387.108585][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.121449][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.137054][ T9] usb 4-1: Product: syz [ 387.143123][ T9] usb 4-1: Manufacturer: syz [ 387.147728][ T9] usb 4-1: SerialNumber: syz [ 387.428187][ T9] cdc_ncm 4-1:1.0: bind() failure [ 387.440246][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 387.447476][ T9] cdc_ncm 4-1:1.1: bind() failure [ 387.456930][ T9] usb 4-1: USB disconnect, device number 6 08:20:09 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x2, &(0x7f0000000000), 0x4) 08:20:09 executing program 4: syz_emit_ethernet(0x44, &(0x7f0000000000)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "42551c", 0xa, 0x0, 0x0, @empty, @private0, {[@fragment={0x0, 0x0, 0x1, 0x0, 0x0, 0x1e}], "bcf6"}}}}}, 0x0) 08:20:09 executing program 0: syz_usb_connect$cdc_ncm(0x3, 0x8b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "0e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x6, 0x191, 0x8}, {0x6, 0x24, 0x1a, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x2}, @mdlm={0x15}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x8, 0xed, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x80, 0x0, 0xe0, 0x10}, 0x0, 0x0, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x85, &(0x7f0000000740)=ANY=[@ANYBLOB]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1401}}, {0x0, 0x0}]}) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r1 = shmget$private(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000280)=""/76) shmctl$IPC_STAT(0x0, 0x2, 0x0) 08:20:09 executing program 2: clock_gettime(0x5, &(0x7f00000004c0)) 08:20:09 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) 08:20:09 executing program 1: syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000001800)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x6, 0x0, "51f8"}, @mixer_unit={0x9, 0x24, 0x4, 0x0, 0x0, "c0595166"}, @mixer_unit={0x5}, @extension_unit={0x7}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x9, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x1, {0x7}}}}}}}]}}, 0x0) 08:20:09 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c20000000008510000002000000850200000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7cc957d77575f4c35235138d5521f9453559c3421eed73d5661cfeecf9c6194dce62ffe1b4ce25d7c983c044c03bf3a48dfe3e26e7a23129d6606fd28a69989d552af6200000c8a35c9f1b32ac7100abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd52347125985e96418f163d1a13ed38ae89d24e1cebfba2f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4afe1f46ecb19e810879b79a70000000000000000000000d7900a820b632794c89a217b9800e02a92895614cd50cbe43a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d62ad0a97aec773713a66b211fa8b148871c8d31d24291c25449f106b99893ed20fa7a050fbbef90327e87fa67e95ff079fc19c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed200ada12f7a1525320724be71666f472a97225c33b144f3a900ebe14d0b2874df30ed5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffff0108000000e181003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0ba9c38ccbc944bc834bcadeb8ae190a1fb5a315f7a47fb0379659500000000000100000000002dc71a04b35610b98b74217526dace7b012fe507f0bc40368a0874e1b51dad03794db2401a26e70d3b38d866806a69358caf213942c18b895a7653f4ae71932720c3862f6beb8c2ea054aa1e723832"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000340)=0xc) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = open(&(0x7f0000000180)='./bus\x00', 0x16d27e, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) 08:20:09 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x801c581f, 0x0) 08:20:09 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x200010, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) connect$unix(r3, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x240800, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000380)=0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00'}) syz_open_procfs(0x0, &(0x7f0000000300)='net/mcfilter\x00') pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e00}], 0x1, 0x1400, 0x0, 0x3) 08:20:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4e, &(0x7f0000000000), 0x4) [ 388.268620][ T1146] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 388.537959][ T1146] usb 2-1: Using ep0 maxpacket: 32 [ 388.708394][ T1146] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 388.751968][ T1146] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 388.806470][ T1146] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 08:20:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1d, 0x0, 0x0) 08:20:10 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) [ 389.008556][ T1146] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.028502][ T1146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.065414][ T1146] usb 2-1: Product: syz [ 389.084963][ T1146] usb 2-1: Manufacturer: syz 08:20:10 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0xed}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x85, 0x0}]}) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000800)=""/214) [ 389.106900][ T1146] usb 2-1: SerialNumber: syz 08:20:10 executing program 4: syz_clone(0x18120400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 389.468437][ T1146] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 389.477630][ T1146] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 389.507957][ T1146] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 389.595695][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 389.671066][ T1146] usb 2-1: USB disconnect, device number 7 [ 389.761632][ T8273] udevd[8273]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.009449][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.038298][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.057899][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.077842][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 390.099248][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 390.133815][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 390.428090][ T9] usb 4-1: string descriptor 0 read error: -22 [ 390.434910][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.444544][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.748396][ T9] cdc_ncm 4-1:1.0: bind() failure [ 390.756796][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 390.764828][ T9] cdc_ncm 4-1:1.1: bind() failure [ 390.774008][ T9] usb 4-1: USB disconnect, device number 7 08:20:12 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x18, &(0x7f0000000000), 0x4) 08:20:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x11, &(0x7f0000000880)=@ringbuf={{}, {}, {}, [@initr0]}, &(0x7f0000000980)='syzkaller\x00'}, 0x90) 08:20:12 executing program 4: syz_clone(0x52623c46482077d6, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:12 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x49, &(0x7f0000000000), 0x4) 08:20:12 executing program 2: openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xc0, 0x0, 0x17}, 0x18) 08:20:12 executing program 2: syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 08:20:12 executing program 5: socketpair(0x29, 0x0, 0x0, &(0x7f0000000300)) 08:20:12 executing program 0: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@tracing}, 0x40) 08:20:12 executing program 5: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) 08:20:12 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000001700), 0x3, 0x0) 08:20:12 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x9}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 08:20:12 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 08:20:12 executing program 1: getgroups(0x2, &(0x7f0000000080)=[0xee01, 0xee01]) setresgid(0x0, r0, 0x0) 08:20:12 executing program 5: syz_clone(0x8000000, &(0x7f0000000000)="807eaaeb4966bf36f84d5d03b6d95a8ee7363e8adf26ec6b3dd8f74d837c070c8574ce8f34a2d4ed5abf6bb599ebc06ea79e22af", 0x34, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="743e0d5741ce7718ded4414f369ffc54e0bec1b0db03e38f3faa3b42d4af210ec01ecec08f2f9eb23623fafa1b27ea2e362f2c276d9caec85a21c9693ee7e62d60119b8990c5016a97d1144fdeebbea949daf87dcc95306efe4a4388f9139241cf1965730a572f190eecc129c48dcd4dab27") 08:20:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x18, 0x0) 08:20:13 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x1, 0x24}], 0x10}}], 0x1, 0x0) 08:20:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000380), 0x4) 08:20:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) [ 391.828050][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd 08:20:13 executing program 3: openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xc0}, 0x18) 08:20:13 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, 0x0, 0x0) 08:20:13 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5204, 0x0) 08:20:13 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x4b49, 0x0) [ 392.208254][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.239095][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 392.284363][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 392.337541][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 392.379212][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 392.648671][ T9] usb 3-1: string descriptor 0 read error: -22 [ 392.655118][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.680114][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.998367][ T9] cdc_ncm 3-1:1.0: bind() failure [ 393.035720][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 393.049963][ T9] cdc_ncm 3-1:1.1: bind() failure [ 393.066580][ T9] usb 3-1: USB disconnect, device number 9 08:20:14 executing program 4: socketpair(0x28, 0x0, 0x8, &(0x7f0000000400)) 08:20:15 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 08:20:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'macvlan0\x00', 0x1}) 08:20:15 