO\xe4\xbf\x06\x16\x99\xc0\xde@>A\x8b\xe0\xc7gB\xdb\xb2Y^C?\x86\x9e\xdb\xca\x15\xba\xfd\x94\xa4\xe7\r\x93\xc3\xd8\x8fhK\xcc*]\x85A\xc7\x93t\xb5\x88\xc75\xdfQ\xcde\xd0\xb2\xbfgV\xae\x84\xb5\xf9\x8d\x81\x96\xb5=\x8cf\x13\xdf\x00\xcfEI\xed^\xc0\xe9?\x18\x81\xd5\xa9]4BWt\xa0(\x9e\x02\xb76h\x1e\x7f4V\xf5\x1e\x0eh\xb3\xbf\xc0\xd9\xa4\x8c\x9c\xe6\xa2\x0e\xdd \xf2\xd4\xdd\x16\xd5$%\x95\xf3g6\xe2\xd6\x17\xe1\xca\'/\xcf_\xec\x97\x88_\x15\xd2{\xc1\xa7\x8e\xb1\xe0L\xd0\xd9\x856\xcd\n.a\xc6P\xb9\x066JE\xf1\x01\x88B\x14\xbf3\x80e\xa18\x86\x0e!u\xd3\x8ay\x8cSY(\x86\\(\xd8\xe4\xc3\xe7v\xefsJ\x04\xf4\xc4\x8fvq{\x1a.T\xbe~hk-\xf4\xaa\x06\xf62k\xfa5n\x10V;w\x9d\xf1\xb3\xb2\xc3\xef~\xda\x16L\xcb\xb2\xeaA8L\x16\xad\x7f\xe8\xce\xe7z\xf7\xdc\xc7 DI\x1a\x91\x81D\xec\x02\x8a\xfb\n\x8d\x84w\xa4\vB\xb0\xd6:\xbd[\xba\xecUz8\xf1=\xff\xb0\x8d\xbd\xda\xb2\x04\xd8j.\xd5\x89f\xc2\xe0j\xe3\xe2\xf7P\xc1z\x95~_\xdc\x15\b\xf6\xfaBkr\xfaZ\xf6\xd5\xadg\xa0\x15\xa8\xcb\xb9\xa7\xef\x7f\x92K\x8e\x99-\xe7\xa3\xb4\x00@\xc3\b0\xe0\'MdQG?\xa6/\xd1o\r&\xe1\x03\xce\x86\xe1\xd5NL\xb4\xd9\xd3\x90\xb7\x81\xde\xde2\x01N\x819P\xda\x8e\b\x9f\x95\v6\x86m\xb9[j\xaa\x98\x82\xb0i\xd1\xa4G&WV{') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 00:34:45 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:45 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000580)=0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 00:34:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fcntl$setstatus(r0, 0x4, 0x42800) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 00:34:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:45 executing program 1: move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x4000)=nil], 0x0, 0x0, 0x0) 00:34:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 323.258958][ T36] audit: type=1800 audit(1627691686.038:11): pid=13561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=14342 res=0 errno=0 00:34:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) 00:34:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000140)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xbb\xbb\xb0]\t\x0f\x89d:\xfc%\xb4\x8f8b6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82{)\xde\t\xbb\x8a\x16\xa4L\xa6\xba\xd9\xd7\xd6\x18\x82b\x87\xc0^\xfd\xac\x8e\xfd\xdf\xb8\xe2\xd4\xd8%\xb1\x8e\x80\xaa\xbfM\xb3\xe0K\xf6U\a\x00\x00\x00>\x80\x00\x00\x00\x00\x00\x00\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000580)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d:\x8f\xecb6\xd6\xd7AF,\xa3\x00~\xbbW\x00s\xac\xb6\x12N\xd6\xc0\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\xda\xb6O\xc6l\xd3\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x11\x00\x00\x19\x91Rw\xb8\x86.\x94V\xca\x02p\xe1\xa9\xac\x85\xa7\xe8\xcf\xfd&\xfa\xb0\xe8\x19\x06\x00\x00\x002I\xb7-H\x8at@\xcc\xab\x16\xael\xed\xdb\xac\x00\xfc\xde\x8d\x7f#^x\xdafXL\xde-L\f\xb5u\xdeO\xe4\xbf\x06\x16\x99\xc0\xde@>A\x8b\xe0\xc7gB\xdb\xb2Y^C?\x86\x9e\xdb\xca\x15\xba\xfd\x94\xa4\xe7\r\x93\xc3\xd8\x8fhK\xcc*]\x85A\xc7\x93t\xb5\x88\xc75\xdfQ\xcde\xd0\xb2\xbfgV\xae\x84\xb5\xf9\x8d\x81\x96\xb5=\x8cf\x13\xdf\x00\xcfEI\xed^\xc0\xe9?\x18\x81\xd5\xa9]4BWt\xa0(\x9e\x02\xb76h\x1e\x7f4V\xf5\x1e\x0eh\xb3\xbf\xc0\xd9\xa4\x8c\x9c\xe6\xa2\x0e\xdd \xf2\xd4\xdd\x16\xd5$%\x95\xf3g6\xe2\xd6\x17\xe1\xca\'/\xcf_\xec\x97\x88_\x15\xd2{\xc1\xa7\x8e\xb1\xe0L\xd0\xd9\x856\xcd\n.a\xc6P\xb9\x066JE\xf1\x01\x88B\x14\xbf3\x80e\xa18\x86\x0e!u\xd3\x8ay\x8cSY(\x86\\(\xd8\xe4\xc3\xe7v\xefsJ\x04\xf4\xc4\x8fvq{\x1a.T\xbe~hk-\xf4\xaa\x06\xf62k\xfa5n\x10V;w\x9d\xf1\xb3\xb2\xc3\xef~\xda\x16L\xcb\xb2\xeaA8L\x16\xad\x7f\xe8\xce\xe7z\xf7\xdc\xc7 DI\x1a\x91\x81D\xec\x02\x8a\xfb\n\x8d\x84w\xa4\vB\xb0\xd6:\xbd[\xba\xecUz8\xf1=\xff\xb0\x8d\xbd\xda\xb2\x04\xd8j.\xd5\x89f\xc2\xe0j\xe3\xe2\xf7P\xc1z\x95~_\xdc\x15\b\xf6\xfaBkr\xfaZ\xf6\xd5\xadg\xa0\x15\xa8\xcb\xb9\xa7\xef\x7f\x92K\x8e\x99-\xe7\xa3\xb4\x00@\xc3\b0\xe0\'MdQG?\xa6/\xd1o\r&\xe1\x03\xce\x86\xe1\xd5NL\xb4\xd9\xd3\x90\xb7\x81\xde\xde2\x01N\x819P\xda\x8e\b\x9f\x95\v6\x86m\xb9[j\xaa\x98\x82\xb0i\xd1\xa4G&WV{') 00:34:46 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000140)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xbb\xbb\xb0]\t\x0f\x89d:\xfc%\xb4\x8f8b6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82{)\xde\t\xbb\x8a\x16\xa4L\xa6\xba\xd9\xd7\xd6\x18\x82b\x87\xc0^\xfd\xac\x8e\xfd\xdf\xb8\xe2\xd4\xd8%\xb1\x8e\x80\xaa\xbfM\xb3\xe0K\xf6U\a\x00\x00\x00>\x80\x00\x00\x00\x00\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000580)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d:\x8f\xecb6\xd6\xd7AF,\xa3\x00~\xbbW\x00s\xac\xb6\x12N\xd6\xc0\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\xda\xb6O\xc6l\xd3\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x11\x00\x00\x19\x91Rw\xb8\x86.\x94V\xca\x02p\xe1\xa9\xac\x85\xa7\xe8\xcf\xfd&\xfa\xb0\xe8\x19\x06\x00\x00\x002I\xb7-H\x8at@\xcc\xab\x16\xael\xed\xdb\xac\x00\xfc\xde\x8d\x7f#^x\xdafXL\xde-L\f\xb5u\xdeO\xe4\xbf\x06\x16\x99\xc0\xde@>A\x8b\xe0\xc7gB\xdb\xb2Y^C?\x86\x9e\xdb\xca\x15\xba\xfd\x94\xa4\xe7\r\x93\xc3\xd8\x8fhK\xcc*]\x85A\xc7\x93t\xb5\x88\xc75\xdfQ\xcde\xd0\xb2\xbfgV\xae\x84\xb5\xf9\x8d\x81\x96\xb5=\x8cf\x13\xdf\x00\xcfEI\xed^\xc0\xe9?\x18\x81\xd5\xa9]4BWt\xa0(\x9e\x02\xb76h\x1e\x7f4V\xf5\x1e\x0eh\xb3\xbf\xc0\xd9\xa4\x8c\x9c\xe6\xa2\x0e\xdd \xf2\xd4\xdd\x16\xd5$%\x95\xf3g6\xe2\xd6\x17\xe1\xca\'/\xcf_\xec\x97\x88_\x15\xd2{\xc1\xa7\x8e\xb1\xe0L\xd0\xd9\x856\xcd\n.a\xc6P\xb9\x066JE\xf1\x01\x88B\x14\xbf3\x80e\xa18\x86\x0e!u\xd3\x8ay\x8cSY(\x86\\(\xd8\xe4\xc3\xe7v\xefsJ\x04\xf4\xc4\x8fvq{\x1a.T\xbe~hk-\xf4\xaa\x06\xf62k\xfa5n\x10V;w\x9d\xf1\xb3\xb2\xc3\xef~\xda\x16L\xcb\xb2\xeaA8L\x16\xad\x7f\xe8\xce\xe7z\xf7\xdc\xc7 DI\x1a\x91\x81D\xec\x02\x8a\xfb\n\x8d\x84w\xa4\vB\xb0\xd6:\xbd[\xba\xecUz8\xf1=\xff\xb0\x8d\xbd\xda\xb2\x04\xd8j.\xd5\x89f\xc2\xe0j\xe3\xe2\xf7P\xc1z\x95~_\xdc\x15\b\xf6\xfaBkr\xfaZ\xf6\xd5\xadg\xa0\x15\xa8\xcb\xb9\xa7\xef\x7f\x92K\x8e\x99-\xe7\xa3\xb4\x00@\xc3\b0\xe0\'MdQG?\xa6/\xd1o\r&\xe1\x03\xce\x86\xe1\xd5NL\xb4\xd9\xd3\x90\xb7\x81\xde\xde2\x01N\x819P\xda\x8e\b\x9f\x95\v6\x86m\xb9[j\xaa\x98\x82\xb0i\xd1\xa4G&WV{') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 00:34:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:46 executing program 5: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) 00:34:46 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:46 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc0}}, 0x81) 00:34:46 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x9f0aae29800565e9, 0x0) 00:34:46 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x1) 00:34:46 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 00:34:46 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000c, 0x11, r0, 0x0) [ 324.213122][T13589] __nla_validate_parse: 2 callbacks suppressed [ 324.213139][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) 00:34:47 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x13, 0x0, 0x0) 00:34:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8916, &(0x7f0000000140)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xbb\xbb\xb0]\t\x0f\x89d:\xfc%\xb4\x8f8b6\xd6\xd7AF,\xa3\x00\x00\x00\x00\x91\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\x9a\xb6OFl\xd3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82{)\xde\t\xbb\x8a\x16\xa4L\xa6\xba\xd9\xd7\xd6\x18\x82b\x87\xc0^\xfd\xac\x8e\xfd\xdf\xb8\xe2\xd4\xd8%\xb1\x8e\x80\xaa\xbfM\xb3\xe0K\xf6U\a\x00\x00\x00>\x80\x00\x00\x00\x00\x00\x00\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000580)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\xdd\xd4\b\xbb\xbb\xb0]\t\x0f\x89d:\x8f\xecb6\xd6\xd7AF,\xa3\x00~\xbbW\x00s\xac\xb6\x12N\xd6\xc0\xed\x05\x00\x00\x00C\xeb&\xc6\xd6\xcb\x85\xda\xb6O\xc6l\xd3\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x11\x00\x00\x19\x91Rw\xb8\x86.\x94V\xca\x02p\xe1\xa9\xac\x85\xa7\xe8\xcf\xfd&\xfa\xb0\xe8\x19\x06\x00\x00\x002I\xb7-H\x8at@\xcc\xab\x16\xael\xed\xdb\xac\x00\xfc\xde\x8d\x7f#^x\xdafXL\xde-L\f\xb5u\xdeO\xe4\xbf\x06\x16\x99\xc0\xde@>A\x8b\xe0\xc7gB\xdb\xb2Y^C?\x86\x9e\xdb\xca\x15\xba\xfd\x94\xa4\xe7\r\x93\xc3\xd8\x8fhK\xcc*]\x85A\xc7\x93t\xb5\x88\xc75\xdfQ\xcde\xd0\xb2\xbfgV\xae\x84\xb5\xf9\x8d\x81\x96\xb5=\x8cf\x13\xdf\x00\xcfEI\xed^\xc0\xe9?\x18\x81\xd5\xa9]4BWt\xa0(\x9e\x02\xb76h\x1e\x7f4V\xf5\x1e\x0eh\xb3\xbf\xc0\xd9\xa4\x8c\x9c\xe6\xa2\x0e\xdd \xf2\xd4\xdd\x16\xd5$%\x95\xf3g6\xe2\xd6\x17\xe1\xca\'/\xcf_\xec\x97\x88_\x15\xd2{\xc1\xa7\x8e\xb1\xe0L\xd0\xd9\x856\xcd\n.a\xc6P\xb9\x066JE\xf1\x01\x88B\x14\xbf3\x80e\xa18\x86\x0e!u\xd3\x8ay\x8cSY(\x86\\(\xd8\xe4\xc3\xe7v\xefsJ\x04\xf4\xc4\x8fvq{\x1a.T\xbe~hk-\xf4\xaa\x06\xf62k\xfa5n\x10V;w\x9d\xf1\xb3\xb2\xc3\xef~\xda\x16L\xcb\xb2\xeaA8L\x16\xad\x7f\xe8\xce\xe7z\xf7\xdc\xc7 DI\x1a\x91\x81D\xec\x02\x8a\xfb\n\x8d\x84w\xa4\vB\xb0\xd6:\xbd[\xba\xecUz8\xf1=\xff\xb0\x8d\xbd\xda\xb2\x04\xd8j.\xd5\x89f\xc2\xe0j\xe3\xe2\xf7P\xc1z\x95~_\xdc\x15\b\xf6\xfaBkr\xfaZ\xf6\xd5\xadg\xa0\x15\xa8\xcb\xb9\xa7\xef\x7f\x92K\x8e\x99-\xe7\xa3\xb4\x00@\xc3\b0\xe0\'MdQG?\xa6/\xd1o\r&\xe1\x03\xce\x86\xe1\xd5NL\xb4\xd9\xd3\x90\xb7\x81\xde\xde2\x01N\x819P\xda\x8e\b\x9f\x95\v6\x86m\xb9[j\xaa\x98\x82\xb0i\xd1\xa4G&WV{') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 00:34:47 executing program 5: get_mempolicy(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) 00:34:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:47 executing program 1: setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) 00:34:47 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:47 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000240)) [ 324.753560][T13628] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote}}) 00:34:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8937, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) 00:34:47 executing program 0: ioperm(0x0, 0x1ff, 0x83) 00:34:47 executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000002180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000040)="7d15", 0x2, 0x2, 0x0, 0x2}]) 00:34:47 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:48 executing program 0: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000005c0)={'sit0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:34:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fcntl$setstatus(r0, 0x4, 0x42800) syz_open_procfs(0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hci_vhci', 0x0, 0x48) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000040)) ftruncate(r2, 0x200002) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 00:34:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x894a, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) 00:34:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) 00:34:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) 00:34:48 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 325.912669][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@pqnoenforce}, {@pquota}]}) [ 325.995914][ T20] vhci_hcd: vhci_device speed not set 00:34:48 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/144) 00:34:48 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 00:34:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 326.222829][ T36] audit: type=1800 audit(1627691688.998:12): pid=13688 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=14364 res=0 errno=0 00:34:49 executing program 0: syz_mount_image$sysv(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f00000004c0)="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", 0xffd, 0x3}], 0x0, 0x0) [ 326.267956][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.301035][T13689] XFS (loop5): Invalid superblock magic number 00:34:49 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 00:34:49 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, &(0x7f0000000300)) 00:34:49 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004400), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000004480)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 00:34:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 326.517562][T13722] loop0: detected capacity change from 0 to 8 00:34:49 executing program 2: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) [ 326.613388][T13722] loop0: detected capacity change from 0 to 8 00:34:49 executing program 5: syz_genetlink_get_family_id$team(&(0x7f0000001400), 0xffffffffffffffff) [ 326.677883][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:49 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000180)) 00:34:49 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 00:34:49 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) 00:34:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:49 executing program 5: syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{0x0}], 0x0, &(0x7f0000000240)={[{'/dev/dri/card#\x00'}, {'/dev/dri/card#\x00'}, {'(-#\xa6\xaa\'('}, {}, {'e'}, {'/dev/dri/card#\x00'}], [{@subj_user={'subj_user', 0x3d, '/dev/dri/card#\x00'}}]}) 00:34:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x14, 0x0, 0x5, 0x5}, 0x14}}, 0x0) 00:34:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) [ 326.966137][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.026180][T13754] VFS: unable to find oldfs superblock on device loop5 00:34:49 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000006e80), 0x121102, 0x0) 00:34:49 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000001580)) 00:34:49 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 327.110807][T13754] VFS: unable to find oldfs superblock on device loop5 00:34:50 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x12, 0x0, 0x0) [ 327.216195][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 00:34:50 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000001580)) 00:34:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:50 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='-', 0x1}, {0x0}, {&(0x7f0000000140)="d7", 0x1}], 0x3}, 0x0) 00:34:50 executing program 2: getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 00:34:50 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000001580)) [ 327.465120][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 00:34:50 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="17000000", @ANYRES16=r1, @ANYBLOB="01"], 0x20}}, 0x0) 00:34:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:50 executing program 2: sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x516a2df1cc168fc5) 00:34:50 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000001580)) [ 327.976165][T13813] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.984103][T13816] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 00:34:50 executing program 5: setfsuid(0xee01) syz_mount_image$sysv(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 00:34:50 executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(r0, 0x1, &(0x7f0000002180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000040)="7d150c70428f3e24ee", 0x9, 0x0, 0x0, 0x2}]) 00:34:50 executing program 2: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000000c0), 0x53, 0x2) 00:34:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), 0x14) 00:34:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:51 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) 00:34:51 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) 00:34:51 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:51 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000004400), 0x2, 0x0) 00:34:51 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x54c40, 0x0) 00:34:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8993, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 00:34:51 executing program 2: socketpair(0x2b, 0x0, 0x0, &(0x7f0000000040)) 00:34:51 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='xprtrdma_marshal_failed\x00'}, 0x10) 00:34:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2}}) 00:34:51 executing program 5: io_setup(0x1f, &(0x7f0000000000)=0x0) io_submit(r0, 0x12, &(0x7f0000000000)) 00:34:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8942, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 00:34:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:51 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001bc0)={0x2c, &(0x7f0000001a40)={0x20, 0x10}, 0x0, 0x0, 0x0, &(0x7f0000001b80)={0x20, 0x3, 0x1}}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000002880)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x30d4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x90, 0x7, [{{0x9, 0x4, 0x0, 0x20, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x8, 0x9}}}}}]}}]}}, 0x0) 00:34:52 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000640), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 00:34:52 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000002000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) 00:34:52 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000001580), 0x5c, 0x0) 00:34:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 329.515291][ T2950] usb 3-1: new high-speed USB device number 6 using dummy_hcd 00:34:52 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 00:34:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:52 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 329.845606][ T9773] usb 2-1: new high-speed USB device number 7 using dummy_hcd 00:34:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 330.041994][ T2950] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 330.055993][ T2950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.080846][ T2950] usb 3-1: Product: syz [ 330.092290][ T2950] usb 3-1: Manufacturer: syz [ 330.104278][ T2950] usb 3-1: SerialNumber: syz [ 330.115236][ T9773] usb 2-1: Using ep0 maxpacket: 16 [ 330.171531][ T2950] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 330.246033][ T9773] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 330.254785][ T9773] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 330.275058][ T9773] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.467738][ T9773] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.476932][ T9773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.485818][ T9773] usb 2-1: Product: syz [ 330.490008][ T9773] usb 2-1: Manufacturer: syz [ 330.495618][ T9773] usb 2-1: SerialNumber: syz [ 330.845347][ T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.875527][ T9773] usb 2-1: 0:2 : does not exist [ 330.893581][ T9773] usb 2-1: USB disconnect, device number 7 00:34:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:53 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 331.064296][ T9683] usb 3-1: USB disconnect, device number 6 00:34:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6(0xa, 0x3, 0x8e) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6(0xa, 0x3, 0x8e) dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6(0xa, 0x3, 0x8e) dup(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2], 0x84}}, 0x0) 00:34:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2], 0x84}}, 0x0) [ 331.883437][T13981] __nla_validate_parse: 4 callbacks suppressed [ 331.883452][T13981] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 331.915485][ T7] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 331.924587][T13984] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 331.950610][ T7] ath9k_htc: Failed to initialize the device [ 331.996666][ T9683] usb 3-1: ath9k_htc: USB layer deinitialized [ 332.003882][T13986] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:54 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6(0xa, 0x3, 0x8e) dup(0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 00:34:54 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6(0xa, 0x3, 0x8e) dup(0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 00:34:54 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6(0xa, 0x3, 0x8e) dup(0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 332.163138][T13996] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 332.444209][T14008] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:55 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6(0xa, 0x3, 0x8e) dup(0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180)) 00:34:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:55 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:55 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6(0xa, 0x3, 0x8e) dup(0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000680)) [ 332.839232][T14016] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:55 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$inet6(0xa, 0x3, 0x8e) dup(0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000680)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 333.137160][T14029] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.238713][T14033] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:56 executing program 2 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 333.481398][T14035] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:34:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 333.545965][T14039] FAULT_INJECTION: forcing a failure. [ 333.545965][T14039] name failslab, interval 1, probability 0, space 0, times 1 [ 333.577670][T14040] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.611799][T14039] CPU: 0 PID: 14039 Comm: syz-executor.2 Not tainted 5.14.0-rc3-syzkaller #0 [ 333.620612][T14039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.630944][T14039] Call Trace: [ 333.634239][T14039] dump_stack_lvl+0x1d3/0x29f [ 333.639211][T14039] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 333.645456][T14039] ? show_regs_print_info+0x12/0x12 [ 333.651203][T14039] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 333.657022][T14039] should_fail+0x384/0x4b0 [ 333.661529][T14039] should_failslab+0x5/0x20 [ 333.666243][T14039] kmem_cache_alloc_bulk+0x6b/0x410 [ 333.671520][T14039] ? percpu_counter_add_batch+0x14a/0x170 [ 333.677385][T14039] io_submit_sqes+0x886/0x7d40 [ 333.682350][T14039] ? io_uring_add_tctx_node+0x330/0x330 [ 333.687931][T14039] ? io_uring_add_tctx_node+0x60/0x330 [ 333.693415][T14039] ? io_uring_add_tctx_node+0x74/0x330 [ 333.698909][T14039] __se_sys_io_uring_enter+0x22b/0x1d30 [ 333.704505][T14039] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 333.710077][T14039] ? print_irqtrace_events+0x220/0x220 [ 333.715734][T14039] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 333.722099][T14039] ? lockdep_hardirqs_on+0x8d/0x130 [ 333.727435][T14039] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 333.733622][T14039] ? trace_hardirqs_on+0x30/0x80 [ 333.738644][T14039] ? __x64_sys_io_uring_enter+0x6e/0xf0 [ 333.744318][T14039] do_syscall_64+0x3d/0xb0 [ 333.748921][T14039] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 333.754839][T14039] RIP: 0033:0x4665e9 [ 333.758757][T14039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 333.778478][T14039] RSP: 002b:00007fbf25a2c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 333.787172][T14039] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 333.795164][T14039] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000004 [ 333.803154][T14039] RBP: 00007fbf25a2c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 333.811348][T14039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.819335][T14039] R13: 00007fffad528b6f R14: 00007fbf25a2c300 R15: 0000000000022000 00:34:56 executing program 5 (fault-call:3 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:56 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:56 executing program 0 (fault-call:4 fault-nth:0): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) 00:34:56 executing program 1 (fault-call:2 fault-nth:0): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:34:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 334.025705][T14060] FAULT_INJECTION: forcing a failure. [ 334.025705][T14060] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 334.073501][T14060] CPU: 0 PID: 14060 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0 [ 334.082685][T14060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.093110][T14060] Call