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 08:20:15 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @dccp={{0xb, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0x2}, {0x0, 0xd, "930f8ed80afc780b953d29"}, {0x0, 0x2}]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e45ac6", 0x0, "f5a13c"}}}}}}, 0x0) 08:20:15 executing program 4: socketpair(0x11, 0x3, 0x2, &(0x7f0000000040)) 08:20:15 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x9}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 08:20:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 08:20:15 executing program 1: syz_clone(0x46100000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 08:20:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000004c00)) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="f5") 08:20:15 executing program 0: syz_usb_connect$uac1(0x0, 0x90, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x0, 0x0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}, @extension_unit={0x7, 0x24, 0x8, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x7f, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x1, [{0x62, 0x0}]}) 08:20:15 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim={0xc}]}}}}}]}}, 0x0) [ 394.917933][ T5172] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 394.918097][ T5167] usb 4-1: new high-speed USB device number 8 using dummy_hcd 08:20:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x0, 0x2}, 0x48) 08:20:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x1, 0x2}], 0x10}}], 0x1, 0x0) 08:20:16 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000066c0), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) [ 395.148366][ T5201] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 395.298155][ T5172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.308675][ T5172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.319334][ T5172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 395.331888][ T5167] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.345622][ T5167] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.363706][ T5167] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.366470][ T5172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.374065][ T5167] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 395.390573][ T5172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 395.395616][ T5167] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.412883][ T5167] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 395.424305][ T5201] usb 6-1: Using ep0 maxpacket: 8 [ 395.558607][ T5201] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.573184][ T5201] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.583614][ T5201] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.594013][ T5201] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 395.607638][ T5201] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.618037][ T5167] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.627243][ T5167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.640903][ T5172] usb 3-1: string descriptor 0 read error: -22 [ 395.644438][ T5201] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 395.652915][ T5172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.657726][ T5167] usb 4-1: Product: syz [ 395.671411][ T5167] usb 4-1: Manufacturer: syz [ 395.676189][ T5167] usb 4-1: SerialNumber: syz [ 395.679680][ T5172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.848164][ T5201] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.861406][ T5201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.871153][ T5201] usb 6-1: Product: syz [ 395.875450][ T5201] usb 6-1: Manufacturer: syz [ 395.888526][ T5201] usb 6-1: SerialNumber: syz [ 395.979723][ T5167] cdc_ncm 4-1:1.0: bind() failure [ 396.012970][ T5167] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 396.018304][ T5172] cdc_ncm 3-1:1.0: bind() failure [ 396.031503][ T5167] cdc_ncm 4-1:1.1: bind() failure [ 396.046027][ T5172] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 396.057017][ T5167] usb 4-1: USB disconnect, device number 8 [ 396.064600][ T5172] cdc_ncm 3-1:1.1: bind() failure [ 396.077116][ T5172] usb 3-1: USB disconnect, device number 10 [ 396.208403][ T5201] cdc_ncm 6-1:1.0: bind() failure [ 396.230893][ T5201] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 396.249447][ T5201] cdc_ncm 6-1:1.1: bind() failure [ 396.275407][ T5201] usb 6-1: USB disconnect, device number 7 08:20:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5450, 0x0) 08:20:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 08:20:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1c16, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 08:20:17 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x9}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 08:20:17 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029184f7ff0004000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 08:20:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$unix(r0, &(0x7f00000010c0)=@abs, &(0x7f0000001140)=0x6e) 08:20:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c) [ 397.077962][ T4851] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 397.099569][ T5172] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 397.348043][ T4851] usb 2-1: Using ep0 maxpacket: 32 [ 397.468755][ T4851] usb 2-1: config index 0 descriptor too short (expected 33937, got 27) [ 397.479183][ T4851] usb 2-1: config 255 has too many interfaces: 247, using maximum allowed: 32 [ 397.488455][ T4851] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 247 [ 397.495688][ T5172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.497720][ T4851] usb 2-1: config 255 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 397.513096][ T5172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 397.529339][ T5172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 397.540683][ T5172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 397.551004][ T5172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 397.679760][ T4851] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 397.692396][ T4851] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 397.702194][ T4851] usb 2-1: Product: syz [ 397.706376][ T4851] usb 2-1: Manufacturer: syz [ 397.711375][ T4851] usb 2-1: SerialNumber: syz [ 397.769738][ T4851] ldusb 2-1:255.0: Interrupt out endpoint not found (using control endpoint instead) [ 397.796765][ T4851] ldusb 2-1:255.0: LD USB Device #0 now attached to major 180 minor 0 08:20:19 executing program 5: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x5450, 0x0) 08:20:19 executing program 4: pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, 0x0, 0x0) 08:20:19 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @random="b00c6814e20f", @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "b38b22f2a6f92bbebbb70a84b0b249b3ce5dd5c55f1c7e76012e247f7a9e358402a8f657c060e9a858c862cd850c99a43e170a518d55ad9d85b5c0f4089c3470"}}}}, 0x0) 08:20:19 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002240), 0x42641, 0x0) read$FUSE(r0, 0x0, 0x0) [ 397.828846][ T5172] usb 3-1: string descriptor 0 read error: -22 [ 397.835276][ T5172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.844789][ T5172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:20:19 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000080)={@dev, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "da7bbc", 0x44, 0x2f, 0x0, @empty, @private1}}}}, 0x0) 08:20:19 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, 0x0) 08:20:19 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @ipv6=@tipc_packet={0x0, 0x6, "d0bd8c", 0x20, 0x6, 0x0, @dev, @dev, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}}, 0x0) 08:20:19 executing program 4: setuid(0xee00) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) [ 398.209714][ T5172] cdc_ncm 3-1:1.0: bind() failure [ 398.239573][ T5172] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 398.246709][ T5172] cdc_ncm 3-1:1.1: bind() failure [ 398.275441][ T5172] usb 3-1: USB disconnect, device number 11 [ 398.458180][ T4851] usb 4-1: new high-speed USB device number 9 using dummy_hcd 08:20:19 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x801c581f, 0x0) [ 398.707892][ T4851] usb 4-1: Using ep0 maxpacket: 32 [ 398.828678][ T4851] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.842608][ T4851] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.853853][ T4851] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.864679][ T4851] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 398.874621][ T4851] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 399.048030][ T4851] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 399.057398][ T4851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.066050][ T4851] usb 4-1: Product: syz [ 399.072199][ T4851] usb 4-1: Manufacturer: syz [ 399.076936][ T4851] usb 4-1: SerialNumber: syz [ 399.129403][ T4851] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 399.342100][ T4851] usb 4-1: USB disconnect, device number 9 08:20:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5451, 0x0) 08:20:20 executing program 4: syz_emit_ethernet(0x16, &(0x7f0000000080)={@random="5b4f10a68f4d", @dev, @void, {@llc={0x4, {@snap={0xaa, 0x0, "f9", "3d6fb2"}}}}}, 0x0) 08:20:20 executing program 5: syz_usb_connect$cdc_ncm(0x3, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x0, 0xc0, 0x69, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "0e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x6, 0x191, 0x8}, {0x6, 0x24, 0x1a, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x0, 0xfff}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x2, 0xf8, 0x5}, @mdlm={0x15, 0x24, 0x12, 