Trace: [ 334.096407][T14060] dump_stack_lvl+0x1d3/0x29f [ 334.101133][T14060] ? show_regs_print_info+0x12/0x12 [ 334.106358][T14060] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 334.112112][T14060] ? __might_fault+0xb8/0x110 [ 334.116918][T14060] should_fail+0x384/0x4b0 [ 334.121456][T14060] _copy_from_user+0x2d/0x170 [ 334.126223][T14060] __copy_msghdr_from_user+0x9b/0x740 [ 334.131691][T14060] ? __ia32_sys_shutdown+0x60/0x60 [ 334.136973][T14060] ? __fget_files+0x35a/0x390 [ 334.141753][T14060] ? __fdget+0x183/0x210 [ 334.146025][T14060] __sys_sendmsg+0x218/0x400 [ 334.150642][T14060] ? ____sys_sendmsg+0x900/0x900 [ 334.155622][T14060] ? __context_tracking_exit+0x7a/0xd0 [ 334.161100][T14060] ? __lock_acquire+0x6100/0x6100 [ 334.166166][T14060] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 334.172175][T14060] ? print_irqtrace_events+0x220/0x220 [ 334.178269][T14060] ? vtime_user_exit+0x2b2/0x3e0 [ 334.183300][T14060] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 334.189334][T14060] ? lockdep_hardirqs_on+0x8d/0x130 [ 334.194667][T14060] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 334.200708][T14060] do_syscall_64+0x3d/0xb0 [ 334.205149][T14060] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 334.211062][T14060] RIP: 0033:0x4665e9 [ 334.214976][T14060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 334.234594][T14060] RSP: 002b:00007f36bddb5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.243039][T14060] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 334.253980][T14060] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 334.261977][T14060] RBP: 00007f36bddb51d0 R08: 0000000000000000 R09: 0000000000000000 00:34:57 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) 00:34:57 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) [ 334.269982][T14060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.277978][T14060] R13: 00007ffe0509402f R14: 00007f36bddb5300 R15: 0000000000022000 00:34:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:57 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) 00:34:57 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x2, 0x1, 0x0, &(0x7f0000000140)) 00:34:57 executing program 2 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:57 executing program 5 (fault-call:3 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 334.614261][T14081] FAULT_INJECTION: forcing a failure. [ 334.614261][T14081] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 334.616711][T14085] FAULT_INJECTION: forcing a failure. [ 334.616711][T14085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.649368][T14085] CPU: 1 PID: 14085 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0 [ 334.658173][T14085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.668241][T14085] Call Trace: [ 334.671538][T14085] dump_stack_lvl+0x1d3/0x29f [ 334.676334][T14085] ? show_regs_print_info+0x12/0x12 [ 334.681649][T14085] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 334.687404][T14085] ? __might_fault+0xb8/0x110 [ 334.692095][T14085] ? __lock_acquire+0x6100/0x6100 [ 334.697149][T14085] should_fail+0x384/0x4b0 [ 334.701634][T14085] _copy_from_user+0x2d/0x170 [ 334.706333][T14085] iovec_from_user+0x13f/0x390 [ 334.711129][T14085] __import_iovec+0xc6/0x500 [ 334.715733][T14085] ? _copy_from_user+0x10c/0x170 [ 334.720785][T14085] ? iovec_from_user+0x390/0x390 [ 334.725742][T14085] ? __ia32_sys_shutdown+0x60/0x60 [ 334.730878][T14085] import_iovec+0xe6/0x120 [ 334.735318][T14085] __sys_sendmsg+0x2cd/0x400 [ 334.739928][T14085] ? ____sys_sendmsg+0x900/0x900 [ 334.744899][T14085] ? __context_tracking_exit+0x7a/0xd0 [ 334.750377][T14085] ? __lock_acquire+0x6100/0x6100 [ 334.755593][T14085] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 334.761609][T14085] ? print_irqtrace_events+0x220/0x220 [ 334.767067][T14085] ? vtime_user_exit+0x2b2/0x3e0 [ 334.772000][T14085] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 334.777974][T14085] ? lockdep_hardirqs_on+0x8d/0x130 [ 334.783171][T14085] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 334.789231][T14085] do_syscall_64+0x3d/0xb0 [ 334.793644][T14085] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 334.799620][T14085] RIP: 0033:0x4665e9 [ 334.803508][T14085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 334.823460][T14085] RSP: 002b:00007f36bddb5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.831867][T14085] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 334.839829][T14085] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 334.847796][T14085] RBP: 00007f36bddb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 334.856044][T14085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.864100][T14085] R13: 00007ffe0509402f R14: 00007f36bddb5300 R15: 0000000000022000 [ 334.881596][T14081] CPU: 1 PID: 14081 Comm: syz-executor.2 Not tainted 5.14.0-rc3-syzkaller #0 [ 334.890434][T14081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.900508][T14081] Call Trace: [ 334.903817][T14081] dump_stack_lvl+0x1d3/0x29f [ 334.908697][T14081] ? show_regs_print_info+0x12/0x12 [ 334.914026][T14081] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 334.919765][T14081] ? __fs_reclaim_acquire+0x30/0x30 [ 334.925080][T14081] should_fail+0x384/0x4b0 [ 334.929525][T14081] prepare_alloc_pages+0x1d1/0x5a0 [ 334.934670][T14081] __alloc_pages+0x14d/0x5f0 [ 334.939291][T14081] ? __rmqueue_pcplist+0x2030/0x2030 [ 334.944696][T14081] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 334.950715][T14081] ? alloc_pages+0x3f3/0x500 [ 334.955575][T14081] allocate_slab+0xf1/0x540 [ 334.960186][T14081] ___slab_alloc+0x1cf/0x350 00:34:57 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x73, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="11268a92cf", 0xad11, 0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x0) 00:34:57 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x3, 0x1a, 0x0, 0x0) 00:34:57 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0xa, 0x1, 0x0, &(0x7f0000000140)) [ 334.964789][T14081] ? io_submit_sqes+0x886/0x7d40 [ 334.969755][T14081] kmem_cache_alloc_bulk+0x180/0x410 [ 334.975191][T14081] io_submit_sqes+0x886/0x7d40 [ 334.979988][T14081] ? rcu_read_lock_sched_held+0x87/0x110 [ 334.985752][T14081] ? io_uring_add_tctx_node+0x330/0x330 [ 334.991342][T14081] ? io_uring_add_tctx_node+0x74/0x330 [ 334.996833][T14081] __se_sys_io_uring_enter+0x22b/0x1d30 [ 335.002432][T14081] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 335.008186][T14081] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 335.014200][T14081] ? print_irqtrace_events+0x220/0x220 [ 335.019688][T14081] ? vtime_user_exit+0x2b2/0x3e0 [ 335.024658][T14081] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 335.030746][T14081] ? lockdep_hardirqs_on+0x8d/0x130 [ 335.035971][T14081] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 335.041552][T14081] do_syscall_64+0x3d/0xb0 [ 335.045995][T14081] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 335.051918][T14081] RIP: 0033:0x4665e9 [ 335.055939][T14081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 335.076137][T14081] RSP: 002b:00007fbf25a2c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 335.084668][T14081] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 335.092661][T14081] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000004 [ 335.100652][T14081] RBP: 00007fbf25a2c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 335.109009][T14081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.116998][T14081] R13: 00007fffad528b6f R14: 00007fbf25a2c300 R15: 0000000000022000 00:34:57 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x2c, 0x1, 0x0, &(0x7f0000000140)) 00:34:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:58 executing program 5 (fault-call:3 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:58 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x7, 0x1a, 0x0, 0x0) 00:34:58 executing program 2 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:58 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x2e, 0x1, 0x0, &(0x7f0000000140)) 00:34:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 335.394500][T14107] FAULT_INJECTION: forcing a failure. [ 335.394500][T14107] name failslab, interval 1, probability 0, space 0, times 0 [ 335.472807][T14107] CPU: 1 PID: 14107 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0 [ 335.481735][T14107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.491816][T14107] Call Trace: [ 335.495111][T14107] dump_stack_lvl+0x1d3/0x29f [ 335.499818][T14107] ? show_regs_print_info+0x12/0x12 [ 335.505043][T14107] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 335.510788][T14107] ? __fs_reclaim_acquire+0x30/0x30 [ 335.516021][T14107] should_fail+0x384/0x4b0 [ 335.520473][T14107] ? __alloc_skb+0xd8/0x580 [ 335.525076][T14107] should_failslab+0x5/0x20 [ 335.529608][T14107] kmem_cache_alloc_node+0x6e/0x370 [ 335.534836][T14107] __alloc_skb+0xd8/0x580 [ 335.539208][T14107] ? netlink_autobind+0x26c/0x2a0 [ 335.544446][T14107] netlink_sendmsg+0x787/0xe00 [ 335.549249][T14107] ? netlink_getsockopt+0xa60/0xa60 [ 335.554550][T14107] ? iovec_from_user+0x359/0x390 [ 335.559481][T14107] ? __import_iovec+0x35f/0x500 [ 335.564330][T14107] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 335.569689][T14107] ? security_socket_sendmsg+0x9d/0xb0 [ 335.575319][T14107] ? netlink_getsockopt+0xa60/0xa60 [ 335.580549][T14107] ____sys_sendmsg+0x5a2/0x900 [ 335.585573][T14107] ? __sys_sendmsg_sock+0x30/0x30 [ 335.590641][T14107] __sys_sendmsg+0x319/0x400 [ 335.595327][T14107] ? ____sys_sendmsg+0x900/0x900 [ 335.600298][T14107] ? __context_tracking_exit+0x7a/0xd0 [ 335.605846][T14107] ? __lock_acquire+0x6100/0x6100 [ 335.610891][T14107] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 335.616880][T14107] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 335.622958][T14107] ? lockdep_hardirqs_on+0x8d/0x130 [ 335.628236][T14107] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 335.634382][T14107] do_syscall_64+0x3d/0xb0 [ 335.638972][T14107] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 335.644865][T14107] RIP: 0033:0x4665e9 [ 335.648892][T14107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:34:58 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x2, 0x0, &(0x7f0000000140)) 00:34:58 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x11, 0x1a, 0x0, 0x0) [ 335.668622][T14107] RSP: 002b:00007f36bddb5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.677319][T14107] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 335.685278][T14107] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 335.693847][T14107] RBP: 00007f36bddb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 335.701820][T14107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.709885][T14107] R13: 00007ffe0509402f R14: 00007f36bddb5300 R15: 0000000000022000 [ 335.756349][T14117] FAULT_INJECTION: forcing a failure. [ 335.756349][T14117] name failslab, interval 1, probability 0, space 0, times 0 00:34:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:58 executing program 3: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000580)) [ 335.843613][T14117] CPU: 1 PID: 14117 Comm: syz-executor.2 Not tainted 5.14.0-rc3-syzkaller #0 [ 335.852597][T14117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.862669][T14117] Call Trace: [ 335.866846][T14117] dump_stack_lvl+0x1d3/0x29f [ 335.871656][T14117] ? show_regs_print_info+0x12/0x12 [ 335.877135][T14117] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 335.882877][T14117] ? __fs_reclaim_acquire+0x30/0x30 [ 335.888143][T14117] should_fail+0x384/0x4b0 [ 335.892594][T14117] ? io_wq_create+0x375/0xbf0 [ 335.897309][T14117] should_failslab+0x5/0x20 [ 335.901923][T14117] kmem_cache_alloc_node_trace+0x6c/0x390 [ 335.907761][T14117] io_wq_create+0x375/0xbf0 [ 335.912308][T14117] io_uring_alloc_task_context+0x303/0x620 [ 335.918297][T14117] ? __io_cqring_overflow_flush+0x650/0x650 [ 335.924205][T14117] ? io_free_work+0x30/0x30 [ 335.928701][T14117] ? tctx_task_work+0x360/0x360 [ 335.933981][T14117] ? __fget_files+0x35a/0x390 [ 335.938770][T14117] io_uring_add_tctx_node+0x92/0x330 [ 335.944107][T14117] __se_sys_io_uring_enter+0x1fa/0x1d30 [ 335.949838][T14117] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 335.955389][T14117] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 335.961451][T14117] ? print_irqtrace_events+0x220/0x220 [ 335.967160][T14117] ? vtime_user_exit+0x2b2/0x3e0 [ 335.972091][T14117] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 335.978236][T14117] ? lockdep_hardirqs_on+0x8d/0x130 [ 335.983611][T14117] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 335.989241][T14117] do_syscall_64+0x3d/0xb0 [ 335.993655][T14117] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 336.000147][T14117] RIP: 0033:0x4665e9 [ 336.004041][T14117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 336.023728][T14117] RSP: 002b:00007fbf25a0b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 336.032156][T14117] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 00:34:58 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x5, 0x0, &(0x7f0000000140)) [ 336.040139][T14117] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000004 [ 336.048215][T14117] RBP: 00007fbf25a0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 336.056494][T14117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.064543][T14117] R13: 00007fffad528b6f R14: 00007fbf25a0b300 R15: 0000000000022000 00:34:58 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x88, 0x1a, 0x0, 0x0) 00:34:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:58 executing program 5 (fault-call:3 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:34:59 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x6, 0x0, &(0x7f0000000140)) [ 336.337649][T14138] FAULT_INJECTION: forcing a failure. [ 336.337649][T14138] name failslab, interval 1, probability 0, space 0, times 0 [ 336.367404][T14138] CPU: 1 PID: 14138 Comm: syz-executor.5 Not tainted 5.14.0-rc3-syzkaller #0 [ 336.377336][T14138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.387523][T14138] Call Trace: [ 336.390802][T14138] dump_stack_lvl+0x1d3/0x29f [ 336.395506][T14138] ? show_regs_print_info+0x12/0x12 [ 336.400702][T14138] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 336.406437][T14138] ? __fs_reclaim_acquire+0x30/0x30 [ 336.411631][T14138] ? __might_sleep+0x100/0x100 [ 336.416411][T14138] should_fail+0x384/0x4b0 [ 336.421000][T14138] ? netlink_sendmsg+0x787/0xe00 [ 336.426281][T14138] should_failslab+0x5/0x20 [ 336.430777][T14138] __kmalloc_node_track_caller+0x8e/0x410 [ 336.436499][T14138] ? trace_kmem_cache_alloc_node+0x2e/0xe0 [ 336.442469][T14138] ? kmem_cache_alloc_node+0x25d/0x370 [ 336.448118][T14138] ? __alloc_skb+0xd8/0x580 [ 336.452815][T14138] ? netlink_sendmsg+0x787/0xe00 [ 336.457845][T14138] __alloc_skb+0x127/0x580 [ 336.462254][T14138] ? netlink_autobind+0x26c/0x2a0 [ 336.467277][T14138] netlink_sendmsg+0x787/0xe00 [ 336.472147][T14138] ? netlink_getsockopt+0xa60/0xa60 [ 336.477339][T14138] ? iovec_from_user+0x359/0x390 [ 336.482354][T14138] ? __import_iovec+0x35f/0x500 [ 336.487295][T14138] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 336.492597][T14138] ? security_socket_sendmsg+0x9d/0xb0 [ 336.498066][T14138] ? netlink_getsockopt+0xa60/0xa60 [ 336.503258][T14138] ____sys_sendmsg+0x5a2/0x900 [ 336.508019][T14138] ? __sys_sendmsg_sock+0x30/0x30 [ 336.513045][T14138] __sys_sendmsg+0x319/0x400 [ 336.517630][T14138] ? ____sys_sendmsg+0x900/0x900 [ 336.522610][T14138] ? __context_tracking_exit+0x7a/0xd0 [ 336.528062][T14138] ? __lock_acquire+0x6100/0x6100 [ 336.533094][T14138] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 336.539160][T14138] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 336.545134][T14138] ? lockdep_hardirqs_on+0x8d/0x130 [ 336.550338][T14138] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 336.556402][T14138] do_syscall_64+0x3d/0xb0 [ 336.560866][T14138] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 336.566765][T14138] RIP: 0033:0x4665e9 [ 336.570655][T14138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 336.590828][T14138] RSP: 002b:00007f36bddb5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.599425][T14138] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 336.607595][T14138] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 336.615894][T14138] RBP: 00007f36bddb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 336.623878][T14138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:34:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:34:59 executing program 3: msync(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x6) 00:34:59 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x300, 0x1a, 0x0, 0x0) [ 336.631850][T14138] R13: 00007ffe0509402f R14: 00007f36bddb5300 R15: 0000000000022000 00:34:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:34:59 executing program 3: timer_create(0x7, 0x0, &(0x7f0000001080)) timer_settime(0x0, 0x1, &(0x7f0000001100)={{}, {0x77359400}}, 0x0) 00:34:59 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0xa, 0x0, &(0x7f0000000140)) 00:34:59 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x700, 0x1a, 0x0, 0x0) 00:34:59 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x500, 0x0, &(0x7f0000000140)) 00:34:59 executing program 3: syz_open_dev$usbmon(&(0x7f0000001140), 0x0, 0x90140) 00:34:59 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 337.151188][T14165] __nla_validate_parse: 9 callbacks suppressed [ 337.151205][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 00:35:00 executing program 3: socketpair(0x29, 0x2, 0x0, &(0x7f0000000040)) 00:35:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x600, 0x0, &(0x7f0000000140)) 00:35:00 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x1100, 0x1a, 0x0, 0x0) 00:35:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:00 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:35:00 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8800, 0x1a, 0x0, 0x0) 00:35:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3, 0x0, 0x0, 0x0, 0x0) [ 337.448407][T14185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.449916][T14184] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x2, &(0x7f0000000140)) 00:35:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:00 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x1000000, 0x1a, 0x0, 0x0) 00:35:00 executing program 3: io_setup(0x3da9, &(0x7f0000000080)=0x0) io_destroy(r0) 00:35:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4, 0x0, 0x0, 0x0, 0x0) [ 337.763645][T14207] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:00 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x3000000, 0x1a, 0x0, 0x0) [ 337.819334][T14211] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x4, &(0x7f0000000140)) 00:35:00 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) 00:35:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0x0) 00:35:00 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x7000000, 0x1a, 0x0, 0x0) 00:35:00 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x5, &(0x7f0000000140)) 00:35:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) [ 338.080426][T14230] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 338.083383][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 00:35:01 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x11000000, 0x1a, 0x0, 0x0) 00:35:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) 00:35:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:01 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x6, &(0x7f0000000140)) [ 338.425200][T14258] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 338.462062][T14260] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:01 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x88000000, 0x1a, 0x0, 0x0) 00:35:01 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r0, &(0x7f0000000040)=""/193, 0xc1) 00:35:01 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x7, &(0x7f0000000140)) 00:35:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x7, 0x0, 0x0, 0x0, 0x0) 00:35:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:01 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xa4ffffff, 0x1a, 0x0, 0x0) 00:35:01 executing program 3: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x57b402) 00:35:01 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x8, &(0x7f0000000140)) 00:35:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x8, 0x0, 0x0, 0x0, 0x0) [ 338.722698][T14278] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x5, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:01 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xffffffa4, 0x1a, 0x0, 0x0) 00:35:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:01 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x28, &(0x7f0000000140)) 00:35:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc0}, 0x1, 0x0, 0xffffff7f}, 0x0) 00:35:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x9, 0x0, 0x0, 0x0, 0x0) 00:35:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:01 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x2, 0x0, 0x0) 00:35:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) 00:35:01 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x500, &(0x7f0000000140)) 00:35:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xa, 0x0, 0x0, 0x0, 0x0) 00:35:02 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x3, 0x0, 0x0) 00:35:02 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x600, &(0x7f0000000140)) 00:35:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:02 executing program 3: setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0xfffffffffffffe4e) 00:35:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xb, 0x0, 0x0, 0x0, 0x0) 00:35:02 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x4, 0x0, 0x0) 00:35:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 00:35:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:02 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x700, &(0x7f0000000140)) 00:35:02 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) 00:35:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x9, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xc, 0x0, 0x0, 0x0, 0x0) 00:35:02 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x2800, &(0x7f0000000140)) 00:35:02 executing program 3: timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, &(0x7f0000000300)) 00:35:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:02 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x6, 0x0, 0x0) 00:35:02 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x2000000, &(0x7f0000000140)) 00:35:02 executing program 3: syz_open_dev$dmmidi(&(0x7f0000000000), 0x0, 0x0) 00:35:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xa, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xd, 0x0, 0x0, 0x0, 0x0) 00:35:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:02 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x7, 0x0, 0x0) 00:35:02 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x4000000, &(0x7f0000000140)) 00:35:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'gre0\x00', 0x0}) 00:35:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xb, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xe, 0x0, 0x0, 0x0, 0x0) 00:35:03 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x8, 0x0, 0x0) 00:35:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8931, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 00:35:03 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x5000000, &(0x7f0000000140)) 00:35:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:03 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0xa, 0x0, 0x0) 00:35:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0xf, 0x0, 0x0, 0x0, 0x0) 00:35:03 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x6000000, &(0x7f0000000140)) 