0xfff7}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x4e, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x8, 0xed, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x80, 0x5, 0xe0, 0x10}, 0x34, &(0x7f0000000100)={0x5, 0xf, 0x34, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x8, 0x5, 0x8, 0x25}, @ssp_cap={0x24, 0x10, 0xa, 0x1f, 0x6, 0xe1, 0xf000, 0x2, [0xff07, 0xffc00f, 0x0, 0x30, 0x3fc0, 0x3f0f]}]}, 0x9, [{0xf, &(0x7f0000000140)=@string={0x50, 0x3, "fa811124a918ae7c3505290dc4eb571745020ed8f66b354d1ee19090779453323b5ea2bc8ed7c494bfd8a2a23e37bf205ba2cf1e16e1f1c3af72d0581b8f91e1ae112d47cc9e49d28d289bcf6fe4"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x459}}, {0x86, &(0x7f0000000900)=@string={0x86, 0x3, "66dbec37d312ee1ae7032d849cd2f2a1668901297b4ee2d203128d6621ff2da1475577e57e172b8b1f360f0b1159ec01cfa2d8b86e06847a553dc29ab456be81f09dcc52c614afc5968c23446255422d7b21baffd594b966f9e73c1c08c5709e7f9b62e394da96bdb8f2954a98b736197fe4b57fd1016c0e7131132d0e9b9996eccb07e8"}}, {0x85, &(0x7f0000000740)=ANY=[@ANYBLOB="85039a44003f1bac967e77ca2c9da60e291120979acfeb2592dc069bb2d2a6182a13916384d1d0aa24495f4e11e1edaa63c5dff708b046124f594db09a8dd20ba2d8bbaab420aa9403aa7ff56ee34fbfe1a78d9e872bc4147a2b95f9db0100d94d384d59b00f06001727c86692d0a213bee2896e181abac61f6c4f5f7286f45e44ec0ad62454b6b1b484811025de8b50898c2bf6c768deb60cc91f5b7bceec9d8e7bf3f02a730d11caf4cba4a9cc5f420da837286650fbe87782b0c7"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1401}}, {0xa3, &(0x7f00000003c0)=@string={0xa3, 0x3, "a6ee225fcccfe96b7df0206f84111d8c14efaa923dcaf299558cbd9a257d1580ef1be6f7ada323d00cb2b9ee74174d0f9d7a8c32625722fcefd081b9eb9b6532369a0f40601a6ddeb9bbe82c48688351577f2324a1eb833f05e8bed412c0b5c6c1ed4ac1f50e23bedce1074f2b5e833904053dc00fbdefde844675bf3bd91b7acafddc2eb8ad26ed406444d084407f161d507fb81b233f7ac8f1129f888539bd51"}}, {0xf5, &(0x7f0000000480)=@string={0xf5, 0x3, "512b6e025cafe65058d99f05ec1917567d536e186f875b352f5fde5f9e4b92da0de6ebb830f8a7c23b6d45747a71819f304116b676bdbce620ee13fa527519ca13fa76a3d001487c4bba59edb002083010480c5f9f102178abba7ef6ca33da5848697442045a588c4d7a393666b7b3fe0a470d3a7ef73419d0f62fb62ee2515e26946974a39f8ce82c8751473676898e5135fe547e573747a575ab6de970a6aa60e6dc816a9dc59967b914c89980117cf9928f589f827148a89ffdeefd9beece88294e2efade6bac8fa1eb53ca515da7e1c9d606f499b2af2f53e3294f9c0f209fdc88e70b54b6448a618d1a572adf533af9f9"}}, {0x21, &(0x7f0000000580)=@string={0x21, 0x3, "6129aa21fbfead89078f39a9989f3e10b0fdd1cb838a2ec538e804bc3baa08"}}]}) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget$private(0x0, 0x6000, 0x0, &(0x7f0000ff9000/0x6000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000680)=""/164) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000280)=""/76) r2 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000800)=""/214) 08:20:20 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x9}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 08:20:20 executing program 0: syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @link_local, @void, {@mpls_mc={0x4305, {[], @ipv6=@tipc_packet={0x0, 0x6, "d0bd8c", 0x20, 0x6, 0x0, @dev, @dev, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}}, 0x0) [ 399.709166][ T4851] usb 2-1: USB disconnect, device number 8 08:20:21 executing program 0: listen(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c100000000100000e8000", 0x58}], 0x1) [ 399.780567][ T4851] ldusb 2-1:255.0: LD USB Device #0 now disconnected 08:20:21 executing program 4: socketpair(0xa, 0x2, 0x0, &(0x7f00000000c0)) 08:20:21 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @link_local, @void, {@mpls_mc={0x8035, {[], @ipv6=@tipc_packet={0x0, 0x6, "d0bd8c", 0x20, 0x6, 0x0, @dev, @dev, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}}, 0x0) 08:20:21 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @link_local, @void, {@mpls_mc={0x806, {[], @ipv6=@tipc_packet={0x0, 0x6, "d0bd8c", 0x20, 0x6, 0x0, @dev, @dev, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}}, 0x0) 08:20:21 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa}]}}) 08:20:21 executing program 1: syz_emit_ethernet(0x15, &(0x7f0000000080)={@random="43d897db4e45", @local, @val={@void}, {@x25}}, 0x0) 08:20:21 executing program 3: io_uring_setup(0x50ce, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x2}) [ 400.049210][ T5172] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 400.057569][ T5170] usb 6-1: new high-speed USB device number 8 using dummy_hcd 08:20:21 executing program 4: syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @link_local, @void, {@mpls_mc={0x806, {[], @ipv6=@tipc_packet={0x0, 0x6, "d0bd8c", 0x20, 0x6, 0x0, @dev, @dev, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}}, 0x0) 08:20:21 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa}]}, 0x1, [{0x2, &(0x7f00000001c0)=@string={0x2}}]}) [ 400.528399][ T5172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.538848][ T5172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 400.557964][ T5172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 400.569608][ T5172] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 400.579390][ T5172] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 400.608138][ T5170] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 400.618108][ T5201] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 400.625642][ T5170] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 400.635939][ T5170] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 400.818112][ T5170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.827290][ T5170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.835537][ T5170] usb 6-1: Product: љ [ 400.839837][ T5170] usb 6-1: Manufacturer: Ж [ 400.844423][ T5170] usb 6-1: SerialNumber: 㟬ዓ᫮ϧ萭튜ꇲ襦⤁乻틢ሃ暍Ａꄭ啇᝾謫㘟ଏ夑Ǭꋏ룘ٮ窄㵕髂嚴膾鷰勌ᓆ얯貖䐣啢ⵂⅻﾺ铕暹᰼씈鹰魿붖䪕래ᤶ羵Ǒ๬ㅱⴓ鬎隙쯬 [ 400.857991][ T5201] usb 2-1: Using ep0 maxpacket: 32 [ 400.878255][ T5172] usb 3-1: string descriptor 0 read error: -22 [ 400.884731][ T5172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.896689][ T5172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.088225][ T5201] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 401.138245][ T5201] usb 2-1: language id specifier not provided by device, defaulting to English [ 401.158895][ T5170] cdc_ncm 6-1:1.0: bind() failure [ 401.171631][ T5170] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 401.178618][ T5170] cdc_ncm 6-1:1.1: bind() failure [ 401.189605][ T5170] usb 6-1: USB disconnect, device number 8 [ 401.231227][ T5172] cdc_ncm 3-1:1.0: bind() failure [ 401.250726][ T5172] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 401.258145][ T5172] cdc_ncm 3-1:1.1: bind() failure [ 401.270727][ T5201] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.273043][ T5172] usb 3-1: USB disconnect, device number 12 [ 401.287615][ T5201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.296651][ T5201] usb 2-1: Product: syz [ 401.311060][ T5201] usb 2-1: Manufacturer: syz [ 401.315914][ T5201] usb 2-1: SerialNumber: syz [ 401.370981][ T5201] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 401.579845][ T5201] usb 2-1: USB disconnect, device number 9 08:20:22 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) 08:20:22 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffff7f}}, {[{}]}}}]}}]}}, 0x0) 08:20:22 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x44, &(0x7f0000000440)=@string={0x44, 0x3, "e606280c2e97a766a973d07f40a5d7ea6ddefc63ac9374913885ea8315700ed5bbb69af242be2e6583e1fbea1cd3ee2aca84281cf8ceb9ce1b7aeae3f6c6c28b9fd8"}}]}) 08:20:23 executing program 2: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000001440)=[{}, {&(0x7f0000000040)=""/182, 0xb6}, {&(0x7f0000000100)=""/135, 0xfffffe74}, {&(0x7f00000001c0)=""/4080, 0x1000}, {&(0x7f00000011c0)=""/168, 0xffffff7c}, {&(0x7f0000001280)=""/245, 0xf5}, {&(0x7f00000016c0)=""/197, 0xbd}, {&(0x7f0000002ac0)=""/4098, 0x1002}], 0x8, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/175, 0xaf}, {&(0x7f0000001580)=""/68, 0x44}, {&(0x7f0000001600)=""/71, 0x47}], 0x3, 0x0) 08:20:23 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) 08:20:23 executing program 2: setresuid(0xee00, 0x0, 0xffffffffffffffff) 08:20:23 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5452, 0x0) [ 401.990697][ T5172] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 402.100565][ T5170] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 402.139377][ T5201] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 402.258016][ T5172] usb 4-1: Using ep0 maxpacket: 32 [ 402.389723][ T5170] usb 5-1: Using ep0 maxpacket: 32 [ 402.397970][ T5201] usb 6-1: Using ep0 maxpacket: 32 [ 402.438067][ T5172] usb 4-1: unable to get BOS descriptor or descriptor too short [ 402.518082][ T5201] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 402.538667][ T5170] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.549765][ T5172] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 402.563104][ T5170] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.568363][ T5201] usb 6-1: language id specifier not provided by device, defaulting to English [ 402.573985][ T5170] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.599806][ T5170] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 402.610230][ T5170] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 402.708097][ T5201] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.722387][ T5201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.731014][ T5201] usb 6-1: Product: syz [ 402.735254][ T5201] usb 6-1: Manufacturer: ۦన霮暧玩翐ꕀ揼鎬酴蔸菪瀕픎뚻빂攮팜⫮蓊ᰨ컸캹稛웶诂 [ 402.748399][ T5172] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.752548][ T5201] usb 6-1: SerialNumber: syz [ 402.758786][ T5172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.772258][ T5172] usb 4-1: Product: syz [ 402.776804][ T5172] usb 4-1: Manufacturer: syz [ 402.782917][ T5172] usb 4-1: SerialNumber: syz [ 402.788064][ T5170] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.804601][ T5170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.815657][ T5170] usb 5-1: Product: syz [ 402.820037][ T5201] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 402.833690][ T5170] usb 5-1: Manufacturer: syz [ 402.838894][ T5170] usb 5-1: SerialNumber: syz [ 402.872624][ T5172] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 402.890342][ T5170] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 403.026356][ T5201] usb 6-1: USB disconnect, device number 9 [ 403.078965][ T4851] usb 4-1: USB disconnect, device number 10 08:20:24 executing program 0: setuid(0xee00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x2, &(0x7f0000000080)=@raw=[@btf_id], &(0x7f0000000140)='syzkaller\x00'}, 0x90) 08:20:24 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x40049409, 0x0) 08:20:24 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xc0189436, 0x0) [ 403.119759][ T5167] usb 5-1: USB disconnect, device number 8 08:20:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x81, 0x4, 0xab, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) 08:20:24 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @link_local, @void, {@mpls_mc={0x892f, {[], @ipv6=@tipc_packet={0x0, 0x6, "d0bd8c", 0x20, 0x6, 0x0, @dev, @dev, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}}, 0x0) 08:20:24 executing program 3: syz_emit_ethernet(0xc2, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @link_local, @void, {@mpls_mc={0x8848, {[], @ipv6=@tipc_packet={0x0, 0x6, "d0bd8c", 0x20, 0x6, 0x0, @dev, @dev, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}}, 0x0) 08:20:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x4b47, 0x0) 08:20:24 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}]}) 08:20:24 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', 0x440, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', 0x8002, 0x0) write$tun(r0, &(0x7f0000001240)={@val, @val, @x25}, 0x11) 08:20:24 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @link_local, @void, {@mpls_mc={0x8906, {[], @ipv6=@tipc_packet={0x0, 0x6, "d0bd8c", 0x20, 0x6, 0x0, @dev, @dev, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}}, 0x0) 08:20:24 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x44, &(0x7f0000000440)=@string={0x44, 0x3, "e606280c2e97a766a973d07f40a5d7ea6ddefc63ac9374913885ea8315700ed5bbb69af242be2e6583e1fbea1cd3ee2aca84281cf8ceb9ce1b7aeae3f6c6c28b9fd8"}}]}) 08:20:24 executing program 2: setrlimit(0x0, &(0x7f0000000500)) 08:20:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xa, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xf8}}, 0x0) 08:20:24 executing program 1: socketpair(0x8, 0x0, 0x0, &(0x7f0000000680)) 08:20:25 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 08:20:25 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 08:20:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}}, 0x0) 08:20:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x40049409, 0x0) [ 403.989463][ T5201] usb 6-1: new high-speed USB device number 10 using dummy_hcd 08:20:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x401c5820, 0x0) [ 404.267976][ T5201] usb 6-1: Using ep0 maxpacket: 32 [ 404.388068][ T5201] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 404.438196][ T5201] usb 6-1: language id specifier not provided by device, defaulting to English [ 404.558060][ T5201] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.567222][ T5201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.575719][ T5201] usb 6-1: Product: syz [ 404.580115][ T5201] usb 6-1: Manufacturer: ۦన霮暧玩翐ꕀ揼鎬酴蔸菪瀕픎뚻빂攮팜⫮蓊ᰨ컸캹稛웶诂 [ 404.593525][ T5201] usb 6-1: SerialNumber: syz [ 404.642907][ T5201] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 404.883411][ T5172] usb 6-1: USB disconnect, device number 10 08:20:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x81, 0x4, 0xab, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) 08:20:27 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mbim={0xc}, @mbim_extended={0x8}, @obex={0x5}, @call_mgmt={0x5}, @country_functional={0x6}]}}}]}}]}}, 0x0) 08:20:27 executing program 2: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2\x00', 0x1ff) 08:20:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005e9a9ed347ce167c04cefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5282db0bdc0774c5b60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313acf5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b55891f170849c8cd5e942c0652127e7f6baa0d3277f1c33d1a55953dda6b3ef332adb49e3537829be258ddee56c8ab709d7c3f9107ba11bf7f608bcfec730eb13c9104851e6e859cc0528ff072192c49b42f1a4156372d0ed5caad2be9cc1d7f47faaca0890f196025cfd3a2ecf86106bb069a75f5c730caf55c473039c46925bc82e0e578cc2a2ba6f8be4fea86a9bb18a5164ce8321f585d537cf10cdcc440dd2347b5e93be7686938fb8ba24460"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00128700631177fbac141416e000030a44079f03fe2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 08:20:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x801c581f, 0x0) 08:20:27 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x44, &(0x7f0000000440)=@string={0x44, 0x3, "e606280c2e97a766a973d07f40a5d7ea6ddefc63ac9374913885ea8315700ed5bbb69af242be2e6583e1fbea1cd3ee2aca84281cf8ceb9ce1b7aeae3f6c6c28b9fd8"}}]}) 08:20:28 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {r0, r1+60000000}}, 0x0) 08:20:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8941, 0x0) 08:20:28 executing program 3: timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0xb6e122a4a412283a}, 0x0) 08:20:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8906, 0x0) 08:20:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x0, 0x98192d99b9a66975}, 0x14}}, 0x0) 08:20:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x0, 0x0, 0xab, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) 08:20:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0189436, 0x0) [ 407.084731][ T5167] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 407.093046][ T5172] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 407.377975][ T5172] usb 5-1: Using ep0 maxpacket: 8 [ 407.389611][ T5167] usb 6-1: Using ep0 maxpacket: 32 [ 407.498430][ T5172] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 407.518947][ T5167] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 407.568111][ T5167] usb 6-1: language id specifier not provided by device, defaulting to English [ 407.688081][ T5167] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.697281][ T5167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.708381][ T5167] usb 6-1: Product: syz [ 407.719197][ T5167] usb 6-1: Manufacturer: ۦన霮暧玩翐ꕀ揼鎬酴蔸菪瀕픎뚻빂攮팜⫮蓊ᰨ컸캹稛웶诂 [ 407.734769][ T5167] usb 6-1: SerialNumber: syz [ 407.739025][ T5172] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.750044][ T5172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.758496][ T5172] usb 5-1: Product: syz [ 407.762688][ T5172] usb 5-1: Manufacturer: syz [ 407.767308][ T5172] usb 5-1: SerialNumber: syz [ 407.790774][ T5167] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 407.811051][ T5172] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 408.034752][ T5172] usb 5-1: USB disconnect, device number 9 [ 408.046926][ T5167] usb 6-1: USB disconnect, device number 11 08:20:29 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2\x00', 0x1ff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2b}, 0x14}}, 0x40) syz_open_dev$vcsu(0x0, 0x0, 0x28a501) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, 0x0, 0x24000000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 08:20:29 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3}}]}}}]}}]}}, 0x0) 08:20:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5421, 0x0) 08:20:29 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x124, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x112, 0x1, 0x1, 0x20, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x7f, {{0x9, 0x24, 0x6, 0x0, 0x0, "fd8796c2"}, {0x5, 0x24, 0x0, 0x59}, {0xd, 0x24, 0xf, 0x1, 0x376b, 0xfff8, 0x8001, 0x7f}, [@obex={0x5, 0x24, 0x15, 0x4}, @obex={0x5, 0x24, 0x15, 0xe82}, @mdlm_detail={0xb8, 0x24, 0x13, 0x5, "6f3c48184b2dad6fbf50ac00f137c400f562527edb55dfb7deadc78c5975a953f4d714288b5ce65e2d5e7dc207958d7ec25f6a20344b0656452c2b5a5e1defa02fe157a2d49de59b0849d9194a7de47d389292590f0587b91287f146f8c8e587b5c2af84206a4557137eed7738fffec1362bb2e80e3107cfb0eb6eed2ca6d4cd27cadf8e57db5933695d4722623549f48a9bae35bc2176401b3580cd1959f41266a5b098da8a9e95931813540de8c073541cbd85"}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x8, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9e, 0x5d, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xe2, 0xff, 0x3a}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x9e, 0x4}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x3f, 0x81, 0x3, 0x8, 0x1f}, 0x69, &(0x7f0000000280)={0x5, 0xf, 0x69, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xf, 0x7, 0xf309}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x8000, 0xf000, 0x0, [0xffc0, 0xffff, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x5, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "1120b95c651ee72682a8cf7de50b5d85"}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x8001, 0x0, 0xcc40, [0xf, 0x0, 0xff0030, 0x7fbf3f, 0x3f0f, 0x1feff00]}]}, 0x9, [{0xd9, &(0x7f0000000300)=@string={0xd9, 0x3, "217a9813868834315ec46cba5fe8385caed657de3df05635923377c76e103d7f8d8103d7e6974d4a52cb506b4ffc33dd3e0c93faf654998319df5520b42c04ecf5962fed80f0999b4b4b35b066cf569e6adfd9203903072af4705af6653b8e38398a3a6fa11afafc8dc09f68500cdc354db165ef505effa8443873a95f435b60e41efc2a997c5389ac5b03fc2f4251e3419fef6d72c3601c00ca17e555a3a2bc78164246e11da7e6ede12745ac3e01dbdb38da2c2dbfba15f03186eb3c42dbaa5f7781ad04c6fe0f8395e5e307700d2f768d3d522f2c4b"}}, {0xa4, &(0x7f0000000400)=@string={0xa4, 