00:35:03 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 00:35:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xd, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:03 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0xb, 0x0, 0x0) 00:35:03 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x7000000, &(0x7f0000000140)) 00:35:03 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='scsi_eh_wakeup\x00'}, 0x10) 00:35:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x10, 0x0, 0x0, 0x0, 0x0) 00:35:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xe, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:03 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x8000000, &(0x7f0000000140)) 00:35:03 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0xc, 0x0, 0x0) 00:35:03 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x4c0081, 0x0) 00:35:03 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x28000000, &(0x7f0000000140)) 00:35:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x11, 0x0, 0x0, 0x0, 0x0) 00:35:03 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0xd, 0x0, 0x0) 00:35:03 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0xfeffffff, &(0x7f0000000140)) 00:35:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'batadv_slave_0\x00'}) 00:35:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:04 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0xf, 0x0, 0x0) 00:35:04 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0xfffffffe, &(0x7f0000000140)) 00:35:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x12, 0x0, 0x0, 0x0, 0x0) 00:35:04 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x3da9, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000003d40)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 00:35:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x13, 0x0, 0x0, 0x0, 0x0) 00:35:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x11, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:04 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x10, 0x0, 0x0) 00:35:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:04 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=@abs, 0x6e) 00:35:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:04 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x11, 0x0, 0x0) 00:35:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x14, 0x0, 0x0, 0x0, 0x0) 00:35:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x18, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:04 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x12, 0x0, 0x0) 00:35:04 executing program 3: mlock2(&(0x7f0000ff4000/0x9000)=nil, 0x9000, 0x0) 00:35:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:04 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x46100, 0x0) 00:35:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x15, 0x0, 0x0, 0x0, 0x0) 00:35:04 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x13, 0x0, 0x0) 00:35:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:04 executing program 3: getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000100)) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 00:35:05 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x14, 0x0, 0x0) [ 342.199267][T14553] __nla_validate_parse: 29 callbacks suppressed [ 342.199284][T14553] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 342.215436][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x16, 0x0, 0x0, 0x0, 0x0) 00:35:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x2c}}, 0x0) 00:35:05 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x15, 0x0, 0x0) 00:35:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x25, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:05 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x16, 0x0, 0x0) 00:35:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x17, 0x0, 0x0, 0x0, 0x0) 00:35:05 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0xe, 0x0, 0x0) [ 342.472565][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.499817][T14577] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x28, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:05 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x17, 0x0, 0x0) 00:35:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) 00:35:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x18, 0x0, 0x0, 0x0, 0x0) [ 342.750677][T14596] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 342.779800][T14598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:05 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x18, 0x0, 0x0) 00:35:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa}, 0x40) 00:35:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x19, 0x0, 0x0, 0x0, 0x0) 00:35:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x48, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:05 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x19, 0x0, 0x0) 00:35:05 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x600, 0x0) 00:35:05 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000180)={0x0, 0x1000}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) [ 343.031396][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.060796][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x1a, 0x0, 0x0, 0x0, 0x0) 00:35:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4c, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:06 executing program 3: timerfd_create(0x0, 0xdbada25137768180) 00:35:06 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x21, 0x0, 0x0) [ 343.311946][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.322647][T14636] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x1b, 0x0, 0x0, 0x0, 0x0) 00:35:06 executing program 3: io_setup(0xf42, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000100)={&(0x7f00000000c0), 0x8}) 00:35:06 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x22, 0x0, 0x0) 00:35:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x1c, 0x0, 0x0, 0x0, 0x0) 00:35:06 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x23, 0x0, 0x0) 00:35:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x68, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:06 executing program 3: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004a40)) 00:35:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x1d, 0x0, 0x0, 0x0, 0x0) 00:35:06 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x24, 0x0, 0x0) 00:35:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6c, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback}}) 00:35:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x1e, 0x0, 0x0, 0x0, 0x0) 00:35:06 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x25, 0x0, 0x0) 00:35:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x74, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:06 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 00:35:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:07 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x26, 0x0, 0x0) 00:35:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x21, 0x0, 0x0, 0x0, 0x0) 00:35:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x7a, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1, {[@lsrr={0x83, 0x3}]}}}}}) 00:35:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:07 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x27, 0x0, 0x0) 00:35:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x215, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc020660b, 0x0) 00:35:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:07 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x28, 0x0, 0x0) 00:35:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x22, 0x0, 0x0, 0x0, 0x0) 00:35:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000240), 0xc) 00:35:07 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x29, 0x0, 0x0) 00:35:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x23, 0x0, 0x0, 0x0, 0x0) 00:35:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 00:35:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x500, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:07 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x335) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$inet6(0xa, 0x4, 0x5) recvmmsg$unix(r2, &(0x7f0000002880)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/237, 0xed}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f00000004c0)=""/83, 0x53}], 0x3}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/189, 0xbd}, {&(0x7f0000000780)=""/115, 0x73}, {&(0x7f0000000800)=""/16, 0x10}], 0x4, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/82, 0x52}, {&(0x7f0000000a00)=""/248, 0xf8}, {&(0x7f0000000b00)=""/14, 0xe}, {&(0x7f0000000b40)=""/103, 0x67}, {&(0x7f0000000bc0)=""/49, 0x31}, {&(0x7f0000000c00)=""/81, 0x51}], 0x6, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/169, 0xa9}], 0x2}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001f00)}, {&(0x7f0000001f40)=""/137, 0x89}, {&(0x7f0000002000)=""/188, 0xbc}, {&(0x7f00000020c0)=""/191, 0xbf}, {&(0x7f0000002180)=""/154, 0x9a}], 0x5, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000002380), 0x6e, &(0x7f0000002440)=[{&(0x7f0000002400)=""/2, 0x2}], 0x1, &(0x7f0000002480)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002580)=""/241, 0xf1}, {&(0x7f0000002680)=""/11, 0xb}, {&(0x7f00000026c0)=""/202, 0xca}], 0x3, &(0x7f0000002800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x7, 0x2, &(0x7f0000002a40)={0x77359400}) connect$inet6(r6, &(0x7f0000002a80)={0xa, 0x4e20, 0x481, @empty, 0x76e3807e}, 0x1c) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) r7 = accept$netrom(r1, &(0x7f0000000180)={{0x3, @null}, [@bcast, @default, @remote, @netrom, @rose, @default, @netrom]}, &(0x7f0000000000)=0x48) sendfile(r7, r1, 0x0, 0x6) 00:35:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:07 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x200, 0x0) [ 345.008828][T14765] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x600, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:07 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x2a, 0x0, 0x0) [ 345.060795][T14765] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x24, 0x0, 0x0, 0x0, 0x0) 00:35:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x700, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:08 executing program 3: semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/121) 00:35:08 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x2b, 0x0, 0x0) [ 345.321064][T14765] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 345.356698][T14765] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x25, 0x0, 0x0, 0x0, 0x0) 00:35:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x900, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) 00:35:08 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x2c, 0x0, 0x0) 00:35:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xa00, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:08 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/nfs_layout_flexfiles', 0x200102, 0x0) 00:35:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x26, 0x0, 0x0, 0x0, 0x0) 00:35:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:08 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x2d, 0x0, 0x0) 00:35:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000e80)={&(0x7f0000000d80), 0xc, 0x0}, 0x0) 00:35:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xb00, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:08 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x2e, 0x0, 0x0) 00:35:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x27, 0x0, 0x0, 0x0, 0x0) 00:35:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:08 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001980)={&(0x7f0000002b40)={0x1078, 0x14, 0x7, 0x3, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x6}, [@generic="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", @generic="6a86b299b728dc9d50e0089c579e357ad4c87ac99f3d8f40d9dc5d7787ae59760646e7a2fd8fef51ac1addf4acc1c189e5b7488e0ae3eb27692108145cd04f05257eeec418d02fc1d6d13be9bdfb95ade43a8f5be9bb380b4903d9ac621a415f2e"]}, 0x1078}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_mount_image$ubifs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x698, 0x4, &(0x7f0000000300)=[{&(0x7f00000001c0)="8f65", 0x2, 0x80}, {&(0x7f0000000200), 0x0, 0x101}, {&(0x7f0000000240)="09663488c559e1976d31583cd6c983cd507f3164b6618554f6077a74251e725ff88d71fe2b79a21310302ce5f870734006ee74c3bd2179a1bcc58a9df89b16f65d2db5538623a9142a84cdd2db1d54", 0x4f, 0x1ff}, {&(0x7f00000002c0)="95dd901d34e196b46c5f3fce59929b52e5073d7a19348db4d4e417", 0x1b, 0x73}], 0x0, &(0x7f0000001700)={[{@no_bulk_read}, {@no_chk_data_crc}, {}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) sendto(r2, &(0x7f0000001ac0)="be3b04239db6346079779d68c182958cee28759ee45bda550c008d1b5992c35a0d445dd099f313d9a82ed1289db6551af8ba330b9af4f750fa8124803148e3107b4f4cf5c7e09ed5ce051cd782a7c9f28f3a18822c21c8f3054c7bfe078cb69c187ce1ce3133a55d6b1c6125e98431154826c8fee03d9ec06b3662eef98a32caec180091d1837b86260e0e831967582f0fcaad82c0661b9935082a6ae873ed8b1938f9a6fe12990b051637ff304dc6e270db42372bc3376f02756a3f9dce2c8afce4f2bfd2d9479f8080bcaf8f9be8a9520165", 0xd3, 0x2000c805, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001780)=[{{&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001a00)=""/68, 0x44}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/114, 0x72}], 0x3, &(0x7f0000001540)=""/144, 0x90}, 0x5}, {{&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001680)=""/35, 0x23}], 0x1, &(0x7f0000001a80)=""/61, 0x3d}, 0x400}], 0x2, 0x40000102, &(0x7f0000000440)={r5, r6+60000000}) sendfile(r4, r7, &(0x7f0000001880)=0xffff, 0xe6b) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x16, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 00:35:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x64, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8d700000}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xe2a9, 0x8, 0xd6de]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x64}}, 0x4040000) [ 346.006010][T14845] loop1: detected capacity change from 0 to 3 00:35:08 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000000180)={{0xcc, 0xc4, 0x1, 0x2b7, 0x238, 0xffffffff, 0x1e4}, "b432be80bb7ddc3cc3d96c0f10bbf45034eaee2b7bbd3b73bd4f901d2689a8a3ae4567b8989462913e39c7d8fd33ff69131f18afb57fc17b5c0410ae0c3d5f2caf8c1c58da3b28ca6071189e2b9862457670726332dd625462d240592643455bfce487bc700f178426a26393d77f06caba754f278c5cd9944fbdd166b1b1f016e5eb2e577db0ef5eb6f8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9aa) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:08 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x2f, 0x0, 0x0) 00:35:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xbb0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000008000400e00000010800d1"], 0x24}}, 0x0) 00:35:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x28, 0x0, 0x0, 0x0, 0x0) 00:35:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xc00, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:09 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x30, 0x0, 0x0) 00:35:09 executing program 3: r0 = socket(0x11, 0x2, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 00:35:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x29, 0x0, 0x0, 0x0, 0x0) 00:35:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xd00, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:09 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100fa010000a41f02134aecca6608000300", @ANYRES32=r8], 0x44}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000003740)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003700)={&(0x7f0000003580)=ANY=[@ANYBLOB="80010000", @ANYRES16=r6, @ANYBLOB="080029bd7000fbdbdf252e00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x4008042}, 0x4001) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e24, 0x0, @mcast1, 0xb9}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="49be6e61f5e14e509e2d8cce65774337c927c8f438e390776d9e4e3cb360072e0b9024f6c2a1f728c12cec1aff3a2d34cd0600ad90ee417010b507cb0fb7876288f64d9d2807db65", 0x48}, {&(0x7f0000000200)="96381d5d26ca4e64d7953a6b1bb0f090bba652dcf039e34bfa917bb2852430b772a683d0f8f89eb0e37bda116989d8feb3e4edad8616530b54d7e52236beae1bc225a0873e5974fa8aaa6521a7e109c0ed0d08070bad5e3763d62675f7ac85315aad518ba6365cd9eb446e661ce4e46327d0650cb03419fe63b95c2c21728255b9e74506ef2cb542a2c821c48bd51c8c2f12f47689773044e4a6a34f89e6130b32a83fbe2006973d8c69d8f261f25aadd82fe0bee6ffe7cd68c900a20a23349756cbcc42aa30b7", 0xc7}, {&(0x7f0000000300)="7c03c71edfbb2e85f056741b6c93fb97f9a73d8a5ba0c2a269300321a5a2175723f8f6cbc2472aa9d0ed0033ff317ea1def50e9b81a1c3b653076356bb425e020d517d245fb1", 0x46}, {&(0x7f0000000380)="5e8c9e087bcbfc7866f3b2e89b61c7a67c86edb96b5f0babb8cc5ab467269e03a267258457767a8a4861d3fb24d00f7a3309961a49cef182b32c2e26932638b1c9ec121151cca4a2f527a1df36853d7a8b53df59fa9dfd763ff2784927375e6fe972e4aef421a863c21831f6d508919ab491b227347ef108f283808d30e3c885381b11276e08135b28ebac1ccc10f91069be7d5ebe6f746a7184716a4034ddfdb33f7d197202e9015ca9c6f4fbbab0d98be26c38c6bcb3", 0xb7}, {&(0x7f0000000440)="5bfe7df5c5bbb42e2feda25990c47faaf99ab3f2f0ba47f20516b20722410d67adabf205e5e0668cef27f8277db762484a713a721fd230a33ab5917bf0c9ed528c514ca1a32a9b5021c51c3840515df0abb02e163b6cee27b467fdb4af8cefd49101254fc1cfd4871712af2e0103d37af846ce6760cc37706e2631e864bbfa5817dac7338796ddbb00e4b771d6cde816a6f5bdcb4395d7933a77e8e60710bda517319bdcd8196ac5372b548b19b0fb64222fbbcdba2e67e110959270fcbacd4cf02faab9f63e20cae5be7c0b63143eb0319b4f558350c4928f0bb1196e340209f56d09da18001c171db5c1", 0xeb}, {&(0x7f0000000100)}], 0x7, &(0x7f00000005c0)=[{0x18, 0x10f, 0x6, "b6714f1d"}, {0x110, 0x102, 0x1, "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"}], 0x128}}, {{&(0x7f0000000700)=@ipx={0x4, 0x213e, 0x1, "3ce830ea8d87", 0xfd}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)="7aa4c6a240fd729396c2d64f25c21de0b86fc31df73c5ebbedbb99f9e27e86962f9d625c1ade499eb2fa43dfbf256751c3d152027f2f0f05196dd2221304b9aa49802734ee12168359d06f4f83e620475085", 0x52}, {&(0x7f0000000840)="78262237a9a91f7ec21d25e1a7beb342441077b2904a68f10720011c959cb3ac56e7255940a821e01bf9937b840add18f5bda36ef35171c9d7dd9a6bf2714e429471b303543258dcb76a2fd18c630a4c749de7f2b72709cd05b3975070c8f59c337a0f48885011e6489b9ca0633a772de8619390051ddee0764e8cc6e066790874d58408cb60c0698c26c5a36b6f0739fe0922ff9351c551ec1d2b017467e77f587ee21c28ec869f33fa643c4da2c6bb9434d5f318d0b00677c7bb6ce8d9", 0xbe}], 0x3, &(0x7f0000000940)=[{0x10, 0x117, 0x7fffffff}, {0x60, 0x107, 0x46b1, "a0ed7f9da8086569d3b7cd9fbb9103d0dcb26afbecdfc76a55397d04f7764914c4d57889b599e0493f37b30ea52f1b9ffbf7a1b0383104be7d4daa8da2efd286e118d708e53c5ae1056d03987c"}, {0xd8, 0x118, 0xff, "257deee80ce9f72fc8235ae85d9c587684317b5d1f3f2f19493cc972c6357bbc45054e0971943622865caa89b30e5f2b05f4743ca5586a16ca938b76eb178cce184a455d8bde55208b8583a3401a7913a740547d2d9170254f69e9962867e88c200018e92fb125da3deb5e5189607cd0f0e853b7542938fcb88388c76c7f9c5152343d856187d2ca65e3329259f65dfa650c87a957a011284b356c95615ec2c35317eed95aca9d822434ffa132b74607e2ffc57c0f4d3867d354ced50b3a13cfa8050a88ec7b9158"}, {0x60, 0x104, 0x7fff, "2fa31f8f5d762c86e88b6319eede0ff41ebf5876302913391e6fe83d32b65184ef5425e42c2800ced210af9ba89fd33994fc10ea3981a892566a1e64b736716bb66cc7c508189ba570"}], 0x1a8}}, {{&(0x7f0000000b00)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000b80)="f5d6c8a0bb00669eaa93f6fb943dc2ee07ca77e9729c455834f0f8663ff0066260fea37b4047af0dcb85701731179884e27391fd5b4a2bbb1be4fcb8", 0x3c}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)="8960fb397c17a4d9bded064ea59901f155b603d6b507ed63387dd82102ea0c4193cc9326e9fb7bd84682d5361e8177a154aa421a6a292383bda3159efd360d895d3308c4314b98cd34ece3a810c1a04f52ad4db828620055483904ec28c9331ea3ab36577e8b1705cf9801c8b7d9c7a4144cdf78b7df6612f69fee0bfd37e48853efbc329e91e3955aaeff9f86be5d68dbdbbeb7edc20cf384e8b9049eafc21a96957e9ba3e9368def31f7f2a71b4096ee6dcf52b4f5a47bd4ae47b7446bbca78641e5f3547b2ccf6966b73eb43454ccdeaedc15e16b0bad2c730ad39a5b18778fac6401d9", 0xe5}, {&(0x7f0000000d00)="dfe17328e7362b84588bd8dd9f2592fd00ce377146b2ce1e3c04c490c6e7012033052a174f23c4e59013140998a71c984df9935fb9bc64947ccba21b62831f37a99508b677227592c5360caea0fda2bb2dc3b067a743d0e18aead2a902f649239ca6d3c6c4d873f9e7afbd6841013b8020eb410ce10c7a24d71a1acd547ab53492cd9b8bbef32e175135042db579f1238c79f0a1dadf25fc11a9ae3d3b7a327e00cffab8a97f5b1987f5227479a674e35a", 0xb1}, {&(0x7f0000000dc0)="d8ed92b237b1e6f8cabd6b12fd0cd53595f797d91d1820f2e2f9b257c7fd7ce8e08382560beab6fff5d48401f100353042a885aa85953504b2acf15cf97d9fd6ae9d7187833032cc6a074f38", 0x4c}, {&(0x7f0000000e40)="dde34af6c11662e5f9fde9f8b7338773c993069ae2bacaf78e4a66ea9a159c73a7364b88d6d32c9ac26febc4c5e99f337d5444fa8d864b137aa7423b1394e23755", 0x41}, {&(0x7f0000000ec0)="db7eee67e8739774189ee8860e19d720180d067dbbbb6b8213d35eda48eb89b762dfe635fe651edb45db1fbfd3054ebefd5ae3e8397fe5dbf86e273ae6a5e2fecfdadaf0cfd541ddedb16bee9d75cb34c1e3e55cee28305237a662af0e23528079a753c418675efeef22166ef8eeb709b84c90b954bf1273a8cf3d7fce0e783de55f85690f5b", 0x86}, {&(0x7f0000000f80)="4b01f8fdfec9163a84546f9e7efafe82efc8c633c2a72796a3eb626dde5ce77ba1e00c32682730d89a42c8d39696414b0bf81c25950b054d6241e7208e76fad4218f31e08ca6658d5695fe89e33377e8e82a791be4d49d88508a1cac83eee2be495d54b813f2f30f17b91fee3d9cbb2d2ba0dee7b1a811d93c6360f5e5b3ef67869eb5d2b067381587e3f041f5f14853f912106e44445b79a3e5e31ce04e6883e10acf20fab9a8f466a376fbe6673f0e4a0637", 0xb3}, {&(0x7f0000001040)="344e116eec80e09b7d28f20187f3a30a767a9b7df55353f4798683b92266c0eb5dfaf7f093fceccaec7ffa57c95652f3330b647afdc70fb0829a96f5dd33d062b0f1670af9fa56fb939393114a60db899d14ff7952be8910ffa681e78cb7f02ce1676f898124186f1e8bfbdf6aa012e7a4384051299de811dbe84b9b98b6b2c340b8cebcb6427a0a7a9c22c945f41327bd3dff4939b2defa88f7e0f6c4c7d8248082a57688e083968b3ee56513599e672aa9730689128008efd4bf7e8d9760989d78a54cbdd29b2ff9", 0xc9}], 0x9, &(0x7f0000001200)=[{0x48, 0x6, 0x1f, "ebc594c87c991da7284e786ddced2aeea87bdb6ddba475df2716449a732d83cbe97d2055b2056c83907b200065e6e6aa2c28ad7e83"}, {0x1010, 0x1, 0x5, "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"}, {0x18, 0x6, 0x6, "57056589f18dcfac"}, {0xd0, 0x113, 0x1, "6ec13eee870dd9062c7dd28c4340503e5e503d0d8441b4a22f1dec7624601cae82eb409aca1f43e003ab2eab3530ed4032c773bf9805b135e4abe45f3d680a444608936d425f57bcf3d40f03fc2ee30f60fab9f1cdbea73d381e2bb4f6324bfad792f1c4ef8a06f6e8f88be0664cd87579398ff4a1878b721ba651a6071afbc9f9159d72cdae1cdddd72a0c3c897846bdd8297b59248fb37f7ff07dfee43fa002b5805fdc9524a413de164ac9004fae11b30cd402466430e8ee869ef607c"}, {0x1010, 0x105, 0x0, "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"}, {0xb8, 0x0, 0xfffffffd, "722bbde1f58574f94fae3cfb7cc7ee8eb7eb0f322485d49a0ce682b7679efd032322e3c4c6947133f0a32f1143b62ae8bc076f52942fe8374848977e6aeaf435a1f30c3b0344b9abbe48e3fc72bb536f68fb904ade653755c422b007affa872cbc3ef9aebcef900f18ce84c86981c2ad3b316e8216f468315973a72a37a5e38b3c791ad23e0fe9dabc9968bef7000ded18632858261182bd67a98dae1b319e01616c3fc8a9f3"}], 0x2208}}], 0x3, 0xc840) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2101, 0x0) sendmsg$nl_route(r10, &(0x7f0000003500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000003780)=@bridge_dellink={0x5c, 0x11, 0x100, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0xcd47b79b585c7f90, 0x1c800}, [@IFLA_MTU={0x8, 0x4, 0x10000}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_PHYS_PORT_ID={0x24, 0x22, "c9499af1690000ce251d9330fcb9db00"/32}, @IFLA_GROUP={0x8, 0x1b, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x96d879588d46c5af}, 0x84) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:09 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x31, 0x0, 0x0) 00:35:09 executing program 3: request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0x0) [ 346.653114][T14895] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2a, 0x0, 0x0, 0x0, 0x0) [ 