0x3, "fab7085caa65edaee73d362e815d9f1c9e83dd2b2baf05b56184f06d5d716b32cb3384ee979e6109b3687ac40a540dfc049d074f39c9e492baadd87effca51d3c8ab44131d1cbd647cb57cac1502cbb54b1e77bad22706f5c204a3ef0a617c10eaf787b917e759ae4b7f7f7f493b858f159c78fd8cfc59abf3d110a73b771a109495698e5000e69c3dda6be12a780691cbbb8aa1f496eea115570c915510b0f8516d"}}, {0x25, &(0x7f00000004c0)=@string={0x25, 0x3, "9ba8c8510f77ea9b126ec5586c8113e10a12934f8b74aae6489947f6e74e035ee415eb"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0xf2, &(0x7f0000000600)=@string={0xf2, 0x3, "84fcf0aaf7f16fefaef186baf60737ba42156de61f99ca0538a8eba550d04006c9a45999a0f688c9b34d6bdf193dd3c66b6cb2c3013de19fe74f56e7dec3bd04c40686fba8941012e651eb1448ae72b88567a44ae3cb99b65883eaf349877c92862fe8495e08c0b21d1a6f90140783dac03f5c642e83a2c49afe25d005a3003237d7803eadcfdc6555ae70213c519546133e297483883630b16374ce43088d311070791f07946c317c064106ffe4d46f7ccec63d2757c4da2e30a1745df0ce00dbf9092e7599c688aca557e320601c474da05c19350b969f1deb9390caf03323f25c5876aa11f89283e826bff61cf8ff"}}, {0xe4, &(0x7f0000000700)=@string={0xe4, 0x3, "e338054feee5392e7e71837459b7c0bf71042bff191dec97f94367de6a61323d5c5ce1bf4dae99cbf26ab097fe9e7551041cc363818b31980154cc6f491a889a388f63fa8c136a6baa3023286a0d292ad94483c2bc8e3544c805086a42c5e2613383c03ed2a166db46cf9aaffb611203c164789e7d57936e882e6a8302945f5fd79c5bf0de69487af645013ae31de9c151dc6ae0fbc87f82702241841063032f4363306155c20be18d6e1cc8cb01d6c7d58c3b9faa756dc8db3f0c2a3960a943039a4f1a0afb050c57d3ac80b490ebe2fa8bd47a57da45a340123bed7896cc30356b"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000a00)={0x14, &(0x7f00000008c0)={0x0, 0x9, 0xea, {0xea, 0x1, "1e9c34ce155906d09bf0e855cf5504c9a32b249ed906b08e69a69e859e7f76dfbad010b234103c3ffefbac57ae121a830bab73fc48f194d55e458aabd9052433cfc49834de603008047fb2575c16af13eef63618e09a9cc356971ee77f4e7a4209c62181f8b94e4cb0f0f5f3e73743a6b1c7c7d84357648c673370d953a3726f30585b5de27e8addc46847329c8b69b04669fce43ec83533285c2eff5560650e3e494862b8ca0c6da795e0ebfe337b522f52b05d452d26058b965eacc3547617b241d754900027a2306f4bb9926e4394239568b75057d2935a21aa084cc44c6d357a8b1914dbae6d"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x20, 0x6, 0x27, "7a0011d0b1799bbeed0af5775e52f77b3bcca9140879936b78d7a28b1640150ff0ea3c8781cfe5"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x61}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r1) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f00000000c0)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)) 08:20:29 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x44, &(0x7f0000000440)=@string={0x44, 0x3, "e606280c2e97a766a973d07f40a5d7ea6ddefc63ac9374913885ea8315700ed5bbb69af242be2e6583e1fbea1cd3ee2aca84281cf8ceb9ce1b7aeae3f6c6c28b9fd8"}}]}) 08:20:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x24}}, 0x0) 08:20:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8903, 0x0) 08:20:29 executing program 4: r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 08:20:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5460, 0x0) 08:20:30 executing program 1: clock_gettime(0x0, &(0x7f0000000680)) 08:20:30 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x82402) 08:20:30 executing program 0: setrlimit(0x3, &(0x7f0000000500)) [ 408.888242][ T5168] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 408.928084][ T5172] usb 4-1: new high-speed USB device number 11 using dummy_hcd 08:20:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8982, 0x0) [ 409.037895][ T5167] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 409.117932][ T5201] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 409.140201][ T5168] usb 3-1: Using ep0 maxpacket: 8 [ 409.208004][ T5172] usb 4-1: Using ep0 maxpacket: 32 [ 409.268341][ T5168] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 409.278444][ T5168] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 409.289114][ T5167] usb 6-1: Using ep0 maxpacket: 32 [ 409.294696][ T5168] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 409.304596][ T5168] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 409.348129][ T5172] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 158, changing to 11 [ 409.361165][ T5172] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 409.368085][ T5201] usb 5-1: Using ep0 maxpacket: 32 [ 409.371615][ T5172] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 409.418798][ T5167] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 409.470256][ T5168] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.479779][ T5167] usb 6-1: language id specifier not provided by device, defaulting to English [ 409.493046][ T5168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.501802][ T5201] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.513703][ T5168] usb 3-1: Product: syz [ 409.518092][ T5168] usb 3-1: Manufacturer: syz [ 409.522808][ T5201] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 409.532905][ T5168] usb 3-1: SerialNumber: syz [ 409.540047][ T5201] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 409.560528][ T5172] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.574269][ T5172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.583186][ T5172] usb 4-1: Product: ꢛ凈眏鯪渒壅腬ሊ侓璋饈仧布ᗤ [ 409.590819][ T5168] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 409.592315][ T5172] usb 4-1: Manufacturer: 럺專斪껭㷧⸶嶁Ჟ莞⯝꼫딅葡淰煝㉫㏋麗ॡ梳쑺吊ﰍ鴄伇줹鋤궺绘쫿퍑ꯈፄᰝ撽땼걼ȕ뗋ṋ멷⟒ӂ愊ၼ릇깙罋罿㭉辅鰕ﵸﲌꭙ퇳꜐眻ယ閔蹩P鳦砪鄆믋ꆊ雴ꇮ圕鄌ၕ浑 [ 409.625691][ T5172] usb 4-1: SerialNumber: ࠌ [ 409.641466][ T5167] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.666384][ T5167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.674783][T10969] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 409.674801][ T5167] usb 6-1: Product: syz [ 409.684093][T10969] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 409.697737][ T5167] usb 6-1: Manufacturer: ۦన霮暧玩翐ꕀ揼鎬酴蔸菪瀕픎뚻빂攮팜⫮蓊ᰨ컸캹稛웶诂 [ 409.713816][ T5167] usb 6-1: SerialNumber: syz [ 409.718795][ T5201] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.729864][ T5201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.740981][ T5201] usb 5-1: Product: syz [ 409.752121][ T5201] usb 5-1: Manufacturer: syz [ 409.757391][ T5201] usb 5-1: SerialNumber: syz [ 409.779636][ T5167] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 409.790947][T10980] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 409.799607][T10980] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 409.833247][ T5164] usb 3-1: USB disconnect, device number 13 [ 410.024043][T10980] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 410.033640][T10980] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 410.038998][ T5167] usb 6-1: USB disconnect, device number 12 [ 410.188151][ T5172] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 410.200102][ T5172] usb 4-1: USB disconnect, device number 11 08:20:31 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) 08:20:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8901, 0x0) [ 410.308492][ T5201] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 410.320051][ T5201] usb 5-1: USB disconnect, device number 10 08:20:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x40086602, 0x0) 08:20:31 executing program 1: socket(0x2, 0x2, 0x3) 08:20:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 08:20:31 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, 0x0, @a}, 0x48, 0xfffffffffffffffe) 08:20:32 executing program 4: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2\x00', 0x1ff) syz_open_dev$vcsu(&(0x7f0000000480), 0xffffffffffffff7d, 0x28a501) openat$procfs(0xffffffffffffff9c, &(0x7f0000006bc0)='/proc/timer_list\x00', 0x0, 0x0) 08:20:32 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x8001}, [@mdlm_detail={0x4}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x9e}}}}}]}}]}}, 0x0) 08:20:32 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x7a, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mbim={0xc}, @mbim_extended={0x8}, @obex={0x5}, @call_mgmt={0x5}, @country_functional={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) 08:20:32 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, 0x0) 08:20:32 executing program 0: process_vm_readv(0x0, &(0x7f0000004b80)=[{&(0x7f0000002a00)=""/163, 0xa3}, {0x0}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x3, &(0x7f0000004fc0)=[{&(0x7f0000004c00)=""/95, 0xffffffffffffffd8}, {&(0x7f0000004c80)=""/180, 0xb4}, {&(0x7f0000004d40)=""/4, 0x4}], 0x209, 0x0) 08:20:32 executing program 1: getgroups(0x1, &(0x7f00000005c0)=[0xee00]) 08:20:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8902, 0x0) 08:20:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) 08:20:32 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x701102, 0x0) write$rfkill(r0, 0x0, 0x0) 08:20:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 08:20:32 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003080)=0xffffffffffffffff, 0x4) 08:20:32 executing program 1: syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x200) [ 411.197963][ T921] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 411.225659][ T5201] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 411.237955][ T5172] usb 3-1: new high-speed USB device number 14 using dummy_hcd 08:20:32 executing program 4: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 411.458294][ T921] usb 6-1: Using ep0 maxpacket: 32 [ 411.488058][ T5201] usb 4-1: Using ep0 maxpacket: 8 [ 411.508333][ T5172] usb 3-1: Using ep0 maxpacket: 32 [ 411.578356][ T921] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 411.610196][ T5201] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 411.648798][ T5172] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 411.659088][ T5172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 411.669052][ T5172] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 411.681768][ T5172] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.758224][ T921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.767354][ T921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.780089][ T5201] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.791478][ T921] usb 6-1: Product: syz [ 411.795664][ T921] usb 6-1: Manufacturer: syz [ 411.803068][ T5201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.817658][ T921] usb 6-1: SerialNumber: syz [ 411.822543][ T5201] usb 4-1: Product: syz [ 411.826734][ T5201] usb 4-1: Manufacturer: syz [ 411.845303][ T5201] usb 4-1: SerialNumber: syz [ 411.868735][T11008] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 411.879070][ T921] usb 6-1: bad CDC descriptors [ 411.888084][ T5172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.897168][ T5172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.907041][ T5172] usb 3-1: Product: syz [ 411.914491][ T5172] usb 3-1: Manufacturer: syz [ 411.919440][ T5172] usb 3-1: SerialNumber: syz [ 411.948433][T11007] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 411.972867][ T5172] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 412.088258][ T921] usb 6-1: USB disconnect, device number 13 [ 412.125129][ T5201] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 412.142928][ T5201] usb 4-1: USB disconnect, device number 12 [ 412.178863][ T5168] usb 3-1: USB disconnect, device number 14 08:20:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xfffffc92, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 08:20:33 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000006bc0)='/proc/timer_list\x00', 0x0, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) 08:20:33 executing program 4: syz_open_dev$vcsu(&(0x7f00000000c0), 0xffffffffffffffff, 0x40240) 08:20:33 executing program 5: timer_create(0xfffffffe, 0x0, &(0x7f0000000040)) 08:20:33 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xc2040, 0x0) 08:20:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x81, 0x4, 0xab}, 0x48) 08:20:33 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}]}}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000300)=@string={0x2}}, {0x8c, &(0x7f0000000400)=@string={0x8c, 0x3, "fab7085caa65edaee73d362e815d9f1c9e83dd2b2baf05b56184f06d5d716b32cb3384ee979e6109b3687ac40a540dfc049d074f39c9e492baadd87effca51d3c8ab44131d1cbd647cb57cac1502cbb54b1e77bad22706f5c204a3ef0a617c10eaf787b917e759ae4b7f7f7f493b858f159c78fd8cfc59abf3d110a73b771a109495698e5000e69c3dda"}}]}) 08:20:33 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, 0x0) 08:20:34 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) 08:20:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc020660b, 0x0) 08:20:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8983, 0x0) 08:20:34 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) 08:20:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5421, 0x0) 08:20:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8912, 0x0) 08:20:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x48) [ 413.068148][ T5172] usb 4-1: new high-speed USB device number 13 using dummy_hcd 08:20:34 executing program 1: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)) 08:20:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080)) [ 413.158091][ T1146] usb 3-1: new high-speed USB device number 15 using dummy_hcd 08:20:34 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x7a, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9}, [@mbim={0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x1}, @obex={0x5}, @call_mgmt={0x5}, @country_functional={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) [ 413.328209][ T5172] usb 4-1: Using ep0 maxpacket: 32 [ 413.418403][ T1146] usb 3-1: Using ep0 maxpacket: 32 [ 413.458605][ T5172] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 413.518351][ T5172] usb 4-1: language id specifier not provided by device, defaulting to English [ 413.558350][ T1146] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 413.568686][ T1146] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.580972][ T1146] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 413.591411][ T1146] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.608093][ T921] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 413.658163][ T5172] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.667278][ T5172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.675552][ T5172] usb 4-1: Product: syz [ 413.683243][ T5172] usb 4-1: Manufacturer: 럺專斪껭㷧⸶嶁Ჟ莞⯝꼫딅葡淰煝㉫㏋麗ॡ梳쑺吊ﰍ鴄伇줹鋤궺绘쫿퍑ꯈፄᰝ撽땼걼ȕ뗋ṋ멷⟒ӂ愊ၼ릇깙罋罿㭉辅鰕ﵸﲌꭙ퇳꜐眻ယ閔蹩P鳦 [ 413.707375][ T5172] usb 4-1: SerialNumber: syz [ 413.768309][ T1146] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.778867][ T5172] usb 4-1: bad CDC descriptors [ 413.786311][ T1146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.795733][ T1146] usb 3-1: Product: syz [ 413.800171][ T1146] usb 3-1: Manufacturer: syz [ 413.804805][ T1146] usb 3-1: SerialNumber: syz [ 413.838870][T11043] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 413.847929][ T921] usb 5-1: Using ep0 maxpacket: 8 [ 413.871962][ T1146] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 413.968501][ T921] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 413.985417][ T1146] usb 4-1: USB disconnect, device number 13 [ 414.106256][ T5172] usb 3-1: USB disconnect, device number 15 [ 414.138347][ T921] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.147633][ T921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.157102][ T921] usb 5-1: Product: syz [ 414.164579][ T921] usb 5-1: Manufacturer: syz [ 414.170987][ T921] usb 5-1: SerialNumber: syz [ 414.188425][T11064] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 08:20:35 executing program 3: timer_create(0x3, 0x0, &(0x7f00000006c0)) timer_settime(0x0, 0x0, &(0x7f0000000740)={{}, {0x0, 0x3938700}}, 0x0) [ 414.430896][ T921] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 414.451164][ T921] usb 5-1: USB disconnect, device number 11 08:20:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:20:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x81, 0x4, 0xab, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 08:20:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x80108907, 0x0) 08:20:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) 08:20:35 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, 0x0) 08:20:35 executing program 5: sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0xfbe54e1af3f6202d) 08:20:35 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) timer_delete(0x0) 08:20:35 executing program 1: r0 = gettid() process_vm_readv(r0, &(0x7f0000002540)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1, &(0x7f0000003a80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002a80)=""/4096, 0x1000}], 0x9, 0x0) 08:20:36 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 08:20:36 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1ff, 0x0) read$rfkill(r0, &(0x7f0000000080), 0x8) 08:20:36 executing program 4: capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000240)) 08:20:36 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}]}}]}}, 0x0) 08:20:36 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x66243) 08:20:36 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000007ac0), 0x101203, 0x0) 08:20:36 executing program 5: r0 = getpid() capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0) 08:20:36 executing program 0: timer_create(0x3, 0x0, &(0x7f00000006c0)) timer_settime(0x0, 0x0, &(0x7f0000000740)={{}, {0x0, 0x3938700}}, &(0x7f0000000780)) [ 415.130735][ T5201] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 415.144031][T11093] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 415.327944][ T5167] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 415.407983][ T5201] usb 3-1: Using ep0 maxpacket: 32 [ 415.528187][ T5201] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 415.545234][ T5201] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 415.555061][ T5201] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 415.569512][ T5201] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.609738][ T5167] usb 2-1: Using ep0 maxpacket: 32 [ 415.738435][ T5167] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 415.768121][ T5201] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.777195][ T5201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.785554][ T5201] usb 3-1: Product: syz [ 415.789972][ T5201] usb 3-1: Manufacturer: syz [ 415.794972][ T5201] usb 3-1: SerialNumber: syz [ 415.831757][T11076] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 415.862175][ T5201] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 415.968477][ T5167] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.977975][ T5167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.986343][ T5167] usb 2-1: Product: syz [ 415.990745][ T5167] usb 2-1: Manufacturer: syz [ 415.995637][ T5167] usb 2-1: SerialNumber: syz [ 416.018240][T11088] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 416.025791][T11088] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 416.064710][ T5167] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 416.120902][ T5167] usb 3-1: USB disconnect, device number 16 [ 416.264123][ T5201] usb 2-1: USB disconnect, device number 10 08:20:37 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40}}}}}]}}]}}, 0x0) 08:20:37 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 08:20:37 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 08:20:37 executing program 3: fsopen(&(0x7f0000001a00)='cgroup\x00', 0x0) 08:20:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x89a0, 0x0) 08:20:37 executing program 4: syz_open_dev$vcsn(&(0x7f0000000040), 0x1ff, 0x6002) 08:20:37 executing program 