346.713693][T14895] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xe00, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:09 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x32, 0x0, 0x0) 00:35:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x0) 00:35:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 347.239210][T14895] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 347.271242][T14895] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:10 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x4, 0x0, &(0x7f0000000000)) 00:35:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2b, 0x0, 0x0, 0x0, 0x0) 00:35:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x5406, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "05088e62a4e9f6ddbe669f0dcfda5ce87d6aea"}) 00:35:10 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x3) 00:35:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x1100, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 347.375715][T14945] __nla_validate_parse: 33 callbacks suppressed [ 347.375733][T14945] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 347.416158][T14948] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:10 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000003400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000ffdbdf25730000000c0099"], 0x48}}, 0x0) 00:35:10 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = accept$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/109, 0x6d}, {&(0x7f00000012c0)=""/33, 0x21}], 0x5, 0xaaf1, 0x40) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) 00:35:10 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x7) 00:35:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2c, 0x0, 0x0, 0x0, 0x0) 00:35:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x1200, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 347.707403][T14965] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 347.735860][T14964] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:35:10 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) r2 = openat2(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x141000, 0x0, 0x13}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003240)={r2, 0x0, 0x1000, 0x1000, &(0x7f0000000180)="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", &(0x7f0000001180)=""/4096, 0x9, 0x0, 0x85, 0x1000, &(0x7f0000002180)="ac93ab483164ccce34fd20f716df79354ac4be623f7a2e753a2b6881bdec212dade6db787d9f1b7e48b0abf82261d846d0c585459e1dea0e3d51cdd511557fb2434f717432bede59903e29fd47917db139bb167074743bb7779cef95f32ce86730c3b847a56dfc5d6b5fa24f371d4678e9ae7e0c4870f9661d4b60be784ba5aed23aa96022", &(0x7f0000002240)="a7939a2c1760828e1f902bee479ebc1816e92335d8aee216470c756e263087170dc3ee491e57243351afd49a9e8323f44ee371aa3c473dfc18471517ea1b5973645fb7d5025b54c7712e2c14922cca48b1febc7fc7c610a555a8d72a369ebcc3fbf46e987350c3e0d8671efc0d20cc663472f0590bbf4a90de7d4bb66c2bc5f2a62ad2320db45350dee8a6233c5dc665df2f9607a512766455f83274211b6035cb91e96c07e13919b0469673ebf4e799e9642674198fa92e295a76b3e6191e8e0ec5fdd9cc9eba87dec6e3a3ae43bcfee098c296dc39126b4766d1bcb3e1d09a5373a02d7906c0b63e5c86e3edc04713084c1fec9aa21d340d2414099d44240b3609b784ca320fc2d7d13223ffaa7751bcae6b608eecffd31b93b3e82c9853d1c6f6d73f6270f43940ebace7cedc5631ca76aeb3be297f91c549c544380285747e994bb8e9c2896c65a1e78b6e0b9eed681593dfc9dfeee4ebffbd90f36fde0e1ef53c23e137c8f4297de0a3e726a293c4191bfc3d3328fd1c003ee92a024f6271335348833d75c4d95d16bbe085635bf915ca920e04230105adc005fb70700ed676e9056bd46b63664f1e7c681ed0f5372e58a01610b2e2fda756fa8ee4f65ff3b8e299914aca05faec8f770b17ec1ee52bc2e423d024661a890f15077b11f1fb008fd976556f5d3005c91136e2570ac6bbf55e199b336d9c19d50382093f8fc3b445424d72e8edf9936ab2278752625d03dec8da49e45212484665e1dd030790e5acb3f10c9d398e3103285c684fca6eb68ccb6b4ad724fdf9335155ca39c1906cc5e5d004a2694044560eb43269a3c0df58c3048e715ba60e010931947c46800341ab3f4b6d0e7516ee052fb087f4f7412a15d2c34d0f009eeb06d46f3daf56b262395462677aadf09bdd6d4ef69d46e2de8f90c13a8e0cee7401d639f9c7bab1eacdee62cc953032c15231c5b9210c92f6b1cb7c79c00b3e79541b25e2cbe9a5c7ccf0d9f08a4a1ba4641b5b4b2bd1e311ee58dcdaa98245a3fba2d00a9249b75ed0987621024fc0ad4b72cee0f120910835ebecbac5556379eb2c9717239bb028fc4052b4e4b4328dc0f86aa228f4ea285fd1f7a012486f4651cc451661275adcaa6794d1c219f5ecf5a89edbe3a0527c88ed0377e49f5feeb70a2c03a33e0fe306d22b00168084dc21129cde420eb0586087ee38b08e544df452d93ea0ac776422f51351482cd93200b4a8e538f5ec63d0973f1e89a128fe1a9d82824eebcf808d85c6fd8efbac86bae22aa0072604662163d3f32dc47335d3e0f2c37537919bc752192d9f2ff379e20c742761dc4e91b3acdd47b795eec3b5c110d3d71649b6d8e89470a33dece1617abdb8a6e404a2050019d70c8b8905ce666abdbc5e252b952ccda0b30699018381052c04a8144a6cd4bc7827af0fc5a8bce2dcb6680a97740a5650211473e0e209fc8c4e52f4503f0df235b18b0a2d1ca5eec995e0d783b9a99cfc9afed7e75269b864fc8dea3eff7b8bfbeb4c280af470ba8fd7e4302cf3de5d60a8ea697025996136ca5f336efda106999d2f55885f2a512ca1f653f2a6d270db3243f906757ca53b9ba38a403f6bda656491733e13ddb8b0751da19f54dc3478adbba5505a83ed4df104779becd75debfb872ffedc851cec3174ebe93725053d33721a81ea06499583558f559f56c474d4ae30fdaa7788bba8651ef9d1ff1aebbcce83f3f2664805cb18415e899b36a3714229f2b6d0b86c0e59473ef667689385fd2666721c5d08049e3cb5bc56675bada27b9ad7bd7acce7b692e139cfa151a85a7161f76d7504e9495ebb63f083175c5f8ec8fb07ebc876f419c04118fe7c80cc306e4877f0199b79f2c6db9684457fe0a1d38923744aaeb3ebbad7769d8d4bacf9737dc250abb069ed6618e09922b60b63549dbdb085d27a8830ae4f55ea4dd0bd1680c9cd79218c1eb3c49e728224a2894ad2ba920763f58035a7d43c9d7f5a7d68e7b2b99c50c89a298d575419170ca95c5a8786908b00e87d6d18d7736b7f63501078635efae2cd4c71255db5cb88bf0fd4c344e942fbbab14bb3a80da1ade031b1535dc0b094c8ee90101ea38de4cc9e9174e897f09b99cee45099c49f1ec8e3d4e071bf9312bf68a1ca5b9557f833f94665dfd23f963a0408d584068ba01b5da74ce4dca83547468e161658e7961e262308414c1b320037a4f76127554841f042b8c092ad7a961fc15af00a0709d2fed5b335ac78c1a588f3a937374b18e124548e4f78f2c2fe578f93eec53d5a72a230609e0713ba0061706e31ba3729eb465e9a49ffd7c7cac73da085077657fdd9bb6f93635af90fd85c619b0d81fb89dcb48b1f8e944d3480b133d028eaa76572d8a242908181f58d08eab8fc03817dcef6bcbe51f0bf6fe51f74b175a3c108c37b61a505544ed5731ee10190f9c58f358b7affdf8dcc3cf91d25190d9e14ecf40f6903d3de51341ccbc588cb5e333527217fc1d99b683685a6423b944cce1ca468f1cca2337ffcf68ea7088f0772791dff90fb6328cfebd95bcc4a58b5bc9ec6d52f078c41c62f1845a902d2266a8a118d6c0d0d655c918ad3da9bd2697f3af7c0fb25ceebf4b98d8729ee75082d6f441b32bb394bb57661de5a05e4d9c6b3b9e2cf5a362e85a4382730e59720aebc6a10a564875172756351f4868d19c6f1e74e4a62c0f3f1880ce03c1c05d4a6c64651ac892edc4dc0eb6ee0a61aed23cf12ff28d5cd427f070bf74fc11bd4e31be234294df2fa6ee70d6ea10c6e0867d61b8ba74290cb78ef1d35755eff4560d7898c48dbc69173019a1291642532830f62ef1d8162d50e02e4cd5ac398671c7dd3a6c806549b797bc1741fdea0d8089090afa80f4dda84e6a49e7eb6a714b01f2c1dcc4fc78400cb6e1cec5cd417c7814ee144793d5fe281378c04d9eb0595ed4f1932f0b72109b5bf28644d90b7f3081c857503fea8fe2b76da6c9f3af032620fd831bab8e1ab5d5a57e2be466e3b27b6a9fb05fbd086ba7f3762619085f5245a06c6ac036c76cb334e3d88cc2e3ed5e07252f17fba52a91a5bb31bdcd65bb6349f0edc103b8a114966d046240fa6a59cf9865902f082d5b394a518f233cf4824a14ea0c89041d7979fe614fe7647864b42d33161acfacf577c9f5c4498f4ae34b5d5a61a58963f2dbdbb7cd457433a93f820ab35c0a14c5efbad9ee621bc5fc4ed0fac16b00a8eb3179d82ad3fcc8e5575e85987d6900683ac2d1ce22155d7864c6df9000c4a6905184ff359681c739a8dc2d1a4165a74e9501d7c5599a6fc0dc8e12407099bdb9e5da5117800f18afcb91d06cf0956268085b12facc3ec1b299b474f9e66df84d2b81500ec080cd6cb00a5d4ee37dea2ec016072c6b8e8592746a45f2dcabc5f164b82ba164c23bbfa8a0e53edca9b8f11dc5010af37b94f624c7f5f56dc4bdc7cf5f685845b1152772fc5ddc805f417987255464f527eebc1ceb5c0a5b766e3b30e998af2b9e7892af3fb85cf4e3579fec7857d35ad32b196f0a75b83d4225e214b022c760a8adbfc7f18969a0be0a21f69dac1517b1d898b40824f8882808cbb3ea2c88c09f0cf5eecc3ddef95b7158502d9b957915aafc37fc3da53f5bd9e7525b89c244af770632e8efec478fb679f7a764e38ba3fa500e26889621818f4877ab542afd9a908ec2a4943f9150c80a9f8203e79957dc530c5bf72a14884189b9f645107b4537ccad2ab942a234c8322506ebc159c2838f497506d59ef024dbed85e34898e3a363b6bbfe2be0f4bf3ec1b256dc0ac3a73d42d7bc575f77f5bb87529e0c7a33fd5d5d84f7d085508c2b6e9953076b6be212ba9ea7ebf74624e6f7b319bb48b793495bcd4b0902b72e51b16702a0fe7de428ff0a0fff2461a68c83c5052ac74831223e8e22616d57d3dbad466de03d1c0bf7b0b5c28d1241c2909efb0ffd0f821ba831199843f0a583420615794fc5c511470ad8d8b6d306d4eb56c17d82f9e17a5f296b024874ec5151a1481fd3418f92c2638d5a8565ab729255af74ba67bf5d39e208e9e49036476ef34199b636b386df5fcd75ff303a3c098477bcd7d4624d33a181e4748324f07c4c8bb46725d8bdac938cbaba1748d529b7243c8253210c2c6b769f583b364ec9ddb54b4cd308a47fe1c8fc6eb5aebea50922d9e6eb236372cf2334acfcb1effe069a5d5a4b4be68711d28eee4e7dada7accea8139838d8922d07dd9b69e164e50cfedf8549de4a07a3a1c017a4c8b88319dd1877633a2d8cc9d448dc98ed52b45194c008965c4e65fa348390261b2fa32b05aeb3a142437ef41e9242dc53cb59c5e36ff514ee4e28838d23f3ca6ee0c42baeb494ee3e57b086c335ddaa3aa6c163ae94c866150ae9699f233f8aaade6601c41f707bef4f6ac3ecf6fb437fdd792001c48c7c405801320701720c99020b591fda5a4533b9759b8d9c6f5ab1929c27101d35fd8f5e752fef3723d06d1c42c7d64e0916acdee08573690239ddc2ccc12c17b8364d711a52e40cb0e9ba7eb66521e048d76397772486089dbf8da95e371d0a633eb7767fcec64d59353e4b99f44baac8af730893b1cb25311316bfc2ae989ff1e61bc8221723dd7c8b8ebd427ae0377868ed31f0c3a1cdb11c64077a3570b9133b1a677054863b98549e98da16ffa13a3c83b99beaf21518e0b2368e4c7e0d0a2f8364fe1d9bfa8999014ab30cef9ea8bca83799e5ce8626aae8b0a22b2e4fb312c26746ca86b26a3f40b72a8678d96c00974739778c0080976e767bbc7fb44c8c87e6f010866a094d16106c743ffec41e87e8892ada4af2279fdb0810c26f901f568ab44e74446f763face96da493072767de87e02237bc0021bebd8ad7a98f88b97f427dd008debdbc60187c35d67f77838763234cc89cf7312972080ed8170c5e32f734aa7538d7fb872dd5e3f4eec58beb2801b33ad08e25aa8815b8b2d0916d2f9c106c753c79f83066e6db2ae312f2382398a68c18a2da589af7b62d0a811d6d23b9b010835fdb0900ad0f579436ae8d36a39923285a349c9f646459ec76131acb7e79d053869e59e35ce481a532f8258205eb27546afdf647a1dc64e886f6bfeb3bb5e63aff537bda7f3395b2ed405f211b13635b47920518bf46716fc84efd417dfb1c36abb71191715b23559ec006db0eb2d9466d086fd64fd43513b25ca06c064ece0551185406a6c5674dde671701778441fe9a1cf11097f27d092c224148171361b256ee97b0819a48257ec814332f74db5c4e8b25901a30c252bfcf94b96a24bed535f93c8291d2592d5ab5c3de84c109dffa6a97be4de319e26e23f10b0738e70b3d9a68626e63b1d98d705da51f897ebf0a4cb4f1930e936120940c9b17a56765c32180cdbcd80ef47e188491a9b25dd0010929302db772965bbd1e5bfcf0e25856a5de80eb1f3d096f8eb6cc86a3aaf37a4650f87becd677b0fb2a3cb5e367b2e318306127e954cdc5b8f7839cf967029ef6ddb14b3856d0cd54c0b3b756abb7e9d06c2c085080adf371eae83383040ce8e2455e0f8e5552e8f3ce1467093c6247a7cb7cb5ee8ce1cbe9e6963a9c7578fe11ba7f34f6887a1035bde18829ee813f51377789616e8d90636bc8c42793f920cd5a443045e6d4ad65c834c9997e18625ee799c01904e0da9848bf93b526d67511014d54f1727883e56a1252d930701fa753f552e0ea414a4cbbe13d3ef4e73cec47f34a17f33a82fcb2db8528582c6b7a553137797e0ae4b7f72fd7e0426e96f", 0x0, 0x5}, 0x48) [ 347.751639][T14970] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:10 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x11) 00:35:10 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 00:35:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2d, 0x0, 0x0, 0x0, 0x0) 00:35:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x1502, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:10 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x8) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:10 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x88) 00:35:10 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) [ 348.065115][T14992] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 348.075729][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:11 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x300) 00:35:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2e, 0x0, 0x0, 0x0, 0x0) 00:35:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x1800, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:11 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) 00:35:11 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x81, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="fd46729f98be05458014a8624ed14215ed4c82881e72c981cd0500000069e8207a391131ec397a97a37eef772a4e433e5fb7f1d2609b2611391da3f2e30b905b8b5a59bf3cc4db1ee5416d588da7ccc7f982ff43a705d6590330cc61d3df3423061b03e9b043cbd43b3e147a29e395da3375f2f0c691650cc0203435e50ebf674bac41ebc01e7d0d689cdadf38094c4abb2a336423033f511c2e2831d2bcba4169707f58f75f50f1f83a50fe9ae50bf96e1aa5583ab918e8d959ecfb1ba008388560"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) socketpair(0x28, 0x1, 0xfffffffe, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="ff0000000004000000007e0000000c000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) fsetxattr$smack_xattr_label(r0, &(0x7f0000000480)='security.SMACK64EXEC\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="9e883a5f580cbb2c85645ea40a1822deda9be83805691debbe90c423dd1d974658891b65bd7dc6fb46ae9f7f493de0e1b69a8ee008ae4f7c12df29dbb0a080e39354ffc573a511afae728091d4ffbeb37d9b6de81eedcd74faee"], 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000126bd7000fddbdf25310000000c009900000000005100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="0c009900020000005600000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="6c51a52d049174303b0ce96df9ec8bb62defba3dc67cabd890a8d5a927f7d30d38a8a9253d9a9a6209fa9f27f014745f6230728a1982c6d1c13dfb88b372b37510864c350a40f87d330788038d575d4d269c2a80754b0be110da118d7a3a1662fcbb8234979de14217458a44f3f5ce971d6b945d79ad4a7174b400bbb3407c4fc3f286a3578046b06c75e8fa738bcd4d58b34d7011d359855035f4a7c822fc14bf86"], 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x4) [ 348.386740][T15013] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 348.411389][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:11 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x700) 00:35:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2f, 0x0, 0x0, 0x0, 0x0) [ 348.516401][T15023] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:11 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) [ 348.590712][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 348.591952][T15023] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:11 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x1100) 00:35:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x30, 0x0, 0x0, 0x0, 0x0) 00:35:11 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xea081, 0x0) 00:35:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2100, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:11 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x8800) 00:35:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:12 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) accept4$tipc(0xffffffffffffffff, &(0x7f0000003ac0)=@id, &(0x7f0000003b00)=0x10, 0x800) socketpair(0x28, 0x2, 0x0, &(0x7f0000000140)) 00:35:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x1, &(0x7f0000001680)=@raw=[@call], &(0x7f00000016c0)='syzkaller\x00', 0x9, 0xab, &(0x7f0000001700)=""/171, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:35:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x31, 0x0, 0x0, 0x0, 0x0) 00:35:12 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x1000000) 00:35:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2500, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:12 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:35:12 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x3000000) 00:35:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2800, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x32, 0x0, 0x0, 0x0, 0x0) 00:35:12 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x29, 0x3, 0x8007, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x80000000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.mem_hardwall\x00', 0x2, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, 0xffffffffffffffff}) 00:35:12 executing program 3: r0 = io_uring_setup(0x2fa4, &(0x7f0000000100)) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x1000) 00:35:12 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x7000000) 00:35:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:12 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}, 0x3}, {{&(0x7f0000001200)=@nfc_llcp, 0x80, &(0x7f0000000080)=[{&(0x7f0000001280)=""/133, 0x85}, {&(0x7f0000001340)=""/70, 0x46}], 0x2, &(0x7f00000013c0)=""/187, 0xbb}, 0x8}, {{&(0x7f0000001480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001500)=""/195, 0xc3}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000001600)=""/186, 0xba}, {&(0x7f00000016c0)=""/52, 0x34}], 0x4, &(0x7f0000001740)=""/38, 0x26}, 0x85e}, {{&(0x7f0000001780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001800)=""/52, 0x34}], 0x1, &(0x7f0000001880)=""/200, 0xc8}, 0xffffffff}], 0x4, 0x2001, 0x0) recvmsg(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/225, 0xe1}], 0x1, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x100) sendmsg(r0, &(0x7f0000007d80)={&(0x7f0000005640)=@sco, 0x80, &(0x7f0000007ac0)=[{&(0x7f00000056c0)="4988edc469140879c52e68be09e0fbcf84b9104398c1e699a700660b56b6a67d8058d5767e70eebf846d1b236ce5d71b8e49930da0d438e0824de492bcdd43ddd7c4d82e5c2803de347eafb0c65035489ba1f17c46ac6d3103821761a1d75207045aec153b941622871a1b61e581c031078a1229c948e41901d388d2eee438bf53beb24905f150b96b", 0x89}, {&(0x7f0000005780)="1ef6246ee24e6b7293c65c89047e927ab472cd56b37378b817d9a2764d093ba7e70c68204f43b9c408f0aa0bccd529e4a552be73202103342387f9c1a43d93064e3ac7bd069a8647ee6aa00c5cbced35d13c94f6e26291106d91cb8946485c9732a985a47aadccf8", 0x68}, {&(0x7f0000005800)="359fe242053c17aadd4036bcc7b5c33608e2a1e922decf5d311589c5646b4b553da6b22d97aaa6ff41130a6fcd41177943cd5579c7a3f7e064cd0a0c4a57cdd34bc7e312048f086e5b6ff6fe9b0fc52475a010183997a8b9f06cf333154cf44ed8a9035b48b345dcf973a6da779036f3c66ae43dc53208cc1e92b48202657144da2f4722da619f32a965501f2350ba3b8ca4f07369aaf58ac5c392", 0x9b}, {&(0x7f00000058c0)="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", 0x1000}, {&(0x7f00000068c0)="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", 0x1000}, {&(0x7f00000078c0)="6870854ade103175fe6e8aab2bbf90a641586ae30605a54ff849bf66d50cadf76b04fa0de9eec7988a1258d08071bfd1f9cdd155f114f50db9604e5cf99d5448e5f93aa6ecd7ac1513b9d3130e7848f10678443db3297b819e893591a1debdbeace76ab22ed63b5fcc52d641ac8c52144bddcbe876712ff77d9019edd1c9b9baec1360fed60991119fbddc26ab90140941a396912ded8bf238aeaa304642aaa05ea2ec4104b2f4c129e7f5dd7336f5cc93346fa17b4590bdb874520b655f318ca8c276a1b1feef847827b3303d7ba399bda8d7117695abd34404f926cc55beb1a8dac3e2ff5c3872565abf", 0xeb}, {&(0x7f00000079c0)="809806740750ced74f0166f121a02349cf926d32c39acd03500271bc0edd876f0bc93fe79d585a4d7dcd10eb7277dff99bbab6499ae93de97927d76f4b3191372535cb179a170faa53a4a2a720900dcb4336eb0e07a3fc90e5122f0cbb8c3e8753b50692aa877b91f5e061acbce97e2e92743e55bb5ed66af6515bce5338f687baa8c228b9b1d3be26dd1aff13b1418a4b724baccb", 0x95}, {&(0x7f0000007a80)="fc75", 0x2}], 0x8, &(0x7f0000007b40)=[{0xa8, 0x0, 0x6, "20e99c5b7ac90ca72dd6a2a23e2c71258eb1925a2b7d4f6184a3737b8f17dd7035fa12e3ec97e9bb2c84327090e8d7ba3f9398fc2ab43cdda0ce4496b0d59d1202b061d594e4522a19270bc2974e7cca970801248dcda23d9b8b8347b2c66177926a5b0884aeed0dafef6d25e313818a8fd83c3d7dbb9c31c474bf91dc371c46a241b14ed1a949427b4bb0abbcf16a6fdb1faf218da419"}, {0x68, 0x11b, 0x8001, "5e3942e894a3314847f7d9a698ca2655defe1879d93ae8d27d0e23044f73bc258bdc8997ac07f34eeb58e8a80fd4d3cda838c1637cb9ef9a1a352845a37e25adbc35a29f9b56b1ef73d09323005c44401c02bdcede"}, {0x10, 0x11, 0x7f}, {0xe8, 0x115, 0x0, "84f01edc1be67bdf9ba10f4f1b90bd1e2d1f42505be64145b3ab95c665ba2e44760d41cf0f3b785f49e937112816178605975abb57f7aeaca6a3134f1fb2ba8fe33e2368ae58297b69568a40afcfbe14e4e83cea2534f3cb136b539343fd612223027b82a195848ec61b4d91b08f8820fb63501d81087de91b3527bad80202e6c5e614095882ce68ff1aaf64b41bb3706fd79df381da42710bae03af9d042d3b8404f7190c5dae081a38950a226ae71a23762a38591978cb1bcadbaba5e05b95930f19b2a3c3e436d6157a18dec06238e144c98b1d679176"}], 0x208}, 0x1) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r3 = syz_io_uring_complete(0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000055c0), &(0x7f0000005600)=0x4) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x60000001, &(0x7f0000000040)={0x0, 0x989680}) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) pipe2(&(0x7f0000007dc0)={0xffffffffffffffff}, 0x4000) clock_gettime(0x0, &(0x7f0000005540)={0x0, 0x0}) recvmmsg(r4, &(0x7f00000054c0)=[{{&(0x7f0000002c40)=@phonet, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/25, 0x19}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/190, 0xbe}], 0x4, &(0x7f0000004e00)=""/133, 0x85}, 0x1}, {{&(0x7f0000004ec0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000005380)=[{&(0x7f0000004f40)=""/16, 0x10}, {&(0x7f0000004f80)=""/102, 0x66}, {&(0x7f0000005000)=""/233, 0xe9}, {&(0x7f0000005100)=""/206, 0xce}, {&(0x7f0000005200)=""/196, 0xc4}, {&(0x7f0000005300)=""/32, 0x20}, {&(0x7f0000005340)=""/27, 0x1b}], 0x7, &(0x7f0000005400)=""/148, 0x94}, 0x3}], 0x2, 0x40010061, &(0x7f0000005580)={r5, r6+10000000}) 00:35:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x33, 0x0, 0x0, 0x0, 0x0) 00:35:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:12 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x11000000) 00:35:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x34, 0x0, 0x0, 0x0, 0x0) 00:35:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:13 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x88000000) 00:35:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4c00, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:13 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000002040)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x8021, 0x0) 00:35:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x35, 0x0, 0x0, 0x0, 0x0) 00:35:13 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0xa4ffffff) 00:35:13 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x3, 0x1f}, {0x2, 0x0, 0x48}], '@\x00\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9c"}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x50}, 0x20) fsetxattr$security_evm(r1, &(0x7f0000000000), &(0x7f0000000180)=ANY=[@ANYBLOB="040a000e4abb65cb66c0caa7e7cd56a68febcb97fc4fbd552c00ecf1d6a0a7ff99ff071cd4f28240acc9575ae4a5483bb904750a0c344bf197f374d287dd0619df9736bb149135be6d5d7c2a7d4e2a9d10dfbfc46f95"], 0x4, 0x1) 00:35:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:13 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0xffffffa4) 00:35:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x36, 0x0, 0x0, 0x0, 0x0) 00:35:13 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1}]}) 00:35:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6800, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:14 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 00:35:14 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x100000000000000) 00:35:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6c00, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:14 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair(0x28, 0x1, 0x400000, &(0x7f0000000140)) 00:35:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x37, 0x0, 0x0, 0x0, 0x0) 00:35:14 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x300000000000000) [ 351.497766][ T36] audit: type=1326 audit(1627691714.269:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15176 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 00:35:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:14 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 00:35:14 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) socketpair(0x28, 0x80000, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000200)) r4 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000000000000a000000dd"]) ioctl$KVM_SET_LAPIC(r7, 0x4008ae89, &(0x7f0000001a40)={"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"}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r4) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000040)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r8 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r1) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) 00:35:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x7400, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:14 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x700000000000000) 00:35:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x38, 0x0, 0x0, 0x0, 0x0) 00:35:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x7a00, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:14 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) 00:35:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:14 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x1100000000000000) 00:35:14 executing program 1: socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) 00:35:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x39, 0x0, 0x0, 0x0, 0x0) 00:35:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xb00b, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:14 executing program 3: r0 = io_uring_setup(0x2fa4, &(0x7f0000000100)={0x0, 0x42f8}) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x1000) 00:35:15 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x8800000000000000) 00:35:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 352.241553][T15238] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 352.313246][T15238] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x30000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3a, 0x0, 0x0, 0x0, 0x0) 00:35:15 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0xa4ffffff00000000) [ 352.426069][T15253] __nla_validate_parse: 25 callbacks suppressed [ 352.426086][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.479818][T15254] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:15 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x444040, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x0, 0x10000}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x1a, 0x0, 0x0) 00:35:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x34000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 352.674012][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.741286][T15273] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 352.826317][T15238] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 352.868218][T15238] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:15 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f10febca0546", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000"], 0x140}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x8, r2, 0x23}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x400300, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 352.989078][T15284] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 353.002616][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.041605][T15287] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.117769][T15292] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. 00:35:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3b, 0x0, 0x0, 0x0, 0x0) 00:35:16 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '([&*\xf0('}, {0x20, 'sys_exit\x00'}, {0x20, 'sys_exit\x00'}, {0x20, 'sys_exit\x00'}, {0x20, 'nl80211\x00'}], 0xa, "782d1d6704e1dcbbb6fa01ff9a8bd50214915a25a4745e8d7914c708ba288996598f0a10059424555305ffefc6fa9c9eed2218c2d1149d6ec51fac77a804dc51b9c47a2f08a5c407460e8e86c4e4fdc2320c3c8e9654767bf59337b67b4809e581189bee6b44907cb233702071837729f4944bdb4acbd1be8a5e5d5720"}, 0xb6) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x1b}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6000, 0x4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x17, 0x10, 0x70bd25, 0x25dfdbfe, {0x8}, [@nested={0x2c, 0x73, 0x0, 0x1, [@typed={0x4, 0x14}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @generic="83e66b54d6de739c9d4e72487b226a8d1a83", @generic="e0e1", @typed={0x8, 0xf62, 0x0, 0x0, @ipv4=@empty}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x8084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x1a, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(r7, &(0x7f0000000480)=[{&(0x7f0000000380)=""/221, 0xdd}], 0x1, 0x7, 0x100) 00:35:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xe0ffff, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 00:35:16 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:16 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv2(r0, &(0x7f0000001640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) [ 353.308121][T15302] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 353.321361][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.340649][T15306] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 353.351868][T15302] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:16 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sync_file_range(r0, 0x0, 0x0, 0x5) 00:35:16 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='f2fs_write_end\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) 00:35:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3c, 0x0, 0x0, 0x0, 0x0) 00:35:16 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x7, {{0x30, 0x4, 0x0, 0x20, 0xc0, 0x67, 0x0, 0x6, 0x29, 0x0, @loopback, @local, {[@rr={0x7, 0x7, 0xf6, [@remote]}, @timestamp_prespec={0x44, 0x44, 0xd7, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast}, {@remote, 0xdd}, {@remote, 0x1}, {@remote, 0x53e}, {@empty, 0x1}, {@private=0xa010100, 0x430}, {@rand_addr=0x64010101, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0x57, 0x3, 0x4, [{@remote, 0x2}, {@empty, 0x3}, {@empty, 0x80000000}]}, @noop, @timestamp_addr={0x44, 0x44, 0x83, 0x1, 0x4, [{@local, 0x7ff}, {@local, 0x67}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0xfd6}, {@multicast1, 0x6}, {@remote, 0x2}, {@multicast1, 0x1}, {@multicast2, 0x5}]}]}}}}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)=@xdp={0x2c, 0xa, r2, 0x2}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="f9f1444219f63b43a1153140", 0xc}, {&(0x7f0000000280)="a04966710063e84b2f018999175f807c81a871f3613d65677b2a0c6955cdcd258ee87ff13394f9ed3691c06a6e7093ced475c7b7cd67ddbf32a40f087fc6408627edb19d734d1966736061632d6170de4b3002184fde30006ba50b3a0306b3c8e2dd593963d79358d3d5e1b7c564989f10b36c124d4f3718eb3e7bc6639362d336cc733d32da69d0b95fe758907b343f91f50de3092f7b07633b722b4d78bb54e130079f6aa5070f467a51c4d7ca8695e0fec381e70ed6432e84080d614eb2e69619696291e43c26f1c36540be92090ab9ac", 0xd2}], 0x2, &(0x7f00000003c0)=[{0x28, 0x10e, 0x20, "02817d1af09288bc377fa929ae90363b69cc"}, {0x50, 0x88, 0x1, "45c2d1f508204e143455b1f4bba86e474d62354266f66d6af28d93db2b32c3b660aa91db7616043a5846938fb49e53a4f9310498c251c1b4b1"}, {0xd0, 0x111, 0x7f, "cfcec825a565d9afebda300c2422ee5aa04dd224f8b6e45909db4c18461b9a599f2c1ec79299024899de74ad6ccff11060cde8fe69b1cee2c276a7eedc770f3095f5dbdefa1408988e43f8287f6d3f715b8316f16177ffa6871322543f33fbc14728f2e5d30ba22bab6d0c57bafe0d990818fc41403c391eafd8246aa0df4a92c34137af4ccc301521a3f8f2bd1e17bebc6e9d939268c19162a6d5ac1cee7f7574fb49c88dd4211ceb46b43c4b88817b372a1ed4416702e8a0034025993f"}], 0x148}, 0x1002) 00:35:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) 00:35:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x1000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:16 executing program 3: setfsuid(0xee00) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) 00:35:16 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000340)=0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x100}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xcf}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) dup2(r1, r4) socketpair(0x28, 0xa, 0x6, &(0x7f0000000140)) 00:35:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) 00:35:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:16 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000100)={0x1}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/nf_conntrack_tftp', 0x40000, 0x20) sendfile(r2, r2, &(0x7f0000000080)=0xa, 0x5) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) 00:35:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3d, 0x0, 0x0, 0x0, 0x0) [ 353.897012][T15343] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:16 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = io_uring_setup(0x2fa4, &(0x7f0000000100)={0x0, 0x42f8}) poll(&(0x7f0000000180)=[{r0, 0x2416}, {r1}], 0x2, 0x0) 00:35:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x3000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 353.938459][T15343] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:16 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000280)=0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TUNSETLINK(r1, 0x8912, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0xc8, 0x820, 0x8, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x0, 0x20, 0x6, 0xe4}}) r3 = syz_io_uring_complete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x22, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, @alu={0x7, 0x0, 0xc, 0xa, 0x5, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0xbd, &(0x7f00000003c0)=""/189, 0x40f00, 0x1b, '\x00', r2, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x2, 0xfffffff7}, 0x10, 0xffffffffffffffff, r3}, 0x78) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000002c0)={0x0, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="188000005c000000000000000000000185007877f4ff100000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0xa946df4509dd6304, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xb, 0x1, 0x4}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='sys_exit\x00', r0}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000300)=0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x1a, 0x0, 0x0) 00:35:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) 00:35:16 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x2c, 0x1, 0x0, &(0x7f0000000140)) writev(r0, &(0x7f0000001a80)=[{&(0x7f0000001600)="ca43018366c9bbc1cc11b54b2e6233659b2370b350a6df6dc05e66c3255607e53d0d475c141e45b54b233453cb794f20ae9335bbc6f4b3acff427c9d4abe57524026e73dc9a2d20a9f97f5234c131860510cbfb0ca8c73c9487723bed226e6fc36beb30319dbb3a0983869ddac477508fd6e45903d3ec4356dfad83acd7d29f3d0d3781f5764656b64bec738a65247b32995ff6cabd5e2ab86c407c1c48722", 0x9f}, {&(0x7f00000016c0)="d8b6914bef4d30ccebaedbf3107d7fb495cfb6703cd00f8ed9ab49fabf215b4dd8a2f567ac536a36ca71d3c24cc33a4199394e123f23048d66faf92c3a51868dc5ed505b2695646bc4e233b891b4d433d3f557f8f0d2", 0x56}, {&(0x7f0000001740)="a2d9d27dc7bb731b9338da6578271ffbf1a4b4887e26260a3415fc5904294ee528e2455345ad84eea2dd224bd610277f42a818441cf45c211e2cdd8197dee15dcd350aee9c8ef9522856b9ea9d39aa799dceb4f4113e07e8476625ae4c54d262366e923c586ff6047c827bc023d2ea48fc52f1976f25ebeea9adcec78a2850c554043a3b7e290192aa6635e52a4366d8f4bb5bf8b73e1eb2f17df9eba01368655e493a8a953b7482", 0xa8}, {&(0x7f0000001800)="c71adf10ab8797379ba53fc5e331136c0640d810791f8da9efa72ca78c23c802b68cf91432e711dcff7259398d73acd656b5b4476a8b4932374b35edec9c255b3a514822bae68a20c8bbc59a21f3e3816f315ff0c262d5220d07e98a5a12117db29da8b3cbbd9689eeac6c7481f23e6f5069e1ac", 0x74}, {&(0x7f0000001880)="5d349ce8abfd6a5ff9eb4fef145feae7c12c60a880bd49c41c11e5659878568d7e932591be272f9a61ad21e580d4e82b0eab556040645f2f40d6dd6149c95836f153bf543f8a4f1122e77b5d0a1d9198a1f7d87ce0aa552361e8818139ae6e525ad7d47c6d4703c8f28312ae5ca491ce535be9125ebc589f1ae1e56dc00423b212ad39de265b7b9350038b37098cb272619bdba1fa244d500a3e109103ce7dad7e34d163f2c9fc0dc60c9f7941ed266703b2", 0xb2}, {&(0x7f0000001940)="37c9628c372386d24eff653bcfd045d159e4d71141bb747c7f10de90e660e1355a98720706c0164fe37f6dac394b119d51b33ed3ce9ffd4a9e9d55e69f8dbb7e5a11824d4dc12c815f14b755ab4afa4517765aeac2bb9fac1d1591ff206ede81e54b7d9e1df0dc550f59172113b3ee6d6d0d", 0x72}, {&(0x7f00000019c0)="7550297aac0f1f33685965b47f278a33cfdb8d23adbba9d567c97cd39d3995b9fdfd5c3a6e0dbe707ae55f74a04b6a2611ca4333ffd6ebe7a45c6a8287776f38f8a8007b56879676cb309e8c74e04a8a61f40c2ada9bbcf0eae36486121289b71b8fe65dd2d7a623eb41c66ec2a1429c585d9a3ffa44afba0bd2a677a6c8102d11fad9ff216f44ed59bd529c76cad45134f03f95f260a282dbeea81d9eff47b77b8a5fc6095a5df20eeef7c2d6dec2b155", 0xb1}], 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/116, 0x74}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000001500)=""/207, 0xcf}], 0x4, 0x1, 0x10001) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=[{0xf0, 0xff, 0x0, "3495563671c81f41962c349d33db0cef325cb8f4badd9c576ec3ec13bc4aa67820fd9a2edebb142f7eaec3094a5a20e6c79d216621f95d0744e80160ebad867366f87dd3379576fce40895047f3d7505007415cadb19130673178466970b7430565cd4dff09ace39373ef8b9f3cad30fb6a00180c968a9a5db7bf49ce032aa250efd7a99f6525966a1828e324b47d01d508a4f91ef151cf396e4eab670f187f35fbbacf9a464063dfb795c51c5f663f176431f4d154f2afcd98274a878f135958916bca3699164bf976b186322e81f72e4610e58e90dbc8cae5d21547d73"}, {0x50, 0x10a, 0xffe000, "8d2792ba8a15b7a38fdcb358db6da36ca2d6c4c5979cefea297367175c4d1fa67c07cc1abe3665ddc74800553fef34eba50f89223c8dc08b8256c6dde7de"}, {0x78, 0x10d, 0x5, "afcbe927a9af35286fc360cb20404117c95a8976b5655b71916f53b4968db900d2f69e5db2e2a3970793f2e6d464a2fd1ef91c1cc1202284561e8f2a3e5f19903120aa56e0041b37e5cc703f1e33e9e790011df33261ecb1ee8b0bba2d2fb477b1153f14"}, {0x78, 0x108, 0x4, "1a17ff045675d2365be2e045de59525e2a8beb749e52195b00e6471fef190c57e1cecd5e8d092d37e185d5ef5b875bc63391968f496882d3739716f01148e9ca3229d2a5f7a36621dbe4f3ee150f1e14d7d0c9625129963998e13e754d6d4bbff29af2"}, {0xd0, 0x10b, 0x0, "ebc6c25f295c0c7a4a32ca404b45283f0ea5f8bdd1b034b009a2d1d8941f718929b52ff6a9b4ebd787b78ceb278ef30820032365d6f8a7660ef9de1b818d7b8e4b4dde785ea2873aa804a6971194374e884aedc42ac9f237348ae680d672138225428d595cdabb518ae0ad34decefc96af27d88ef84b46502904a40d659205b238dd3f9a0ae1ee0961dc34c1d75f74ff72b3aa03eb0d2812241d2d808f269c817313942df631130bca8c579df2ee557635b5263e1b26b9add5"}], 0x300}, 0x20008000) 00:35:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x3e, 0x0, 0x0, 0x0, 0x0) 00:35:17 executing program 3: syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', 0x0, 0x0, 0x0) 00:35:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:17 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) fcntl$setpipe(r1, 0x407, 0xfffffffffffffff8) 00:35:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) 00:35:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x41, 0x0, 0x0, 0x0, 0x0) 00:35:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x5000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:17 executing program 3: syz_io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x1af, 0x0, 0x0, 0x193}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = socket$inet(0x2, 0x5, 0x5) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000400)=""/120, &(0x7f0000000480)=0x78) socket(0x1e, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000540)) getitimer(0x2, &(0x7f00000005c0)) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x8, 0x8}, 0x18) unlinkat(r1, 0x0, 0x200) 00:35:17 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000100)={0x0, 0x10001, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="24030000", @ANYRES16=0x0, @ANYBLOB="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"/798], 0x324}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) socket(0x25, 0x80000, 0xffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x7, &(0x7f0000000680)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @map={0x18, 0x7, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x3, 0x3, 0x4, 0x0, 0x1}], &(0x7f00000006c0)='GPL\x00', 0x0, 0x34, &(0x7f0000000700)=""/52, 0x41000, 0x1c, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000740)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xd, 0x0, 0x6}, 0x10}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, r5, 0x0, 0x9, &(0x7f0000000000)='sys_exit\x00'}, 0x30) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x1a, 0x0, 0x0) [ 354.502601][T15385] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 354.546036][T15385] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 354.641066][T15396] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x42, 0x0, 0x0, 0x0, 0x0) 00:35:17 executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x7f, 0x0, 0x2, 0x5, 0x1, 0x4}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) fstatfs(r1, &(0x7f0000000180)=""/207) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x105000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@bridge_setlink={0x74, 0x13, 0x100, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x244, 0x12003}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x3}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x4}}]}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1cb6}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8080) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) 00:35:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) [ 354.717380][T15396] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:17 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_mount_image$erofs(&(0x7f0000001700), &(0x7f0000001740)='./file0\x00', 0x3, 0x3, &(0x7f0000001b40)=[{&(0x7f0000001840)="c9cf4c4d33b6befe079a9a6761e1944e2c87c06d6f33ee9e457e585553ee401310ba5892998d8571b88fd7", 0x2b, 0x9}, {&(0x7f0000001880)="5b094ece3a8d60263019d64e23b87381290f14dcf6455c8903b44c722f828f098196296e135c965ea98655e948271d78", 0x30, 0x5}, {&(0x7f00000018c0)="1faf8775ed4207e12ffce106e8b32583c0bebf01665fdf6f0dba88e1c5f64a229ecca4accda69b0d41923b4c34a04f265a42bea5e99f546e3be94b67878cc5a921", 0x41, 0x4}], 0x2880076, &(0x7f0000001ac0)={[{@nouser_xattr}, {@noacl}, {@noacl}, {@nouser_xattr}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute}, {@obj_user={'obj_user', 0x3d, '[:'}}]}) mmap(&(0x7f00001b4000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x2206d000) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001780)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="3cf574e0667005cdf41a6898306f221472dd8f9cdd352107d45ffaa220835ff0920a5855b6c66af73812b1251212b8e61d8fb08accc5a68719723e4310272b518ecc6fcf53151bef3ca2e64a3ab9dfd6ad5037a8942ba52efd262c933da726a12c9bb2f5665a3ed0e3a5a2cb1a350400a928c6da11364a", 0x77}], 0x1, &(0x7f00000001c0)=[@iv={0x48, 0x117, 0x2, 0x31, "8530ed19b7eda7f85d70934b338f15fc536183dc2a9a8a5f3abc52b08ac79357e405f4f7611d673804a40ef419ef7b8c08"}, @iv={0x28, 0x117, 0x2, 0x10, "c73b6d7da08379774fde3f66e2eb30b6"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0xffff}], 0xa0, 0x24044080}, {0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)="7df9aa3536f84b7f52b8d924669c238a400fa90836b0e9fe7440fca357b5a7e9171aefd61452c89612f574d822806e1518cc31d1384d82140adbc94c2b4e4bcd366c913c9d86dc1076a093d89da2a4e29d2eb09d4f821c70a44e2f219bd32987001e978fb782d7e0dbea3290a1f9f9fefb97e174c707f0e8c06815d60c730a8dcbf75d7af0f4adbb2874f0cd5236b256c0579b88f195252c437161b3ef5d61706339b2575ff8e6a79ea59d477ff60bcfb39d", 0xb2}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000080)="8d8d2a", 0x3}, {&(0x7f0000001340)="cfa7abaa9692601db51cb0063d6cf1c7f67948de6dadd9463e6966370ec22de8855c06aaf6b90dd67167495f8fb688012f7b0fa395f29c6c627298a864be30b27acc81d38664c1e9f814fd5a35d9c370eae1b606684113980a4753cb73b3e4cea1c4", 0x62}, {&(0x7f00000013c0)="93ffc644c199fde8d6f5c4e58df77789a89b8097944906f742c591a77966c4ca15ad74c1e8379208360470390f06b39486197503b01bc6ad2d63f917b3e22feda0d43d6d310c0dea1141443751a3b3943f27c76a80e97975640824c5f19c2dc12c4f6ce639a5ff24b02b2912a077e613d7169032e1fd8516686c820ccbed73e2ae53acd047eb0e5e143a7d2c69f942d0f5f93bc1977bbbaad5fc0cf7ec4ac128c4abf948e38c7b205117", 0xaa}, {&(0x7f0000001480)="218b540fd678246c2901249d775e2d017a45985e43e785c4d065d1b00247460aff2badfde6812f6969850b2dec395da95c5816672fd44b2fad48a2ed5d38761755a0cc8505f11e4274f97ef0fcdff34e6af33ed2", 0x54}, {&(0x7f0000001500)="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", 0xff}], 0x7, 0x0, 0x0, 0x810}, {0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001680)="f8bb66e82bfb91d8005c676b0186ca3b5e6d6debf2c982337c", 0xffffffffffffffee}], 0x1, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000017010000041886000000000000000000000050000000bb5054b8983c86ca0200000039000000b59e0dbfd65182e3acf19b912190da37dd6e923f58b032a0f0f85165f31029aac161585e2beb15392d5db00000001800000000000000170100000300000000000000000000002a3d17cefd35131ac4e8334a0de2e1029f0822dc7eb3ff6385e25e049e0018b319c160fce2b2c099c5f4aa6e72ae9d40cd69d30d66aaf6438c17aeece89c0d923e6783dc634158d75fe0cc747d419cd8729c0e9a6209ebf7d601"], 0x80, 0x28048004}], 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x1a, 0x0, 0x0) 00:35:17 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x1a, 0xd9b, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 00:35:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x204400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}, {@version_9p2000}, {@dfltgid}, {@cache_mmap}, {@access_any}], [{@subj_type}, {@euid_gt={'euid>', r1}}, {@uid_lt={'uid<', 0xee01}}, {@euid_gt={'euid>', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '\x00'}}]}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000002c0)) 00:35:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x43, 0x0, 0x0, 0x0, 0x0) 00:35:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x7000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) [ 355.139673][T15431] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:18 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) fstatfs(r2, &(0x7f0000000000)=""/1) [ 355.204308][T15431] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x44, 0x0, 0x0, 0x0, 0x0) 00:35:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x8000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) 00:35:18 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x2c, 0x0, 0x3, &(0x7f0000000080)) socketpair(0x1f, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'ip6_vti0\x00', {}, 0x6524}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xb4, 0x0, 0x200, 0x70bd25, 0x5, {{}, {@void, @val={0xc, 0x99, {0x3, 0x78}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7b2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x40}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x7ff]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x79}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_WME={0x54, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4a}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x94}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xcc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7d4}]}, 0xb4}}, 0x4000) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x3ff0, 0x1, 0x401, 0xfffffffffffffffd}) [ 355.367114][T15451] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}]}, 0x1c}}, 0x0) [ 355.448636][T15451] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x9000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:18 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0xe3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r3}) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x1a, 0x0, 0x0) [ 355.568737][T15463] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x45, 0x0, 0x0, 0x0, 0x0) 00:35:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) [ 355.635091][T15463] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xa000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$alg(r0, &(0x7f00000009c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128)\x00'}, 0x58) 00:35:18 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:18 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 00:35:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x46, 0x0, 0x0, 0x0, 0x0) 00:35:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xb000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) 00:35:18 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x54, 0x4) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) r2 = syz_open_dev$dri(&(0x7f0000001340), 0x3, 0x22000) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x4) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000040)=0x2, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000001400)={0xfff, 