0: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{}, {}], 0x2, &(0x7f00000000c0)={0x0, r0+60000000}, &(0x7f0000000100)={[0xffff]}, 0x8) 08:20:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}, 0x90) 08:20:38 executing program 3: stat(&(0x7f0000003d80)='./file0\x00', 0x0) 08:20:38 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) 08:20:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000002300)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xe94, 0x8, 0x0, 0x1, [{0x3b4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a66fc2e6466ab354196dba5bfcb9a5e97fd4e8e72032ff409d10ae111b3294ec"}, @WGPEER_A_ALLOWEDIPS={0x384, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f0655407a66cead604ef2be1b6e5e789bfc71cce9046ea6656a516a964842354"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fef5849c96eab3f3f721da968e409c0c30bc704391be0c367a78407999e3c4b3"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x5c0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x488, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b0ac77a8cf008fbe1eaa997a5bc2766cb33bc65185f3dfb6545c9ff92ee3cf60"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e363801513e47ee04a41553c4a8fe3b3b5576f0f3881a4ada3a615fc21a9f9d7"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}]}, {0x398, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 08:20:38 executing program 3: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x7) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0)) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) r2 = socket$inet6(0xa, 0x80005, 0x8) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000100)={{r0}, 0x0, 0x18, @unused=[0xffffffffffffffff, 0x98, 0x7fffffff, 0xb1], @devid}) pipe2$watch_queue(&(0x7f0000001100), 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000003980)={&(0x7f00000022c0), 0xc, &(0x7f0000003940)={&(0x7f0000002300)={0xec8, 0x0, 0x101, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xe98, 0x8, 0x0, 0x1, [{0x3b4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a66fc2e6466ab354196dba5bfcb9a5e97fd4e8e72032ff409d10ae111b3294ec"}, @WGPEER_A_ALLOWEDIPS={0x384, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f0655407a66cead604ef2be1b6e5e789bfc71cce9046ea6656a516a964842354"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9b8d}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fef5849c96eab3f3f721da968e409c0c30bc704391be0c367a78407999e3c4b3"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x5c0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x488, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b0ac77a8cf008fbe1eaa997a5bc2766cb33bc65185f3dfb6545c9ff92ee3cf60"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1ab, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e363801513e47ee04a41553c4a8fe3b3b5576f0f3881a4ada3a615fc21a9f9d7"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7f}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x39c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x4}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}]}]}]}]}, 0xec8}, 0x1, 0x0, 0x0, 0x4004494}, 0x40) [ 417.012688][ T5172] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 417.078085][ T5164] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 417.329793][ T5172] usb 6-1: Using ep0 maxpacket: 8 [ 417.338199][ T5164] usb 3-1: Using ep0 maxpacket: 32 [ 417.468235][ T5172] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 417.481650][ T5164] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 417.491658][ T5164] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 417.504974][ T5164] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 417.514753][ T5164] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.668348][ T5172] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.677501][ T5172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.685745][ T5172] usb 6-1: Product: syz [ 417.690238][ T5164] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.699571][ T5172] usb 6-1: Manufacturer: syz [ 417.704202][ T5172] usb 6-1: SerialNumber: syz [ 417.712984][ T5164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.725061][ T5164] usb 3-1: Product: syz [ 417.735160][ T5164] usb 3-1: Manufacturer: syz [ 417.739869][ T5164] usb 3-1: SerialNumber: syz [ 417.768552][T11108] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 417.770990][ T5172] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 417.789978][ T5164] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 417.978041][ T5164] usb 6-1: USB disconnect, device number 14 [ 418.031774][ T1146] usb 3-1: USB disconnect, device number 17 08:20:39 executing program 4: pipe2(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 08:20:39 executing program 1: socket$inet6(0xa, 0x80005, 0x0) 08:20:39 executing program 0: pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) ppoll(&(0x7f0000000040)=[{}, {r0}], 0x2, &(0x7f00000000c0)={r1}, 0x0, 0x0) 08:20:39 executing program 3: openat$incfs(0xffffffffffffffff, &(0x7f00000024c0)='.log\x00', 0x200002, 0x0) 08:20:39 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 08:20:39 executing program 2: ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040), &(0x7f0000000080), 0x8) 08:20:39 executing program 3: pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000600), 0x2, 0x0) 08:20:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 08:20:39 executing program 1: pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) readv(r0, 0x0, 0x0) 08:20:39 executing program 2: open(&(0x7f0000002940)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', 0x0) 08:20:39 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000001180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 08:20:40 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) 08:20:40 executing program 4: fsopen(&(0x7f0000000580)='cpuset\x00', 0x0) 08:20:40 executing program 2: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x40201) [ 418.930815][ T5167] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 419.197865][ T5167] usb 6-1: Using ep0 maxpacket: 8 [ 419.318049][ T5167] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 08:20:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000400)='syz1\x00') 08:20:40 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x101040, 0xa8) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) [ 419.488767][ T5167] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.507429][ T5167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.530961][ T5167] usb 6-1: Product: syz [ 419.535505][ T5167] usb 6-1: Manufacturer: syz [ 419.544412][ T5167] usb 6-1: SerialNumber: syz [ 419.611867][ T5167] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 419.854779][ T5164] usb 6-1: USB disconnect, device number 15 08:20:41 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 08:20:41 executing program 4: pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r0) 08:20:41 executing program 2: open(&(0x7f00000016c0)='./file0\x00', 0x0, 0x0) 08:20:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$int_out(r0, 0x0, 0x0) 08:20:41 executing program 0: pipe2(0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) 08:20:41 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) 08:20:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000140)='syz1\x00') 08:20:41 executing program 1: ppoll(&(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0) 08:20:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 08:20:41 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 08:20:41 executing program 0: pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 08:20:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) [ 420.827880][ T5167] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 421.089415][ T5167] usb 6-1: Using ep0 maxpacket: 8 [ 421.208080][ T5167] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 421.378120][ T5167] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.387338][ T5167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.395966][ T5167] usb 6-1: Product: syz [ 421.400436][ T5167] usb 6-1: Manufacturer: syz [ 421.405066][ T5167] usb 6-1: SerialNumber: syz [ 421.467904][ T5167] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 421.691398][ T5172] usb 6-1: USB disconnect, device number 16 08:20:43 executing program 2: socket(0xa, 0x0, 0xce42) 08:20:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x1c, 0x40000162, 0x0, 0x0) 08:20:43 executing program 4: pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:20:43 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x0) 08:20:43 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='user.incfs.id\x00', &(0x7f00000000c0)='\\#{,\xb6^\x91^#(;{]+-:#\':&-{\x00', 0x17, 0x0) 08:20:43 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 08:20:43 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f00000024c0)='.log\x00', 0x290100, 0x0) 08:20:43 executing program 0: mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x5) 08:20:43 executing program 1: pipe2(&(0x7f0000000580), 0x0) clock_gettime(0x0, &(0x7f0000000080)) 08:20:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000003980)={&(0x7f00000022c0), 0xc, &(0x7f0000003940)={&(0x7f0000002300)={0xec8, 0x0, 0x101, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xe98, 0x8, 0x0, 