0x50, '\x00', 0x1, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:35:18 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'team_slave_0\x00', @remote}) 00:35:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x47, 0x0, 0x0, 0x0, 0x0) 00:35:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xc000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:19 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socket(0x33, 0x3, 0x7fffffff) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) 00:35:19 executing program 3: r0 = socket(0xa, 0x3, 0x3f) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 00:35:19 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1a, 0x0, 0x0) 00:35:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xd000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:19 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000c1", @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x22e6497fca1a51b1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000100)) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x42183, 0x0) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x2}, &(0x7f0000000040)=0x28) 00:35:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) 00:35:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x48, 0x0, 0x0, 0x0, 0x0) 00:35:19 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc3}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) 00:35:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xe000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 356.711544][T15545] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 356.738237][T15545] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) [ 356.796529][T15553] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x49, 0x0, 0x0, 0x0, 0x0) [ 356.839408][T15553] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) 00:35:20 executing program 3: r0 = socket(0x11, 0x2, 0x0) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x220) 00:35:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4a, 0x0, 0x0, 0x0, 0x0) 00:35:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x10000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:20 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@remote, @in=@rand_addr=0x64010102, 0x4e22, 0x3ff, 0x4e21, 0x0, 0xa, 0x20, 0x0, 0x87, 0x0, r4}, {0x9, 0x8, 0x9, 0x2, 0x9, 0x8, 0x1, 0x7f}, {0x5, 0xfffffffffffffffd, 0x4, 0x7}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x2, 0x3, 0x0, 0x80000001, 0x3, 0x9}}, 0xe8) 00:35:20 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x7f, 0x4) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000100)={0x1}) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) socketpair(0xa, 0xa, 0x5, &(0x7f0000000080)) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'syz_tun\x00'}) 00:35:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) [ 357.524236][T15591] __nla_validate_parse: 28 callbacks suppressed [ 357.524252][T15591] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 357.542672][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4b, 0x0, 0x0, 0x0, 0x0) 00:35:20 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) 00:35:20 executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) socket(0x6, 0x800, 0xfffeffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "770ea93f524bb2d8de32af8d19591b3ac975124780f29b161018337cf1d48b4bad35cbde9a41b5632dc78e317961f66d6a3826b32bf86bf139e8fe1a123c86b7a64e5949a2724d3a921500963ba0dac6d2a644fbf5dc8a7211f15911487c2b821c60fd873725f9b1a435fb221302534a5fbf5756c67137f0667db24c75a154d5898a73364fb369741baf7c977377de157c8051aae42b7b937c91947b03a3902bdb0863a03c00e666beadf0a47974848af9bbe9213456440c68cb18dddabb47690b613b0e060e5607673457840bcfbbc8a91fd089f462207d1afc6b92799ecc7f08a2"}, 0xe6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) 00:35:20 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x1) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x30, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0xce, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1b5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x7f, 0x9}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x0, 0x80, 0x6, 0x0, 0x6}, 0xce, &(0x7f0000000300)={0x5, 0xf, 0xce, 0x1, [@generic={0xc9, 0x10, 0x4, "d39ef2c1a28aadea70e6b7ab6d4170b6c1729448918e12f6eeba91eb54b7cc67151e4e98213aa1d278c92f2616bca3a30b2db72a8f33f75e153b73db0193b6e1a5d95ff45e6272a9b3dc6bc01f3feec9c6e2d4bd0bb34a989ce8136ea1a0d0c0d1b73f9eab95d7e63467f4c4e617995422f1e96310f5f0676ef83bf8bdbe7a9b639a5ac587b8ddc29a494126a5af9322ef4f910ad93dba28049fbd14c3bf19180018bca35b2b281edb9024360ab60280b7ab96d286c5d94d2dc5d0a0fce14ecd590cd01c21fd"}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r4, &(0x7f0000000780)={0x24, &(0x7f0000000540)={0x0, 0x31, 0xbb, {0xbb, 0x22, "02fcc3df2316377add777ff82a8fd14381d3b9d3cbc6290e0548fa783340a248ed5715d056f165a140cf41d3f37e77d770cc92d75c30c9f4c349a81328343551a16964240c15091be9c3267e3aeef5b69fa9e19709e76b13e96400c4ef2cef083cdf89e74d5ffc4c2f023106c7f980d9a43f8ffcd2bafe22fb0bcb4b2b5499aa8fab13529af95dcf9d1ede84351ac0ae2df1e5bbb8a97a993ab27442673ed7744a1f8c05ab6fb77eb4c5856581f80baa0c0cced317f2aa2e72"}}, &(0x7f0000000640)={0x0, 0x3, 0xac, @string={0xac, 0x3, "2d1994b9e5b4359ae6f64640bbd46666413917c33407a365f06b13b730d95897a368bc0b29d8a034305141ce746202eca4300a65abe9b725d6dcac998f2ece9940c059425f92c5a2aaafb13086c5975857be69d3b3037dcfab0f6011de73bc10a76b98a4c4a337dcbb1a7674403671f0fe1de450f17095ddaa4364db1882fa992e0bfa5f1b23e1356e831dc7e96527ecf34e6aa18220c867403139c5534bb444a4f8375654786a90ad44"}}, &(0x7f0000000700)={0x0, 0x22, 0x1a, {[@local=@item_4={0x3, 0x2, 0x4, "5c2a1695"}, @main=@item_4={0x3, 0x0, 0xa, "5a768a7b"}, @main=@item_4={0x3, 0x0, 0xb, "01b2341c"}, @local=@item_4={0x3, 0x2, 0x9, "875835dc"}, @local=@item_4={0x3, 0x2, 0x1, "c8eaf35a"}, @local]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x4dd}}}}, &(0x7f0000000940)={0x2c, &(0x7f00000007c0)={0x40, 0x6, 0x28, "30ca8acc21c4988e6438b3ec3ca6d8d912859854962a77f145812c7361dfab77c25f19dd60ebbbfb"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x8f}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xcf}, &(0x7f0000000880)={0x20, 0x1, 0x49, "aff4ab984f050805d422def6b84710eb760b44605a812aa767b91969a091be7453649b2c47ec1abdee6f13b9e4ffe18ff727e99383cc28aa88b868b21a464e0120cff0a01c1595f54a"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x1}}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000980)={r2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000a00)={&(0x7f00000009c0)=[r5], 0x1}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000a40), 0x101400, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, 0x0, 0x9, 0x0, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_usb_control_io$hid(r4, &(0x7f0000000ec0)={0x24, &(0x7f0000000cc0)={0x0, 0xe, 0xc4, {0xc4, 0x21, "0667091a0d40500fb9c9859fa872b79a146e433831379d238e75e15acf707521840af520988f2ba7bbbf3d814093ca52bbd93ee645914506cee53d9ecd47adaf6792fb0d8042bced339511a199df2e0acfe81ea1e85868000ff4e245febc5af6e35b05e50702dd5479f8fad31157c6b9163a12eb9d15755d515b3f3a6479437d16bf041ab351ff72dfaa99a6ce2fe73ba6b810f9dc895d60e461968eba0f95efca7b7ff823905380102981d63cc94444dfef4089fd32c97d11de9663028c4d9df3d9"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "c0fb1b5033d847c0a5f3de3fe48d0178a820a7f4e94585cc854f73e887fbb92858d9e4f934f3bb6f017ac2f9d7ee68cd14885e4141fb0186a49c62a55e2fc2abb505a3b88d84defbe36bf6072530a2369b3c3a6fbc9f8b8f6052d1ed1ebfb95e6814b99520ed6e23027c14"}}, &(0x7f0000000e40)={0x0, 0x22, 0x15, {[@main=@item_012={0x2, 0x0, 0x9, 'Q1'}, @global=@item_012={0x2, 0x1, 0x8, 'U*'}, @global=@item_4={0x3, 0x1, 0xb, "480f255a"}, @local=@item_4={0x3, 0x2, 0xa, "0353d6b1"}, @main=@item_4={0x3, 0x0, 0xc, "bf293b1a"}]}}, &(0x7f0000000e80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xc00}}}}, &(0x7f0000001040)={0x2c, &(0x7f0000000f00)={0x40, 0x0, 0x2a, "6058ecd1f8a0d2606704fe127d06f81db5986ad0ea55411b6664b1ce6c8cfd349fb2ba97e21d73c7a240"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000fc0)={0x20, 0x1, 0x36, "edda29805403797ffc11bbef3e74cc2140b14a285092f8aa6f2c3410df85e59fdbe86a9e9605d6bbb3ca406012c30b8defaee12820fd"}, &(0x7f0000001000)={0x20, 0x3, 0x1}}) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001200), 0x28002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f00000012c0)={&(0x7f0000001280)=[0x0, 0x0, r1, 0x0, r2, r5, r2], 0x7}) 00:35:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x11000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) [ 357.809423][T15612] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 357.841156][T15614] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:20 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f00000001c0)=""/135, 0x87) r3 = accept$inet(r2, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x1a, 0x0, 0x0) [ 357.890691][T15614] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 357.903122][T15621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x12000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4c, 0x0, 0x0, 0x0, 0x0) 00:35:20 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x49a5, &(0x7f0000000140)) 00:35:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 00:35:20 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r2 = socket$isdn_base(0x22, 0x3, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000), &(0x7f00000001c0)={0x0, 0xfb, 0x1015, 0x2, 0x6, "7c68bd2da03999ceffee1c24c6721061", "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"}, 0x1015, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) splice(r1, &(0x7f0000000080)=0x6, r4, &(0x7f0000000100)=0x9, 0x9, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x1a, 0x0, 0x0) [ 358.113270][T15634] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 358.144341][ T9773] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 358.185622][T15641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x15020000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4d, 0x0, 0x0, 0x0, 0x0) 00:35:21 executing program 1: semget$private(0x0, 0x0, 0x244) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0xfffffffffffffede) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x2, 0x7940f95f, 0x8, 0x30, 0x1, 0x401, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4}, 0x40) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x10) r4 = socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000280)="b08f145542366cddccc6f5829c36d96c4a54f4c89e11b802f6de98d08e4d80ba76251aac5a62c5b5b247ad1d752ce719a316bcb2f8ec0a82e4e1d3e248ea0e24151e0fe36b722a371f27506426f40ba0819c6f4971898a34c77aaa0c0613fe63917fd413e17fd155c4727e35d0d631186acb9ccc7e5faf5dbbff22", 0x7b}, {&(0x7f0000000300)="2796e43cde69f81b652f3571be4a87842baed38fd4bd90b68332b9fed450bd1b781c0d3583671951f2fdcd50def7cb01692569aefed67eb0f9af23dcc4d6bdd0658367504255761a4fea50fdb01136a3d0370b979455ca55ef883059c2c2395ccca47848b4be78a7726ce1d1ae22ce32c0e423562d5cd7d7251db13616c950335ebaafb62993a0427777a536d8ad0174f43cfdf74f96aec7f4e2eb20748cc4e628b89de6", 0xa4}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="76fccc25b71b243181e5d94f905a62", 0xf}], 0x4, &(0x7f0000001440)=[{0xc0, 0x112, 0x6, "874840c2a006bd7a475f4aa8a0e21ad2c0b9d65233b4775fb972f9a96e96c2c695908a21194a50d20d2958291af1788412bf6d4d203d267ce15bc59d09c055b7b9ce93d1324c3b4059ba61a1ba0bf707bdca699b765095475adcc8af873a15409f67f6199016083188af0922a8c5a0e16cb8fc468518b0ec97c1fedd209b5493dff7345771b42f60c2663ea71097a10286d221de20ba0e569cdb8388292c8578f5aa4e0416afc14cfab2"}, {0x20, 0x6, 0xa8e, "6afbb69c84a7bff882e9"}], 0xe0}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='rxrpc_tx_fail\x00', r3}, 0x10) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) [ 358.350917][T15647] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 358.379619][T15651] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 358.417980][T15647] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 358.594580][ T9773] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.849684][ T9773] usb 4-1: string descriptor 0 read error: -22 [ 358.865434][ T9773] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.40 [ 358.890979][ T9773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:35:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x2}, 0x40) 00:35:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 00:35:22 executing program 1: fdatasync(0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/119, 0x77}, {&(0x7f0000000080)=""/34, 0x22}], 0x2, &(0x7f0000000180)=""/4096, 0x1000}, 0x40012000) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) socketpair(0x10, 0x0, 0x4, &(0x7f0000000140)) 00:35:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x18000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:22 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000100)={0x0, 0x10002}) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{{0x2}, {0x2, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}], 0x18) 00:35:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4e, 0x0, 0x0, 0x0, 0x0) [ 359.384882][ T9773] usbhid 4-1:1.0: can't add hid device: -71 [ 359.391091][ T9773] usbhid: probe of 4-1:1.0 failed with error -71 [ 359.414497][T15683] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 359.442045][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:22 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000180)={0x200, {{0xa, 0x4e20, 0x0, @private2}}, {{0xa, 0x4e23, 0x0, @mcast1, 0x1000}}}, 0x108) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) socket$kcm(0x29, 0x2, 0x0) [ 359.498020][ T9773] usb 4-1: USB disconnect, device number 2 00:35:22 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_alloc_extfrag\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='jbd2_end_commit\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) 00:35:22 executing program 3: perf_event_open(&(0x7f0000004ac0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:35:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x4f, 0x0, 0x0, 0x0, 0x0) 00:35:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 00:35:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x20000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:22 executing program 1: ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x10001}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000480)={0x11}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004c01beecde2fed11875835de45b25c340adc811f3607bc79e81fd3423b8bf27522e0dcabee77b4fa8e7e54bec939c6e58687127e6d1680316a480b45a74b76acf9a7d85cfbb7d03dec99908d942d3c391d30c8ef0203a7d7e02b4a7cbd5c8eb8a3401765b875992187f1a8607091b5f64281b5559367e04f7a8a6baad10e2ee4e47785d5b5ee40a90f0cc649176a0def430ebe801cd314b45d748343f494ba80229d1ae9e932f6013de3a85481061cad512c3d23f87dcdabbe72b5c59fe388e21dda142ed134416b59c2e952725fad9a5ade206f3a", @ANYRES16=r2, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r1, 0xcd1c4000) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x4, 0x1, 0x9, 0x7, 0x8}, 0xc) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000180)="c381318afd7c0e13336a5718257e8393a45790a618a9831565a4688da9545a65e323e2571e607d87eec15c635197f4741bb7468c5d8f27fdf7f2e1430d898647ab5ce843f54bafe80acee1b7668e3a4ad157c54673dba5bba420c885c3833c4cb268", 0x62}, {&(0x7f00000007c0)="c73eb51838bad089a358d1d08cfe4f06f636d31691a4b17c0469e057219eca80d1228ba749085421fb348c44d6839a41da8318bc06e7062de1eaaa4f46d35b289cd39c3ea234de9d9c34bffd08ea98175b9916b9423de704739f77edc348309efef6a94b2043f9a8c4f9357c3d10e2a0a6aa22ed3624c969409d80b935bc82e8ff796ced9fb964f05051e75ffcf15d1f1d2604de93c7b06b8440118bfc2b4927a38654d8f20b59f1a8c705f1e5780163dc84e860352844f754c336efd8616c2737e08bd1de8d8860ec8f9b6b70236d4a93835d6399afd3184b2573c8d9817f534215af0f755ff8c33ef3ce52f00334ba", 0xf0}, {&(0x7f0000000240)="c167ca2e6a067dd4da5febf383acf8d5839322cc2c9a6468962e251d22a96a7fcd7ef1306aab2ab9a254f8deaa0fcf287c760235667347eb95adb406abd04cadf7511a168205dfab12198b72dbeaea8fdf051d52141c25", 0x57}, {&(0x7f00000008c0)="62a66fddfa481f8196c9991ebed1d9e6f21c8e18987cbe0ec34304b2c4cbb411bcc6fe49bc685f10c027818ae1d34aaa0e45240cff6d0b40a88476039b7ba128705a886d46677e74f8ef43d8779d3abfd87eb7add81c9e54964f9b174099d95ac0b2dae2b41c11eb7e4199e9371f4d29b05c2bd93c00031ed55b34d6119db796aa22a4d143fa06a7b0ab5996f79180f30231f63c8511338d63328943746bd18da141be01b56adc2e95f9eec7a0b750847a00b0c8b578c1187fefacee99222b6a05049c07c15e7aec20cc208600478b", 0xcf}, {&(0x7f00000009c0)="7ea03058402ae242c75e1f4671e9e0556ed20cc61a5db90fbeedbaf2477ef0a9515ab8577cd90981a4bd4fb103d860fe4e81a58eb0a88ae1d55169d7602b64536eae93", 0x43}, {&(0x7f0000000a40)="52206df1ef8e5ed836f813c5ecae0d62bf40486e921cec53db3c9821d563b16764e122b61726aace454f20a725bb73f247d66560aeeac1748499f75c098409b353968b779774a62457f0da50c3925edb3b9bc23a8e2d5c228a5eb0d08bff3c55e42705931fb35d5e0b5002d5fb2a3728e73f9cd156cad2731893211d3e309abf0ca0fbaa7e578e7251224e1d4064a4fb3eceb7c9550067fcd7c9e444568d5ce78886a1b5cc929dc886dddc35b115adea5d7744702489fb8dd72d3c7d92933d077481b8b0216bb8afe6d0d701fe94f1f0fdfa8dedd1e71ff26933", 0xda}], 0x6, &(0x7f0000000bc0)=[{0xf8, 0x107, 0x9, "4bb2aa4b96b279be4707738722912a11efcbe4ab47562922d275b67c3ab9ff06864986fcd82e6191720abccb97aa92e256b6e007e2ed6925109825b3905928caa159860de4ceccb5cc7de7e702622a403540213a0a3704c191445bf38b5817ba241bf476f1a429069f7cecb44949705b9841e60972cc82a0221f404d8706433e19e889a76d39ea10fc7c66b1e767695d6ba32f5d0242066be0ac5d42374cf7f343cea1006784bda592af4f787248b81666f108cf273adfb83a4ad9e5f8622e5a27aeb2ab98616778db292170d9d51abb4d24b1b71936b4348346914d550edb20a5b07b"}, {0xc0, 0xff, 0x5, "41a25fbbe1dd0d5c1231225423873e0258a275c13427354dee5e4bd1744444ef6a0c925d4c6373010e73923e37b4612144bd9516f368eb6da5d115429f963d7c8245788cc9c7272d316f8b73b4d21aebdd1c7bc3ac24b314a907c6de2057126e82a1a6ba4aabe1c53c4ba6be4d22a537b46502a1348ea2e099e7ad4b731aad5c62b9421e7789a30a05250358c0e9dea3d8a849919054abf521dae5606368aee0a4f3961a5681aa7dd1eb5275de9f1cc9"}, {0xc8, 0x29, 0x3, "f9b2b611bef0210e6c77dcc5fe0aec8e70f9283ac710e7eedd6e57cb5892ba99baf4d50d147425bf51e5865f8336989dbd5d022eb48f8c3278c79e2787b3446ddc1cc3e263a41fe14f3938d2993db01158478eae789607cf15b0dd30fa4ec0b62c6023db509302c09f4d8a186c8bdb4a46d35815fa118107d4183b29982417bc5defb67c2586aa3f4a6c4430e57d00e2d98ac457465fe83af55f5da0c925c2225f896e42bfebd2fd0fe5f644a83631e5821d5c6e0ace"}, {0x110, 0x105, 0x7, "93ad32d5443662c555ce85dfd6f909bbba2202ef54665c693f8ba57361d16b97980d148b818935bbffff729837985e46eb7d8517f808086e94f0a16365784a87b7cf5dc6a27ef34d4678c4f5cd0f867f473e0da99d1708dc32876c53b7a333f22dece6dc84118143871f54603e25155abbda3422951ab764d8396e2dccbc21a89a39c3b4151cf9ea9e1cf6fc2ac9baaf4d887a051ab09c13241dda39391efa56a408960721c14f1e3606b8ac57342d79f1773908d3b2c25de74eff35b1cdf254266ff5c8eed02b3d55f9caf242ced94b40a48104d13361cbe5fbe843af5d163bd08c58dc08880247f5d63c6afddc57e4778310ad45178e48bf430d"}], 0x390}, 0x40048c0) 00:35:22 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) signalfd(r0, &(0x7f0000000000)={[0xffff]}, 0x8) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0xa, 0x464100) ioctl$TUNSETLINK(r1, 0x8912, 0x307) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) read(r2, &(0x7f00000001c0)=""/144, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x1a, 0x0, 0x0) [ 359.909002][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:22 executing program 3: r0 = socket(0x18, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 00:35:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x50, 0x0, 0x0, 0x0, 0x0) 00:35:22 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000", 0x69, 0x4000002, 0x0, 0x0) 00:35:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x21000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 360.113447][T15723] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:22 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @const]}, {0x0, [0x0, 0x0]}}, 0x0, 0x3c}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/102363, 0x18fdb}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 360.162129][T15723] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x51, 0x0, 0x0, 0x0, 0x0) 00:35:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x25000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 360.410931][T15732] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000", 0x69, 0x4000002, 0x0, 0x0) 00:35:23 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x808, 0x4) [ 360.451132][T15732] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x52, 0x0, 0x0, 0x0, 0x0) [ 360.611142][T15759] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x28000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 360.662113][T15759] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000", 0x69, 0x4000002, 0x0, 0x0) 00:35:23 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f0000000280)=""/74, 0x4a}, {&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000000400)=""/83, 0x53}], 0x5, &(0x7f0000000500)=""/170, 0xaa}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl1\x00', r4, 0x40, 0x40, 0x4, 0x10001, {{0x9, 0x4, 0x2, 0x3f, 0x24, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @remote, {[@end, @noop, @ssrr={0x89, 0xb, 0xbe, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0080, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040051}, 0x8014) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x1a, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x984c}, 0x10) 00:35:23 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x40000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x53, 0x0, 0x0, 0x0, 0x0) 00:35:26 executing program 3: r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x541b, 0x0) 00:35:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd00000000", 0x6b, 0x4000002, 0x0, 0x0) 00:35:26 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r3}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) 00:35:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x48000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:26 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x1010, r0, 0x1bd1b000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x8) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x54, 0x0, 0x0, 0x0, 0x0) [ 363.370810][T15803] __nla_validate_parse: 8 callbacks suppressed [ 363.370826][T15803] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 363.402627][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:26 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x9bc3) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x60000000) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:26 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x1a, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x14902, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0x6c, &(0x7f0000000100)="56ada659747ff1cf842520b5e558845408d2f46688c231f364f2a42d386ce34cb1f682ae6d69584e6644b637d121c5ad265a091ff2b8a82f08a24846e4a5cf8ef942b96781331b22e2dcc39d810786152c6d381d759cc479989839b0759cf7f606715d9849ec04ffaddf0e5a", 0x40, 0x0, 0x0, 0x78, 0x1, 0x1, 0x7fffffff, 'syz1\x00'}) 00:35:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x55, 0x0, 0x0, 0x0, 0x0) 00:35:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd00000000", 0x6b, 0x4000002, 0x0, 0x0) 00:35:26 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000009c0)="d2"}, 0x48) 00:35:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4c000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 363.725634][T15827] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 363.754151][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:26 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x3, 0x80000, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f10febca0546", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@newtclass={0x48, 0x28, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4, 0x6}, {0x1, 0x2}, {0x8, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3f}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:26 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001800)=""/88, 0x58}, {&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/175, 0xaf}, {&(0x7f0000001400)=""/189, 0xbd}, {&(0x7f00000014c0)=""/231, 0xe7}, {&(0x7f00000015c0)=""/197, 0xc5}], 0x7, &(0x7f0000001740)=""/105, 0x69}, 0x2000) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000017c0)='ip6gretap0\x00') ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x1a, 0x0, 0x0) 00:35:26 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b0, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:35:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd00000000", 0x6b, 0x4000002, 0x0, 0x0) 00:35:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x60000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x56, 0x0, 0x0, 0x0, 0x0) 00:35:26 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x31) [ 364.056936][T15847] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:26 executing program 1: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000340)={'veth1_macvtap\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe000000, 0x4, &(0x7f0000000140)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000240)="01000000000005000c62b1e36e1de72bf88ea5dd01ba5d4e5bd0ce6a76969d266d176b0d9ba1d4d0853be2e1795a3fc9de6054a1bd0cfbbbd622a26c133f1d0331fc9225f77fd00da030e3bb18b98d923fba4b28b3c600b183e3de494b8b9b8c39a38d0db808a8e38ef475ef58bc2aaf1194bae26adc5f9bc00ba66d3ab577ced3838556abb48a62218692d97ed076276a073be396d16b21c4b26330b8844c632b", 0xa1, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004", 0x1d, 0x11080}], 0x0, &(0x7f00000000c0)=ANY=[]) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x8, 'sit0\x00', {'vlan0\x00'}, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xcc3bdcd0595921d4) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000380)=""/152, &(0x7f0000000080)=0x98) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'geneve0\x00'}) 00:35:26 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) [ 364.112045][T15851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:27 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x121040) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000080)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x1a, 0x0, 0x0) 00:35:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x0, 0x0, 0x0) [ 364.272739][T15862] loop1: detected capacity change from 0 to 264192 00:35:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x57, 0x0, 0x0, 0x0, 0x0) 00:35:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x68000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:27 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004f80)='ns/pid\x00') [ 364.347871][T15862] EXT4-fs (loop1): Unrecognized mount option "+" or missing value [ 364.417139][T15862] EXT4-fs (loop1): failed to parse options in superblock: + [ 364.452633][T15869] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 364.466208][T15873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.478276][T15874] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 364.495644][T15862] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 364.545667][T15862] EXT4-fs (loop1): mounted filesystem without journal. Opts: +; ,errors=continue. Quota mode: none. [ 364.547813][T15869] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:35:27 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0xf0000000, 0x3, 0xff7e, 0x1, 0x1, {r1, r2/1000+60000}, {0x1, 0x0, 0x3, 0x6, 0x8, 0x3f}, 0x50f, 0x3, @offset=0x4, 0xd755, 0x0, 0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pwritev(r4, &(0x7f0000002480)=[{&(0x7f0000000100)="c79da794afa5151d9d171f60e95716ba165547950be19b100b", 0x19}, {&(0x7f0000000180)="06daaf32f5bcc5e225fc0cf70d034b3714f3faf0c959b522d32ecdf0f521b32f2fb598f537cdc959eb5acadb3639bb39715ba44da089099538615d518eaa1558b7b490fb7066fe7465b479daa7de474edae12d67872cf2a32ac96010372ba49379bc4315e280ebf8ec2b6e2411edcb26ac63ec274e0636be7be088180e6b48e756f3a3c2b94e414b74948919fc940b38f18ec73e0e13763040f8b9f42e76254265851be8a6bd6ca8e600879358beea86fbacf206a7d86b4542b3562935a4236a35a31ac30063f68d2eb3a6be560d938df4347028fd7b7828851c29bbf78b640717441941313bc9562cac5111da9a37d9c4430acc0639c546716a5928c13302abdcdd02ae1d4d234d38d4951f0921d9e9795dff2707768541eeb0982912223460be93b6c71c886e4817cd627e7bf7cc62986d0442add38d4320197cdd9e3442d295b7406d4d9faaf42f55046b0730e71377c765b90b77b363fc67178ab877c7f3cdad57a24c5305f2724d8ea07268cdfc12710615b4c9dda61d6cb047643ae586073a985ec6ca15d505a49d033fd8b320e43e768ca1d0291ce8264684f650bbe478680db9e7dc2a957eeabafcd4f6b261afa539cf3972e913950ef288979330155daad41dd0729fa802fbb331414f2f4d03d5d42e4ea1d92b0dc2e8b53d48e1a87f3f2d6deac45eb8b51a46ecf72d3d7f255487d724b9766a98cd6c23eff99158cd7683c619e8567b851b33bb0feba735db125f8ae4dafdfc3e66ecfd42be98e700966ab5c856a93b071b7be0661aa9652cb78718f5abcebb7561c0f5e5930282288387ccdf55683ce9363619f5be952b29ac7256c39535b5d5cb6510d09e34eded27fa5a75d059d860085f248d03afdbe6c79d21fc0275d820403d84c22697fcb1ab673ee27e23c800e847e781207357e2ac8738e8cf5f4d3662f62bae55316bd57439e6f2a0448ed16100ee623e9e95c5a5cf94e6d980545fdffbf227798a2b1ef2bb1c50246ad53f0432037563badd7949d1232406301b888a13c19c8a368641a7978e7d90ed4ebf97dce44a4880d236477d3c8061f59eb16f0f75621d6fa205413d2d9491615d6a2061c5e1d9808d04bf7d2b9e842e982edb45695f3356ddd9f6d560eedb682cafe524420bd64b8c1c71bf6830407e2f5731d6726ccb22c1a945f8b953bf01fa67c6739b901d6cc6c532508e06a49bdaa6435ff84cf86972092b5a8fa3e6e26d8a6bea6f32a987ad4aed4f02d1fb114888f9327247c1646d6f9d8fb9a96a4a8da682beb97c8f88306ab6ed151170c144e27cc6e61cc3f2080e2219d5d892c48fa33acefd5c9568a8323b2e445da60341f6e8ecb96629316c431d481ce7ebccf2a2ee7f6d5af4759d9d240770e62eca8842f04c963d5be9c21711a897ed39db36c0268e539950aa1bc4b833395ea6acd574061bd334062df93b43006419abf673896b6be46b157f1e483f11769f7ea4f76b5da8f95912efdd37d9dd4d9e3d2d3093e10c86b88f8159b2ae252402c70776ef989a628bec7ecbcb4adea92d8ef933499d1dce9fa94b4815311d1d73ca299ac8d3e9629521753a3d49f869765c2021f6d9fe6ee3f42e458468b63f69a0e220d376692d2dca918844b5a217587b36196304d9988df0279024f7b685657826bfef6678a34c7e11b1b4f182cd6a7aacab7b1896bba4b1ee1cb48078dc6a0d479a5a094a9f9c908356cf2c95a415b77e644a560d79bc15051833e03f451e5dc3ec32df724193f2f127480462e9ee09f7cb718ad7cdb7b0b2cb6e9f4990674d871299b6513ca8cabb7f90fe9f26d9a2357d3774f47d11d39cf39e0bd8e63e99ff5552845e925df6419d11035b619b0a53e4fc9e601e5c13ef692708fd0254cf59b5baa6a3a910ef15c2014a3ca2b4ef16c60dcb7de5ab0cbfb41248865f0a222daaa3591380eb0f4c508a535eb1aed52794ba2a98cb3c15ae7af9ba7497eda5f44efc3b425da23ad2073c59c9a41bd2cd9205f8b974037956aefa031ed257d6aa8e4a39764563b0b1d1d61db0094466738d86630208c1b945d7e404808972065453eeda11e3b30e23f7480f0f1bc34c7ad20545787d48233ece441e2e67a027ff075d7cc8543b218374b5c39ae8af68eb696ff099efd01c235bde36197459b04dd9483771f490a9b9c0ee887421222bdc2a4c68b4add11173edbbbf43fdccdde32c66232d5ba7423fdf11e727bfd20a8ca243d1f2b886d394dec218734190669396d549359d7a45d6077ad0a0ea3c300519db49f93cf9bb0ada7a34839a4961c58acd289fb2ebd905fbf813ada00a0196b7160e3d7f956a2e948f9bcafe3053cd92f16323f1dd2cf3e553d70812d51ad5873009c1fbed239385b5617ecb6c2248bc2aa05b4461824522f8d9ad4b61500af32c670816efaef8c702f33b23d46e013c606fc6972a36f38220dd6df7e592284a2dec49f5d7e154a760fe4f79bca56d4e486f72a647daac8283e73586e2d640630b3714554562b1a76b6b49ff61d527dad0e794e66ee1ced84d610484ee065bc9f2dff215a57fc56e416665df2f6ac537349707503e55684319506358b44a412d82739dea71ac5b73c0502c451d95f7be82b61386ab77fbdce22402614b87320421ad16ec4e2c1145a7c4610737c3429fd02d85a207b43b9bd8195a5d3d7edffcffc2a6b08587cca306d0faec390a56e83b74a09b75d6083f98ebfd65098438ca3051827f05cc961aee50d95ce12ed0902ed3b3d2ea03e595cff20332ba82e95688a78506502037586b7f38b86d8efaad4c3fe8f4263bff831a60a5e9f8fb02bb67f93b03acd8b0ed3d95745b9cd9e12485704aeb2fa9e9900129a36b4b8937734702e376209e88a786a2b98d5c8c658a9d827c7805f73388c51c758d66d563ae3dd3f056a0b3b8b2dccdea768b435a4aa303c2a624c8760d7e5082282baa3dcb7cac144f747c23ac6147b8037fb4529faa4ac8d80bf42110365a39dcad08ff66af1ba5e3a2cfd3d913fc995b1299607a3b92a1a79508ed00cd1be6843314ee8f0784db57b37aa2f65a1b16263a21ab45202c1d4ef3c466de8b2d90ccf7c5ac9aba2e2d276f09b4ca580b2c8dcc9c1a0d1366effcc5dbd410eb8e3b158de747acd92810ac8df5dd5fc9538d4c93800cb67e275971df561c2f6c181f43b9034511bb8abe7d5e55cf8f1ee45fd53dc58ef41f8aeb182fa0be04c445a74a767161112e476b380ec32e9ff17ff50f8d94466213a24745f866c0818033ed1bdd678091f2a5996b26febe357b003f49fc6712c31e046b1a8c9436d9904ac4cf09b38e8736edf999877870d70ccdc93ecd99f8863aee535b2a20ffa79397ce9bdac0185dd6bea00d3bbd9c8c7c7f5a9ab1d5e3d04e440213c571a7203b178088626d6252592ea847265b762e6632fb15eff84b22260ed419ac1bbdbb47bd74cb717b4f2eb9be178efb4e37272eb772ad62ef842e50cdb4d99f6ae697ee5a6d7814fea03cbb2a523e29d7217bd54c9673d9cf8618da5eca1761c891b57923b0cbcb737d0c7825d8def8acfa22006605594d10ec81855c2534546795687a1b4a68597590bf46a20af0e5c6baad559ea1897847028fe4e119563bf458fe91f5b2b09277eacf0999a898662fbe2b00b9eb5aaad814cdd0da99bfa72581d99621ea3845ff2379bd590718f33d81736e05a660a9ead814f781d9294371097200af3815c8050c3f881e6573fab2c885494d252b283f4ab5e05336a6046f4661a9f10dc170158321a43e9aa2c77d2384ee258d0ccbbcb806561bd4cc0f9d69f47fe95b26bf2cc3c7cf3b5e4996d0c81f03ffc1f380c31bf979819623821c5f6e81679320b66155334af6b157a87244f99488b680117578dcce5dd1e84617d8ee97bbd0c987c85e8d9cb5b67e9204bfebd08f4aeaec77b89d389673cca35f8a854f9033fd1ef9aaa7b0b383943d0931ed73a7a817057483a325359fd0ccb9d6a63b91b32e71c0f3dbb8f58ea74c185422521e4146309f2d69f7630b88ee825f2b4420fca55ef0e9d0588f58f81577b4a0bef6f727fed3f34303a87136b8b24246b8164f1cd20bfb065b63b9e8ec7210faf1f6bfc6aa0f6820e1d0635ddaba3348b936680292a8d03d5b79bf5da4c2a5c162e93b0a2882d9a1250f592736fd56b4cfb2f596bf5943eff350b55c45807475c2492729c0b8b2feb62397886a95785bb7d29a9bb49821f2b8198ed1e11fa9dceedc0245f69a32a4784c0976c850928010151018ed73c8d20a76a4f743bc463f2192d0bfc2d2eb859c71cf629a4fc006a9445bbb663ca5725b50246f1bda86b83cc23e95eca328fb75648c22ff24a12048e11fbd15a6b03fcd7773c8a8ed34acf2d2048dfef7d8cd3a820cef70ddcdcd4602e90db9adaba68fd0420334e8a45f91497a49b54b716f2c7dc3ac5faadf2fbb085f509d8e9239e50e9957fc735f98e45aa0c863d49be0e775baf5dc4571a2efa4a6513d95de72ba8a68c98d98e53401a59113dba776a117f4396683269c3be34d2180094cfb96fb2c274c64b871c5b975139e81986e3b70cc79f9cd4ef27525fb5eef2fccf73b1c1b97913a321bc1a8dcfdc3dbfe4e0146efbf9341278052cdfc9d725a7abbd6e312efd1f4ecd480a59e21dbd5a6791eeedf42b495adb1c5287db990ec869abbc0fbba6533626fc4066b38db7f82361ef3f274a78b7a490820cfe3f5f742d772f126bc3594441d35a8fe6130328e827e9c9e5fb9e080dccb67c39b8b555d857483f1019ef32fc99e5d90edd684724be43d029ce563bf6df4f0c547994360f22222af1201b6919853d6642064c52132b86f84df6511d3199b299889118857b053d5751d070d3167c3c031ead6f16bfed6d5c513564bedc32954fd4af003c577ce3170ed4fdd38c65a32da752054fd90ff3e6d63dffea7fe2adb0992e5aa7c9fc99f2ab5666cdd49e46be4c109ff97ecd90b7f79714b6e7ad5f811de906bab3ca97b054c6456e6e9e33b0906c6f5331ce0e53c3925cf4ba0a4339a35e13519956d6fa43b88340922740e4fa679489e8450de588324fbabbe2696a006ec74a075ef3782c455c6355737e52315da8f2ae64fbffb9d858527c42e4ab8174fa4fa608df54096a37626bffe5e38835e5e41e222e652549ceeb33573e3b94c541329e4a7346172b7c0e978aab72f5b333c6b5b6787afd2122557b1e034f621350a7661ff30e34d8753457f0c6d2e2587096125ebd6e1658de5dbfeaec6aa3ea4849c128ea617c8473ff04c5573cf47003b7534a34cf41d4cfabd678263912b12afe736750ed7c460535e3fe3847bd1f5ba455c863f5a1f91acdd8039881136ff9edd09a6647348070a30a27c7a8a24ba37e24d539eb56cd08af222cc305d8a0f13f0c9180d0d899edd40105a194639b679a355063ae89d09d6277e48706d3fd54540d9a06c76e9be57176d67029364e1ebc2a2bbdef715057c4787253382956f554b00c961aecc91715aa86acc6c94edf51e194f6d38f42b5028ebe77b17c86fe4f8fca31da0b887fe5d773bde1c94cbd64947d89aa809fd3209f299799b25527513de4c8e43e46756438c59df962753c38df4fd9e8f9d2d072f11e7cf09ba7be58ed6a8dcd78059bcae795c3eb381c316d0804f9043fd2b07ace43d1bba688a602d9757535ff6d3de92103ee783f5f134e19fa6faed3dd5346cf9697c0d8c594d6a9831fc5c612dc214a0406a73e8276b9db3de6b77ca94f4ce5af77ac57b287faeb17ec48b054a08514d54a7a57ede0ca3f0088570ed8745dc6aec", 0x1000}, {&(0x7f0000001180)="e432186df430ef4f09e71f0ce92d32763e6c321ae41fe6e7342dd1ec6678e124cf8d276b1ec02b5b6ceb652a", 0x2c}, {&(0x7f00000011c0)="498ba3722be6059ad49cdd12fedc05014dca068a8c88f3a9c02935739dfa372190110d6849dafba1c5b332bd830edce509086b4b387f5b5efe", 0x39}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="35777cceccefe29d99f3ce8cc7cafe1537774f64fe4370d2412b95f9a97fca24b1f963bd6cb6226a7bd79cf0712545755a901237d67a258b737f2cb8146726e49af56cbb19f54b8f8709f640bfe160c33d848bde19aa312972f119fc5fef72884f076c77a2475d1f5125a2b5819c308ca83975775ad2161304f0f026d0beb71ea3b031de94fd17aa5ab9af29475bb330703689082c6c50525b020681d8c07e4d5174a0a5b533f64cc2840990b43be46285e98597ceb9", 0xb6}, {&(0x7f00000022c0)="6df4998acd94c2137273587af1fbc814e9c19480ba88c674b8f96cdc5609a101a081be6225425960cdc3017a7dbc48e046d18b76d68dc45d508bd89bb02524ea7c5d09ba14ee41f7ae8b912350a7dbe7d749849eb035b74ed8fe94fe0f1432c74e5c2e1e6f07a9bf244a9555d3a89a96b3fe49ab24324012a9273c065169b58eec2fbbe3bc12aae5efb91406ddfc", 0x8e}, {&(0x7f0000002380)="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", 0xff}], 0x8, 0x1db, 0x9) 00:35:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6c000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x58, 0x0, 0x0, 0x0, 0x0) 00:35:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x0, 0x0, 0x0) 00:35:27 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) [ 364.832020][T15891] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:35:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) [ 364.915252][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x74000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 364.975857][T15899] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 365.002919][T15899] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x59, 0x0, 0x0, 0x0, 0x0) 00:35:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="0304ff1f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x0, 0x0, 0x0) 00:35:27 executing program 0: renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x1a, 0x0, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x6, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='inet_sock_set_state\x00', r4}, 0x10) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x80, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@access_client}, {@noextend}, {@cachetag}, {@version_9p2000}, {@fscache}, {@fscache}, {@access_client}], [{@uid_gt={'uid>', 0xee01}}, {@dont_measure}, {@fowner_lt={'fowner<', 0xee00}}, {@appraise_type}, {@measure}, {@pcr={'pcr', 0x3d, 0x25}}, {@obj_role={'obj_role', 0x3d, '}'}}, {@euid_gt={'euid>', r5}}]}}) r7 = dup3(r0, r2, 0x0) mount$fuseblk(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000, &(0x7f0000000540)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@blksize}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}], [{@subj_user={'subj_user', 0x3d, 'euid>'}}]}}) 00:35:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$'], 0x24}}, 0x0) [ 365.114198][ T20] Bluetooth: hci0: command 0x0406 tx timeout [ 365.123582][ T20] Bluetooth: hci1: command 0x0406 tx timeout [ 365.149621][ T20] Bluetooth: hci2: command 0x0406 tx timeout 00:35:27 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x7a000000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:28 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = dup(r0) sendmsg$nl_route(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x8, 0x3}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044845) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x1a, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 00:35:28 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000015500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:35:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5a, 0x0, 0x0, 0x0, 0x0) [ 365.359296][T15931] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4b49, 0x0) 00:35:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x9effffff, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 365.473549][T15931] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:28 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x2) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r7, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9a405d690c"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x40}}, 0x4008040) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="491201ee5f10a498733fe75b65998ce8ca4b3e24d52202bda11bdb8d2219cbfc600ebddb6daf383fe9d18e31287ea3dcf1c7b38e9b5731e71f37b7ae1992b069791a1f3ac199279a9fc5c150b2413dcc93bfe55f05319582dc936e36849452850b91b1e03a0c69e1d4a3b2ec990c931063750d6606c739cd8d845a0daf890af05f13ac54d107e9a6fde6b57fba542b32f8f08af35d8ded82b1e231379c0c988b2c1d543d01", @ANYRESHEX=r4, @ANYRESDEC, @ANYRESHEX, @ANYBLOB], 0x1c}}, 0x20048004) fcntl$setpipe(r2, 0x407, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x105041, 0x0) write(r8, &(0x7f0000000440)="2e27e77e7fc686cfa503969ad332185fae39598f1c0c0a6c83306de79cffb069fb6b3345bd25b34fb35104968cd289edddb7b0538a8c4f126a1d75f4967ec00fe7e7b0487565db64da694b13c34764e4358d907b49596638936f6dbfa2494bcc38bcef59b199af094c479baf895c0fa913851d4e00f9f33ed7e129c11240fbc570113ba9", 0x84) 00:35:28 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0xfffffffffffffffc) 00:35:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5b, 0x0, 0x0, 0x0, 0x0) 00:35:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 00:35:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xb00b0000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 365.794812][T15955] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:28 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x12, 0x101000) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10010, r0, 0x2b867000) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) 00:35:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@delchain={0x24, 0x65, 0x1}, 0x24}}, 0x0) [ 365.842092][T15955] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5c, 0x0, 0x0, 0x0, 0x0) 00:35:29 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x200000004) 00:35:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xefffffff, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:29 executing program 0: msgsnd(0x0, &(0x7f00000001c0)={0x1, "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"}, 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}) msgctl$IPC_RMID(0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) 00:35:29 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1265, 0x0) 00:35:29 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) 00:35:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5d, 0x0, 0x0, 0x0, 0x0) 00:35:29 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0) 00:35:29 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000140)=0xc7, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r0, 0xcb302000) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x0, [0x6, 0x5, 0xedee, 0x3, 0x94a7, 0x7]}) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000080)={0x3b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000005200000226bd7000fcdbdf250a080003000700000008000300ff7f000008000500ff03001e0800eeff0800000008000500070000000000009ec10297bc781ddce7939ac559d14dc7fff8d133ee20e3b14d9948e91e82a4a166d5592719af7ebaf46376a64dd46e6984a077d233870978a53bea2c84c5c111000000000ef4e32fbfcd2e84f7e49343778d51"], 0x3c}, 0x1, 0x0, 0x0, 0x8004040}, 0x20000005) socketpair(0x28, 0xa, 0x0, &(0x7f0000000040)) 00:35:29 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000000ce00)={0x77359400}) getresuid(&(0x7f000000ce40), &(0x7f000000ce80), &(0x7f000000cec0)) 00:35:29 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x1a, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000001c0)={{r0}, "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"}) 00:35:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5e, 0x0, 0x0, 0x0, 0x0) 00:35:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf0ffffff, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:29 executing program 3: socketpair(0x0, 0x8000c, 0x0, &(0x7f0000000080)) 00:35:29 executing program 4: getresuid(&(0x7f00000025c0), &(0x7f0000002600), &(0x7f0000002640)) 00:35:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xffffe000, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6000000, 0x810, r0, 0x81d78000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80240}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d0c2be59", @ANYRES16=r4, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x40400c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="400025f416541d9a03adba40c7e8c37fd85447bb0000b28f49a3345d0953c0ccd797c8494e9712d47d949a78302a86fcec5a01b49ce8f8767d29deb9dedb4c2d9a8177fff8d3c346da7864239e9b7381fe20ca1e4d032c31e8237937b60e0809425a53c19a6d49a6dd3d23f5fd56e05bcf3bee7e5197cd3ed8c43d904b", @ANYRES16=r5, @ANYBLOB="000329bd7000fcdbdf252e0000000800a100080000000800a1000600000008002201cb03000008009f0000000000080026006c09000004000501"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) socketpair(0x28, 0x1, 0x0, &(0x7f0000000140)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x0) 00:35:29 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x400000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x1a, 0x0, 0x0) 00:35:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x5f, 0x0, 0x0, 0x0, 0x0) 00:35:29 executing program 3: setreuid(0x0, 0xee00) [ 367.123242][T16025] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 00:35:29 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401870c8, 0x0) 00:35:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xffffff7f, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) [ 367.173295][T16025] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 00:35:30 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0xa00, 0x0) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$netlink(r3, &(0x7f0000005580)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc, &(0x7f00000054c0)=[{&(0x7f0000000080)={0x30, 0x1b, 0x300, 0x70bd28, 0x4, "", [@nested={0x18, 0x26, 0x0, 0x1, [@typed={0x14, 0x64, 0x0, 0x0, @ipv6=@local}]}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@loopback}]}, 0x30}, {&(0x7f00000002c0)={0x29c, 0x3e, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x1ca, 0x49, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x92, 0x0, 0x0, @uid=r6}, @generic="768ed76d4e5c9f4c790e15bf937c4f35888d85ad163995368cdb60b961f4bb51f6abf48ede7d77cb3c6a8a62f19811556bf32b320012ce26f9c199aa34e8aa1185ab03cf65b552d1300756fd8d18bd0f35337e43befe6399a79aa98be42f5e7732f0c4d3b33055bb693076e9bedc97f65722a88198881c84eea15bda8c2dfe1368dec1f9c1122989ff6edd65e6a622dcbd21660e84046d908ef3a5b670ef496cf48fa475d4cd", @generic="cbbdefe85b90099e20c40f8fc55ab811cba5323141eda87ce6d2647b4bd9406342dbb03554fcb8d17d11b6e96ef0cf4e0d8b2b8e22db06db29c4b25729d70f8e0b8475da7d7529ad81d1", @generic="46de01493e74fb6f1cbbfdbb55f00e6828ec7e9d433014506ba5ca7cff72fd623aba1dbf9f2bb515f0e15d297bad5180a6ca7603ec5f84c0364b6189e14db0b54e07bd454febcc89cf12cdc5fc59d895ca468737e26dc4f22dd043", @typed={0x8, 0x90, 0x0, 0x0, @uid}, @typed={0x4, 0x78}, @generic="1d5d04affc24a68089dc3e4b1d4009d21ad0835384f194e1828fe7713282ff52906a68d19f69a559d9a71ce1091705ea5b8af1fe589ac7959495afc9522ea9ed4987961bd47dd3d7a0f3ebda446584", @typed={0xe, 0x68, 0x0, 0x0, @binary="46203f4ababa4335cdc6"}]}, @generic="41bdac067798a7b54fded4ec94d2cfd6", @typed={0x8, 0x8b, 0x0, 0x0, @pid=r7}, @nested={0xc, 0x92, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @fd=r8}]}, @typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}, @nested={0x5d, 0x65, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x83, 0x0, 0x0, @uid=0xee00}, @generic="5f6a6b983f7c678d01deb0c538a4cc94294119868698189a31a93f487209e4e9f67d151e9cc9c92ca06d1c35526408e33c99d9f666327297b75114875bc3e8be2499990126abc5f20c"]}, @typed={0xd, 0x68, 0x0, 0x0, @str='sys_exit\x00'}, @generic="03e8b4b2d63d79762d09cb7324e1380bcce3cd353ca3e5370b5ed215c1", @typed={0x4, 0x5f}]}, 0x29c}, {&(0x7f0000000580)={0x264, 0x13, 0x200, 0x70bd2d, 0x25dfdbff, "", [@generic="c4444ab9994d0cecec2ccfc26c8e3f9221832326197ac9cc5676600afd1a8b530a834b9471938129312b12cbfcea12e34a569e0c5524bd2b9af3285f1180737f51801e27afc612205cc414fc7595621f5e8d94898054e3f46b4728b0c9f437", @generic="f22eb414d66d58f7c43d9dd963689113e8591a9ce68668715321e7adff6f3ba14b9eae2f7eb4f88b60bbf7fde496f41e4bdec4a0414ce05229d7146b7444ac5d0fedc54f5c1fb474f85badf7dd8b7f6520ba224e3f24f2cbf06ef283068306bf01ed863c39a46b1ffb06157afdf52434c97535b56c9ee1fdbedf273fdc2cc7317a50b318efa153e201547ce7acb80b6195b9ef30b5d88aa48c6fa3bd0361df9fdc5ca0bc0c80d644c86541f060bfa97efe8eef66138b3d5068c51a0c6e50d4de302a9eb2217e1b344a4d9fcfea61b096f849a45ca27dbb8e7ec827364a1280608310dc77c347a790b0bf648a71534e", @generic="d059d78eb9ca34ea6b8aa42f5915b63f033f1e2ec652693c5ff23b0747488a7622d2c08ca4a67e85a2fe", @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x15}, @nested={0xd0, 0x32, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @uid}, @typed={0x90, 0x36, 0x0, 0x0, @binary="a7a3c42432b5e46367c6ab8be38ba09cc24ff510a3ebe40452584034e827a782973347893dadb1ce8e6304136f5596795464878b1939754db2f1c7ffa7f3615ea1c2bb687f34fcef7c003f1d59c358e6bbf048fca3c51153924af94d72d231b41542f8b54ae25b24a3b671745bc7982fcdb56f9a9f4ac1a43e6eebdb0269a729315eace1f00e2aff136f6937"}, @typed={0xc, 0x16, 0x0, 0x0, @u64=0x5}, @typed={0x5, 0x20, 0x0, 0x0, @str='\x00'}, @typed={0x10, 0x82, 0x0, 0x0, @binary="74a5265d6657eb46468b93dd"}, @typed={0x5, 0x52, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r1}]}]}, 0x264}, {&(0x7f0000000800)={0x1c, 0x20, 0x200, 0x70bd26, 0x25dfdbfc, "", [@nested={0xc, 0x21, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @u32=0x97c}]}]}, 0x1c}, {&(0x7f0000000840)={0x5c, 0x39, 0x400, 0x70bd2b, 0x25dfdbff, "", [@typed={0xc, 0x78, 0x0, 0x0, @u64=0x3}, @nested={0x10, 0x50, 0x0, 0x1, [@typed={0xc, 0x3b, 0x0, 0x0, @u64=0x5}]}, @generic="aa3977c12a8097c8c284b32f548307745c95e6e9eb5362b0459250ec2f7f5053e23dbf419ae03fdfd89e13f5a6e91f"]}, 0x5c}, {&(0x7f00000008c0)={0x3890, 0x3d, 0x800, 0x70bd27, 0x25dfdbfc, "", [@generic="e7fbf0a3e3a7da81da4b28a9f074fc36414cf6dd83dd8258ab21b77f367f99b0bac762fcf9432bee161acf24099c1e030a5d79ba4ec6f232c3d30b6e0cb20c9589e614d04200a82558b7b42a0d258ce76cf1d9f2304dabf22eb042b96ba91179b1de897cd8db934a4a319e2a9e164476e22e8af81a66e28463756cee79f0437a818b46a7b6790dfbba50daebe1699dc28dc1a25b2cf1c51043c6cd974245b7e193e2ae455b900805ea02bffaae", @nested={0x10e7, 0x78, 0x0, 0x1, [@typed={0x5, 0x4e, 0x0, 0x0, @str='\x00'}, @generic="dc4e262bc6982385eafc5bd8e320002260a015a10c91f8e091ddf1169da53f7697d0bcdf17bb6cb9ffd0da7ccd6db1c41b2f58923788bfa0ebbe61a29d48ff78828de342d9f970ebe6d67b9d6a8b432d687ec0483703ab591b2667a0f9d8cd9207816c1b8aeec69807bc4129e90e38", @typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x90, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="cd5ddb87747c772db27c6dd02c564fee2068f82ae619c55b4d55bcca4f2e6673de897be416ae4fa2dc3d261af25227d6074c", @typed={0x8, 0x35, 0x0, 0x0, @fd=r9}, @generic="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", @generic="c4ed2b7da8df8217fdc244144e8f2db71d8db1162850"]}, @nested={0x12b2, 0x27, 0x0, 0x1, [@generic="d1570bcc5da9825ed167f63391fbc1feead791cd78b3b8a68b1a86a450c92b5480205bb3f24c2e1873bcea88649666116a714c94ae7159c1b813d4da6137bc4306fdd7da5d7f9c4c07f6324a6835ed537cf8364b0bd27b99b15d4f08fcabd8ec30a571efb6d8d080efe7bf0d61f9094a25119ef49e22db07200077bbaef7be45e866d47816a30784fefdcd1a4855f9b516206bfab2c684b7bf3d5a4f52426493f75d23d817221507a2b22e63d64521e9d79f8684bf3d474f4bd3ce26c6e27fa0bf72e58ef2396d43ccaac207c1ab26046afcdd88ff1596c4b1bab351340dad41d8", @generic="b46db25da90dceddc0e55734fa2cf507dc908233e0f1dbb90233c7a6a8ebed84ee89bd0f2bfc0beb70c6d40b1fd92f6168861415f17cb3e65181cd31473a42e60faaf0c49b7272f3bd209c44bfdb90e20d6d6b291757bbd128811a3419e5c9a8116a0d9372ba653c35910bf6be9575dff4ee3e1ec9dd64a2cdbb2d71a63c96089d827dd12fd0d8acc8e01e88ec2e20dc1f9871f2c96872595b5858e21a6001b2d04a814ca801b1c7725c1f30", @typed={0x8, 0x1d, 0x0, 0x0, @u32}, @generic="67af0b4c2f365b0c693c750dfd2b5b3b2fac785898b63b9c3eb246dadb258025076aa0a1cb9580b4ce23319df9c629978f2429dcf7d5782d4677885c70fa0914bf4894c4de98c7b16d67c87ad960cfe8f3bb6b6ca529da61f9922b4e936b9b09b5bf3453332815ea83ba19ac6ab05add2f9e4f803ee7480c83ace1b488562d1d7b0b2a7f57ba98323b4c7ed0bd023838542b7cb237601e3ac97bc7d7d9532722bbfa57cf7448823faa6b8a3d60e62605e2249639be6c4ca772dd4eca61d388774d1086bf10f59d8eba1849370a0fbc562908ecb6742875f4349fa847e112294db1e5aeb3f1d6f0c26ac25466f5af23290b3a60", @generic="fe2e9f252e7785126a280c30b79648f83c42", @generic="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", @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x24}}]}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0xd2d8}, @generic="6716edbfd3fccb79a1e6bf", @nested={0x2f8, 0x73, 0x0, 0x1, [@typed={0x2c, 0x7d, 0x0, 0x0, @binary="5baa3d8fde4a437c9848b192f284c9d73252c551e99790a6455764950d3cd26f2a474525b48120dc"}, @generic="5c1b2f6bb807f714b17d3741a43e1d2a420118f8dcf94fd6f820cbd4492db2d29ea28ccdfd374994018e6bea6805d4d3e7a6b8d3735a4382ab13f5e435862945156b6f7f5c0ff8", @generic="68ff73822e662c246d728cb3bea6490515ee932234d02c5699ce329ba00cc0aea406db5a49291ab27015cc00caaa26220afef94e335b9c56c03e7b3db6b631073c42119ebd7c7801ae2b227274b98dcd940c3935ec7d0176b473c77d1452953038fb75586bef9f4a037b9cc56a93980d8f7ae43b66f545e2af882a932f5bee7f856d155a0dec916f72f19291836fae0b246649aac3c6e03915b74f2f630141f51177ea0c23db11b42b57a2abbf414ad2818bebd95c05a660bb472018f8ccd34e52ce", @generic="25dd3883f8732b13c7ac9d4ccbb54e7b067a2240c19ee5dccf3e93c1da9319cf515523e5b2c915b2f8805bdd69f2ef61044e5da30558151f7a5a5f046bdd8c069edc07b7c8c5012b41ff8cbf162a0edc5c69d77d36fca9dbc5a15cdfadf41db33c7d52b61fa8df7c381a4f379cad99939ee68f5445c2d6daddf8243a5d3f6dfa6c8d8dfcc563fa9c8f70e2da58467028cf86321307a0e392c8c22b8343852abe84a9539ce288913d4fc8407d759d8daa9e34fab2dec061bb54f5d50a37067fa74b26a16b10282461c668a07c582c480afe00ac6fd77e6b4e186b01577e7f54a36361e6b17f77", @typed={0x8, 0x75, 0x0, 0x0, @pid}, @typed={0x4, 0x48}, @generic="0d66987fc78f4f2e596cd99f13b3b03afc83fa2b2ffd2fd5cd7d517d2f1f4bd7dc736c869d98288776aa03b3ad439fc6b241ffff2b347379a4e92b0c963f573d4ae1337dd362b90b7370d0bc15dcbf37cd635448391e5d82cf5a304c80d4e56c3028daa7f051de0a20b356f1747ec7863aa0a1826c7a449f62c8a0065885f0ed0870e469b210d8fc0c59d55c6c9b51d9e14ddb75d654f4f3a59fbb5e8adbcdd8191665bafbebdb4322ce7d289efdfd6c4659cfe6b7c551a410", @typed={0x8, 0x4c, 0x0, 0x0, @pid}, @typed={0xc, 0x7b, 0x0, 0x0, @u64=0xfffffffffffffeff}]}, @typed={0x8, 0x38, 0x0, 0x0, @pid}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x1110, 0x15, 0x0, 0x1, [@generic="c1a56c58fec220ecfd5c0ec2bfd5a1462ebef21036448c1cacb57f71155d4fc77f8f", @typed={0x4, 0x83}, @generic="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", @generic="9ed6530cb631aa7475732c32ff17e5da81f70a038df41f75b0", @generic="4a4b2c8f7b12ff6d632bdaba24704fd5d2ea216912edc898565951005c257ad077d165fd03d5c8b62809e2e64394260ade332274251e8baa335f05c2d40694af6777451da470ea881b6101c360e2644b71203e576df1ef8c4978646059ea6d0beab95319e209aa5e06bc6f9e202445fdd717a619eefd279663ff166cc7c77a9df996563fd04ce684d3eacead0042d6dcf0c14988ee32451f31b048b45a9611c5128f2c735a06095d98e6e7eebad50322a227ad9e96fea8e0785fe71a45cf543f2bce04844b", @typed={0x8, 0x2a, 0x0, 0x0, @u32=0x6}]}]}, 0x3890}, {&(0x7f0000004180)={0xfc, 0x2d, 0x300, 0x70bd27, 0x25dfdbfe, "", [@generic="17bd39328892eaef7031de1961df928177de0cd3a6a095bae356a4b23e1f5ab44937971e5bb091cbc6554148192d96e648ad9e1c3a982d289530b1cb30eb321a5a292bce07b65c5ab7a00654c7e17d3364f78cb7cacdb7f9d581228bc4ad076c6f0a0419c39a38bc1a4b5482b300602d71b798992d65024baaf49de26bdac30555ce3c0bf739b636a78ce765f40415cde7eca9027d48e57dc3375e0da5bd739f6c1c4965eacaa703050489951e231822f4a5e0356816b618d428ae83561eed9355d84982c455c092bb27b127bff1ce44529471a4d5a7d5288c97e676c3ecd0e31009fecea489c19d6132"]}, 0xfc}, {&(0x7f0000004280)={0x106c, 0x3a, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@generic="919733707577b535abd619c7c681171a7f492d68c8383e203ea222f3761ae07d58f78974fbb3abf0abbf4e91b3238e9746e76a923b3075866823d11094", @nested={0x4, 0x8b}, @nested={0x1010, 0x13, 0x0, 0x1, [@generic="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", @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x46}]}, @typed={0x8, 0x26, 0x0, 0x0, @fd=r0}]}, 0x106c}, {&(0x7f0000005300)={0xa0, 0x3f, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@generic="9f53733d27b080acd926494d14ae7877e02278ad1cc060bbb01da13ed6d51038ab8c8d5afe4c1c19b3c327109df99b10511b1bb4d839a91f619e0828ee4a7c48b9396b02f659813eeb1e66b7d13a869f91cac4f7b52de70757f1c3e14d25c37cc2b4c1940495fcef9266fe3d6819d255ec169a604134e055e9641d8e81e8ba904fa893e7c3c5e8daed4a13467b"]}, 0xa0}, {&(0x7f00000053c0)={0xc8, 0x1e, 0xf02, 0x70bd29, 0x25dfdbfb, "", [@nested={0xa6, 0x82, 0x0, 0x1, [@generic="91a881373d4305cec134a002e5249e672f01103532ffdabff29f555f474c3cd09b5fc658d0180134662db9d0423162870134cde086b0ef28043b7c8e318f7031c336cc0db3046e1491a37f38eea03b83fe89763845c45f6b4ca5f50a327360b5e29a3b208706ea1faf448e4309cc5241fe037e31afd80e40072dabab184280847be09fc2333927a1567f0f40c2f96ef59c69ae320832325b23de", @typed={0x8, 0x83, 0x0, 0x0, @uid}]}, @typed={0x8, 0x40, 0x0, 0x0, @pid}, @typed={0x8, 0x54, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0xc8}], 0xa}, 0x20000000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x1a, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005600), r4) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f00000056c0)={&(0x7f00000055c0), 0xc, &(0x7f0000005680)={&(0x7f0000005640)={0x14, r10, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x40098) 00:35:30 executing program 3: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 00:35:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ee2, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x60, 0x0, 0x0, 0x0, 0x0) 00:35:30 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:35:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xffffff9e, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="05002bbd7000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0400ec0008009e00190a000034002d8023"], 0x84}}, 0x0) 00:35:30 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000050, 0x0) [ 367.427875][T16030] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 367.462270][T16030] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 367.530633][T16030] ================================================================== [ 367.539306][T16030] BUG: KASAN: use-after-free in __list_add_valid+0x36/0xc0 [ 367.546701][T16030] Read of size 8 at addr ffff888015585cc8 by task syz-executor.1/16030 [ 367.555054][T16030] [ 367.557494][T16030] CPU: 0 PID: 16030 Comm: syz-executor.1 Not tainted 5.14.0-rc3-syzkaller #0 [ 367.566358][T16030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.576524][T16030] Call Trace: [ 367.579823][T16030] dump_stack_lvl+0x1ae/0x29f [ 367.584540][T16030] ? show_regs_print_info+0x12/0x12 [ 367.589859][T16030] ? printk+0xc0/0x108 [ 367.594128][T16030] ? wake_up_klogd+0xb2/0xf0 [ 367.598744][T16030] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 367.604524][T16030] ? _raw_spin_lock_irqsave+0xbf/0x100 [ 367.610041][T16030] ? _raw_spin_lock+0x40/0x40 [ 367.614838][T16030] print_address_description+0x66/0x3b0 [ 367.620486][T16030] kasan_report+0x163/0x210 [ 367.625277][T16030] ? __list_add_valid+0x36/0xc0 [ 367.630162][T16030] ? virtual_device_parent+0x50/0x50 [ 367.635645][T16030] __list_add_valid+0x36/0xc0 [ 367.640350][T16030] fw_load_sysfs_fallback+0x110/0x720 [ 367.645858][T16030] fw_load_from_user_helper+0x242/0x320 [ 367.651439][T16030] _request_firmware+0x3b4/0x560 [ 367.656416][T16030] ? request_firmware+0x50/0x50 [ 367.661298][T16030] ? netdev_refcnt_read+0x50/0x50 [ 367.666438][T16030] request_firmware+0x35/0x50 [ 367.671143][T16030] reg_reload_regdb+0x81/0x200 [ 367.676043][T16030] ? reg_query_regdb_wmm+0x510/0x510 [ 367.681363][T16030] ? nl80211_pre_doit+0x4b0/0x5b0 [ 367.686505][T16030] genl_rcv_msg+0xfb4/0x13c0 [ 367.691153][T16030] ? genl_bind+0x360/0x360 [ 367.695803][T16030] ? local_bh_enable+0x5/0x20 [ 367.700513][T16030] ? __local_bh_enable_ip+0x13a/0x1c0 [ 367.706010][T16030] ? _local_bh_enable+0xa0/0xa0 [ 367.710916][T16030] ? rcu_read_lock_sched_held+0x87/0x110 [ 367.716569][T16030] ? nl80211_req_set_reg+0x210/0x210 [ 367.721979][T16030] netlink_rcv_skb+0x1f0/0x460 [ 367.726767][T16030] ? genl_bind+0x360/0x360 [ 367.731223][T16030] ? netlink_ack+0xb70/0xb70 [ 367.735837][T16030] ? __down_read_common+0x1b0/0x450 [ 367.741089][T16030] ? up_read_non_owner+0x1c0/0x1c0 [ 367.746244][T16030] ? netlink_deliver_tap+0x130/0x840 [ 367.752092][T16030] genl_rcv+0x24/0x40 [ 367.756096][T16030] netlink_unicast+0x7de/0x9b0 [ 367.760892][T16030] ? netlink_detachskb+0xa0/0xa0 [ 367.766198][T16030] ? __virt_addr_valid+0x21b/0x2d0 [ 367.771449][T16030] ? __phys_addr_symbol+0x2b/0x70 [ 367.776507][T16030] ? __check_object_size+0x2f3/0x3f0 [ 367.782008][T16030] ? bpf_lsm_netlink_send+0x5/0x10 [ 367.787142][T16030] netlink_sendmsg+0x9e7/0xe00 [ 367.791947][T16030] ? netlink_getsockopt+0xa60/0xa60 [ 367.797609][T16030] ? iovec_from_user+0x359/0x390 [ 367.802648][T16030] ? __import_iovec+0x35f/0x500 [ 367.807617][T16030] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 367.813007][T16030] ? security_socket_sendmsg+0x9d/0xb0 [ 367.818485][T16030] ? netlink_getsockopt+0xa60/0xa60 [ 367.823705][T16030] ____sys_sendmsg+0x5a2/0x900 [ 367.828499][T16030] ? __sys_sendmsg_sock+0x30/0x30 [ 367.833560][T16030] __sys_sendmsg+0x319/0x400 [ 367.838167][T16030] ? ____sys_sendmsg+0x900/0x900 [ 367.843248][T16030] ? __context_tracking_exit+0x7a/0xd0 [ 367.848838][T16030] ? __lock_acquire+0x6100/0x6100 [ 367.853898][T16030] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 367.859925][T16030] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 367.866099][T16030] ? lockdep_hardirqs_on+0x8d/0x130 [ 367.871323][T16030] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 367.877503][T16030] do_syscall_64+0x3d/0xb0 [ 367.882153][T16030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 367.888073][T16030] RIP: 0033:0x4665e9 [ 367.891986][T16030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 367.911805][T16030] RSP: 002b:00007fba974ac188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.920682][T16030] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 367.929113][T16030] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 367.937357][T16030] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 367.945341][T16030] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 367.953589][T16030] R13: 00007ffe87fae63f R14: 00007fba974ac300 R15: 0000000000022000 [ 367.962119][T16030] [ 367.964452][T16030] Allocated by task 16025: [ 367.968908][T16030] ____kasan_kmalloc+0xc4/0xf0 [ 367.973720][T16030] kmem_cache_alloc_trace+0x96/0x340 [ 367.979024][T16030] __allocate_fw_priv+0x98/0x330 [ 367.983980][T16030] alloc_lookup_fw_priv+0x1c0/0x380 [ 367.989196][T16030] _request_firmware_prepare+0x27c/0x630 [ 367.994853][T16030] _request_firmware+0x11b/0x560 [ 367.999806][T16030] request_firmware+0x35/0x50 [ 368.004585][T16030] reg_reload_regdb+0x81/0x200 [ 368.009378][T16030] genl_rcv_msg+0xfb4/0x13c0 [ 368.013978][T16030] netlink_rcv_skb+0x1f0/0x460 [ 368.018758][T16030] genl_rcv+0x24/0x40 [ 368.022764][T16030] netlink_unicast+0x7de/0x9b0 [ 368.027625][T16030] netlink_sendmsg+0x9e7/0xe00 [ 368.032420][T16030] ____sys_sendmsg+0x5a2/0x900 [ 368.037391][T16030] __sys_sendmsg+0x319/0x400 [ 368.042178][T16030] do_syscall_64+0x3d/0xb0 [ 368.046723][T16030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 368.052807][T16030] [ 368.055138][T16030] Freed by task 16025: [ 368.059413][T16030] kasan_set_track+0x3d/0x70 [ 368.064048][T16030] kasan_set_free_info+0x1f/0x40 [ 368.069093][T16030] ____kasan_slab_free+0x109/0x150 [ 368.074268][T16030] slab_free_freelist_hook+0x1d8/0x290 [ 368.079920][T16030] kfree+0xcf/0x2d0 [ 368.083742][T16030] release_firmware+0x139/0x1b0 [ 368.088616][T16030] _request_firmware+0x408/0x560 [ 368.093591][T16030] request_firmware+0x35/0x50 [ 368.098395][T16030] reg_reload_regdb+0x81/0x200 [ 368.103267][T16030] genl_rcv_msg+0xfb4/0x13c0 [ 368.107880][T16030] netlink_rcv_skb+0x1f0/0x460 [ 368.112762][T16030] genl_rcv+0x24/0x40 [ 368.116980][T16030] netlink_unicast+0x7de/0x9b0 [ 368.121762][T16030] netlink_sendmsg+0x9e7/0xe00 [ 368.126634][T16030] ____sys_sendmsg+0x5a2/0x900 [ 368.131410][T16030] __sys_sendmsg+0x319/0x400 [ 368.136028][T16030] do_syscall_64+0x3d/0xb0 [ 368.140463][T16030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 368.146374][T16030] [ 368.148706][T16030] The buggy address belongs to the object at ffff888015585c00 [ 368.148706][T16030] which belongs to the cache kmalloc-256 of size 256 [ 368.162857][T16030] The buggy address is located 200 bytes inside of [ 368.162857][T16030] 256-byte region [ffff888015585c00, ffff888015585d00) [ 368.176407][T16030] The buggy address belongs to the page: [ 368.182045][T16030] page:ffffea0000556100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15584 [ 368.192640][T16030] head:ffffea0000556100 order:1 compound_mapcount:0 [ 368.199235][T16030] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 368.207405][T16030] raw: 00fff00000010200 ffffea0000887a00 0000000700000004 ffff888011041b40 [ 368.216000][T16030] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 368.224794][T16030] page dumped because: kasan: bad access detected [ 368.231313][T16030] page_owner tracks the page as allocated [ 368.237113][T16030] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9799, ts 249819692123, free_ts 244661623786 [ 368.257161][T16030] get_page_from_freelist+0x779/0xa30 [ 368.262641][T16030] __alloc_pages+0x26c/0x5f0 [ 368.267281][T16030] allocate_slab+0xf1/0x540 [ 368.271790][T16030] ___slab_alloc+0x1cf/0x350 [ 368.276389][T16030] kmem_cache_alloc_trace+0x29d/0x340 [ 368.281955][T16030] smack_d_instantiate+0x6e2/0xd00 [ 368.287107][T16030] security_d_instantiate+0xa5/0x100 [ 368.292427][T16030] d_splice_alias+0x72/0x570 [ 368.297185][T16030] kernfs_iop_lookup+0x1e5/0x290 [ 368.302276][T16030] __lookup_slow+0x266/0x3c0 [ 368.307016][T16030] walk_component+0x4d6/0x740 [ 368.311713][T16030] path_lookupat+0x19d/0x6c0 [ 368.316310][T16030] filename_lookup+0x279/0x750 [ 368.321086][T16030] do_readlinkat+0x10c/0x3d0 [ 368.325687][T16030] __x64_sys_readlinkat+0x96/0xb0 [ 368.330713][T16030] do_syscall_64+0x3d/0xb0 [ 368.335150][T16030] page last free stack trace: [ 368.339858][T16030] free_pcp_prepare+0xc29/0xd20 [ 368.344843][T16030] free_unref_page_list+0x118/0xad0 [ 368.350060][T16030] release_pages+0x18bb/0x1af0 [ 368.354959][T16030] tlb_flush_mmu+0x780/0x910 [ 368.359560][T16030] tlb_finish_mmu+0xcb/0x200 [ 368.364247][T16030] exit_mmap+0x404/0x7a0 [ 368.368497][T16030] __mmput+0x111/0x370 [ 368.372586][T16030] free_bprm+0x136/0x2f0 [ 368.376826][T16030] kernel_execve+0x740/0x9a0 [ 368.381525][T16030] call_usermodehelper_exec_async+0x262/0x3b0 [ 368.387770][T16030] ret_from_fork+0x1f/0x30 [ 368.392298][T16030] [ 368.394715][T16030] Memory state around the buggy address: [ 368.400490][T16030] ffff888015585b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.408664][T16030] ffff888015585c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 368.416922][T16030] >ffff888015585c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 368.425069][T16030] ^ [ 368.431509][T16030] ffff888015585d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.439583][T16030] ffff888015585d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.447737][T16030] ================================================================== [ 368.455981][T16030] Disabling lock debugging due to kernel taint [ 368.478394][T16030] Kernel panic - not syncing: panic_on_warn set ... [ 368.485270][T16030] CPU: 0 PID: 16030 Comm: syz-executor.1 Tainted: G B 5.14.0-rc3-syzkaller #0 [ 368.495813][T16030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.498291][T16052] __nla_validate_parse: 9 callbacks suppressed [ 368.498305][T16052] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 368.505888][T16030] Call Trace: [ 368.505905][T16030] dump_stack_lvl+0x1ae/0x29f [ 368.505928][T16030] ? show_regs_print_info+0x12/0x12 [ 368.505940][T16030] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 368.505956][T16030] ? preempt_schedule+0x14a/0x170 [ 368.505978][T16030] ? schedule_preempt_disabled+0x20/0x20 [ 368.505995][T16030] panic+0x2e1/0x850 [ 368.506008][T16030] ? trace_hardirqs_on+0x30/0x80 [ 368.506022][T16030] ? nmi_panic+0x90/0x90 [ 368.506035][T16030] ? _raw_spin_unlock_irqrestore+0x110/0x120 [ 368.506051][T16030] ? rcu_read_lock_sched_held+0x87/0x110 [ 368.506069][T16030] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 368.506091][T16030] kasan_report+0x206/0x210 [ 368.506108][T16030] ? __list_add_valid+0x36/0xc0 [ 368.506122][T16030] ? virtual_device_parent+0x50/0x50 [ 368.506139][T16030] __list_add_valid+0x36/0xc0 [ 368.601833][T16030] fw_load_sysfs_fallback+0x110/0x720 [ 368.607380][T16030] fw_load_from_user_helper+0x242/0x320 [ 368.614859][T16030] _request_firmware+0x3b4/0x560 [ 368.619905][T16030] ? request_firmware+0x50/0x50 [ 368.624856][T16030] ? netdev_refcnt_read+0x50/0x50 [ 368.631535][T16030] request_firmware+0x35/0x50 [ 368.636591][T16030] reg_reload_regdb+0x81/0x200 [ 368.641382][T16030] ? reg_query_regdb_wmm+0x510/0x510 [ 368.646681][T16030] ? nl80211_pre_doit+0x4b0/0x5b0 [ 368.651833][T16030] genl_rcv_msg+0xfb4/0x13c0 [ 368.656703][T16030] ? genl_bind+0x360/0x360 [ 368.661141][T16030] ? local_bh_enable+0x5/0x20 [ 368.665837][T16030] ? __local_bh_enable_ip+0x13a/0x1c0 [ 368.671309][T16030] ? _local_bh_enable+0xa0/0xa0 [ 368.676374][T16030] ? rcu_read_lock_sched_held+0x87/0x110 [ 368.682150][T16030] ? nl80211_req_set_reg+0x210/0x210 [ 368.687457][T16030] netlink_rcv_skb+0x1f0/0x460 [ 368.692251][T16030] ? genl_bind+0x360/0x360 [ 368.696795][T16030] ? netlink_ack+0xb70/0xb70 [ 368.701693][T16030] ? __down_read_common+0x1b0/0x450 [ 368.706924][T16030] ? up_read_non_owner+0x1c0/0x1c0 [ 368.712238][T16030] ? netlink_deliver_tap+0x130/0x840 [ 368.717538][T16030] genl_rcv+0x24/0x40 [ 368.721530][T16030] netlink_unicast+0x7de/0x9b0 [ 368.726401][T16030] ? netlink_detachskb+0xa0/0xa0 [ 368.731351][T16030] ? __virt_addr_valid+0x21b/0x2d0 [ 368.736580][T16030] ? __phys_addr_symbol+0x2b/0x70 [ 368.741609][T16030] ? __check_object_size+0x2f3/0x3f0 [ 368.746992][T16030] ? bpf_lsm_netlink_send+0x5/0x10 [ 368.752385][T16030] netlink_sendmsg+0x9e7/0xe00 [ 368.757601][T16030] ? netlink_getsockopt+0xa60/0xa60 [ 368.763044][T16030] ? iovec_from_user+0x359/0x390 [ 368.768345][T16030] ? __import_iovec+0x35f/0x500 [ 368.773397][T16030] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 368.778796][T16030] ? security_socket_sendmsg+0x9d/0xb0 [ 368.784616][T16030] ? netlink_getsockopt+0xa60/0xa60 [ 368.789836][T16030] ____sys_sendmsg+0x5a2/0x900 [ 368.794714][T16030] ? __sys_sendmsg_sock+0x30/0x30 [ 368.799837][T16030] __sys_sendmsg+0x319/0x400 [ 368.804563][T16030] ? ____sys_sendmsg+0x900/0x900 [ 368.809517][T16030] ? __context_tracking_exit+0x7a/0xd0 [ 368.815067][T16030] ? __lock_acquire+0x6100/0x6100 [ 368.820101][T16030] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 368.826115][T16030] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 368.832182][T16030] ? lockdep_hardirqs_on+0x8d/0x130 [ 368.837379][T16030] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 368.843352][T16030] do_syscall_64+0x3d/0xb0 [ 368.847941][T16030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 368.853834][T16030] RIP: 0033:0x4665e9 [ 368.857727][T16030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 368.877678][T16030] RSP: 002b:00007fba974ac188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.886112][T16030] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 368.894098][T16030] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 368.902415][T16030] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000 [ 368.910919][T16030] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 368.918904][T16030] R13: 00007ffe87fae63f R14: 00007fba974ac300 R15: 0000000000022000 [ 368.928572][T16030] Kernel Offset: disabled [ 368.932889][T16030] Rebooting in 86400 seconds..