0x1, [{0x3b4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a66fc2e6466ab354196dba5bfcb9a5e97fd4e8e72032ff409d10ae111b3294ec"}, @WGPEER_A_ALLOWEDIPS={0x384, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f0655407a66cead604ef2be1b6e5e789bfc71cce9046ea6656a516a964842354"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9b8d}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fef5849c96eab3f3f721da968e409c0c30bc704391be0c367a78407999e3c4b3"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x5c0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd0}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x488, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b0ac77a8cf008fbe1eaa997a5bc2766cb33bc65185f3dfb6545c9ff92ee3cf60"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1ab, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e363801513e47ee04a41553c4a8fe3b3b5576f0f3881a4ada3a615fc21a9f9d7"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7f}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x39c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}]}]}]}, 0xec8}, 0x1, 0x0, 0x0, 0x4004494}, 0x40) 08:20:43 executing program 4: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) 08:20:43 executing program 2: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000140)='syz1\x00') ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000001c0)=0x2) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000200)={0x0, "6086ac570a39c1726efbcc1e4530fc6c"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001200), 0x4) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000001240)={0x1, 0x30, "3712caebb0528259e76ef505d7e3bc8faabad82b7082703ae2998dfe2239caa01542f4ed966d5dc515db40ad049335cb"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x15, 0x8, 0x2, 0xfd09, 0x823, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x48) ioctl$FIONCLEX(r1, 0x5450) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000001300)) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000001340)={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0x0, "2715219b60906dbe0a9efb114d0a4ca8a02c414ae7ec0c78413c353398a58bdb", 0x81, 0x4, 0x3, 0xe1e9}, 0x3c) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001380)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x20, &(0x7f0000001500)={&(0x7f00000013c0)=""/78, 0x4e, 0x0, &(0x7f0000001440)=""/153, 0x99}}, 0x10) r3 = dup2(r2, r0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x38) r4 = syz_open_dev$vcsu(&(0x7f0000001580), 0x8, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000015c0)=r4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) 08:20:43 executing program 1: socket$inet6(0xa, 0x80005, 0x8) 08:20:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 08:20:43 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x113201, 0x0) 08:20:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) [ 422.687943][ T5201] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 422.938148][ T5201] usb 6-1: Using ep0 maxpacket: 8 [ 423.059486][ T5201] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 423.229579][ T5201] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.238971][ T5201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.247248][ T5201] usb 6-1: Product: syz [ 423.251721][ T5201] usb 6-1: Manufacturer: syz [ 423.256699][ T5201] usb 6-1: SerialNumber: syz [ 423.301304][ T5201] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 423.541820][ T5201] usb 6-1: USB disconnect, device number 17 08:20:45 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 08:20:45 executing program 2: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x7) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000040)) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000000c0)) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x79) r2 = socket$inet6(0xa, 0x80005, 0x8) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000100)={{r0}, 0x0, 0x18, @unused=[0x0, 0x0, 0x0, 0xb1], @devid}) pipe2$watch_queue(0x0, 0x80) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000003980)={&(0x7f00000022c0), 0xc, &(0x7f0000003940)={&(0x7f0000002300)={0xec8, 0x0, 0x101, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xe98, 0x8, 0x0, 0x1, [{0x3b4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a66fc2e6466ab354196dba5bfcb9a5e97fd4e8e72032ff409d10ae111b3294ec"}, @WGPEER_A_ALLOWEDIPS={0x384, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f0655407a66cead604ef2be1b6e5e789bfc71cce9046ea6656a516a964842354"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9b8d}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fef5849c96eab3f3f721da968e409c0c30bc704391be0c367a78407999e3c4b3"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x5c0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x488, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b0ac77a8cf008fbe1eaa997a5bc2766cb33bc65185f3dfb6545c9ff92ee3cf60"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1ab, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e363801513e47ee04a41553c4a8fe3b3b5576f0f3881a4ada3a615fc21a9f9d7"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7f}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x338, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f8e9fcc23612f83213fdb7b10f26ab971d154d8d393838648f4a9bf8ab2f206d"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}]}]}]}, 0xec8}}, 0x40) 08:20:45 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) 08:20:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) r1 = dup2(r0, r0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0) 08:20:45 executing program 1: fsopen(&(0x7f0000000000)='reiserfs\x00', 0x0) 08:20:45 executing program 5: fsopen(&(0x7f0000000000)='bpf\x00', 0x0) 08:20:45 executing program 1: pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) getsockname$packet(r0, 0x0, 0x0) 08:20:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0xf7, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x1, 0x1, 0x20, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x7f, {{0x9, 0x24, 0x6, 0x0, 0x0, "fd8796c2"}, {0x5, 0x24, 0x0, 0x59}, {0xd, 0x24, 0xf, 0x1, 0x376b, 0xfff8, 0x8001, 0x7f}, [@obex={0x5, 0x24, 0x15, 0x4}, @obex={0x5}, @mdlm_detail={0x8b, 0x24, 0x13, 0x5, "6f3c48184b2dad6fbf50ac00f137c400f562527edb55dfb7deadc78c5975a953f4d714288b5ce65e2d5e7dc207958d7ec25f6a20344b0656452c2b5a5e1defa02fe157a2d49de59b0849d9194a7de47d389292590f0587b91287f146f8c8e587b5c2af84206a4557137eed7738fffec1362bb2e80e3107cfb0eb6eed2ca6d4cd27cadf8e57db59"}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x8, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9e, 0x5d, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xe2, 0xff, 0x3a}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x40, 0x9e, 0x4}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0x3f, 0x81, 0x3, 0x8, 0x1f}, 0x69, &(0x7f0000000280)={0x5, 0xf, 0x69, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xf, 0x7, 0xf309}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x8000, 0xf000, 0x0, [0xffc0, 0x0, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x5, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "1120b95c651ee72682a8cf7de50b5d85"}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x8001, 0x0, 0xcc40, [0xf, 0x0, 0xff0030, 0x7fbf3f, 0x3f0f, 0x1feff00]}]}, 0x8, [{0xb9, &(0x7f0000000300)=@string={0xb9, 0x3, "217a9813868834315ec46cba5fe8385caed657de3df05635923377c76e103d7f8d8103d7e6974d4a52cb506b4ffc33dd3e0c93faf654998319df5520b42c04ecf5962fed80f0999b4b4b35b066cf569e6adfd9203903072af4705af6653b8e38398a3a6fa11afafc8dc09f68500cdc354db165ef505effa8443873a95f435b60e41efc2a997c5389ac5b03fc2f4251e3419fef6d72c3601c00ca17e555a3a2bc78164246e11da7e6ede12745ac3e01dbdb38da2c2dbfba"}}, {0xa4, &(0x7f0000000400)=@string={0xa4, 0x3, "fab7085caa65edaee73d362e815d9f1c9e83dd2b2baf05b56184f06d5d716b32cb3384ee979e6109b3687ac40a540dfc049d074f39c9e492baadd87effca51d3c8ab44131d1cbd647cb57cac1502cbb54b1e77bad22706f5c204a3ef0a617c10eaf787b917e759ae4b7f7f7f493b858f159c78fd8cfc59abf3d110a73b771a109495698e5000e69c3dda6be12a780691cbbb8aa1f496eea115570c915510b0f8516d"}}, {0x14, &(0x7f00000004c0)=@string={0x14, 0x3, "9ba8c8510f77ea9b126ec5586c8113e10a12"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x0, 0x0}, {0xac, &(0x7f0000000700)=@string={0xac, 0x3, "e338054feee5392e7e71837459b7c0bf71042bff191dec97f94367de6a61323d5c5ce1bf4dae99cbf26ab097fe9e7551041cc363818b31980154cc6f491a889a388f63fa8c136a6baa3023286a0d292ad94483c2bc8e3544c805086a42c5e2613383c03ed2a166db46cf9aaffb611203c164789e7d57936e882e6a8302945f5fd79c5bf0de69487af645013ae31de9c151dc6ae0fbc87f82702241841063032f4363306155c20be18d6e"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000a00)={0x14, &(0x7f00000008c0)={0x0, 0x9, 0xea, {0xea, 0x1, "1e9c34ce155906d09bf0e855cf5504c9a32b249ed906b08e69a69e859e7f76dfbad010b234103c3ffefbac57ae121a830bab73fc48f194d55e458aabd9052433cfc49834de603008047fb2575c16af13eef63618e09a9cc356971ee77f4e7a4209c62181f8b94e4cb0f0f5f3e73743a6b1c7c7d84357648c673370d953a3726f30585b5de27e8addc46847329c8b69b04669fce43ec83533285c2eff5560650e3e494862b8ca0c6da795e0ebfe337b522f52b05d452d26058b965eacc3547617b241d754900027a2306f4bb9926e4394239568b75057d2935a21aa084cc44c6d357a8b1914dbae6d"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x0, 0x6}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x61}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r1) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f00000000c0)) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000000), 0x80) 08:20:45 executing program 0: syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 08:20:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x12, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r1}}, 0x10) 08:20:45 executing program 5: pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 08:20:45 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) 08:20:45 executing program 0: clock_gettime(0x0, &(0x7f0000000080)={0x0}) ppoll(0x0, 0x0, &(0x7f00000000c0)={r0}, 0x0, 0x0) 08:20:45 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001640)={@local}) 08:20:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) 08:20:45 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 08:20:45 executing program 5: open(&(0x7f0000002940)='./file0\x00', 0x0, 0x0) open(&(0x7f0000003d80)='./file0\x00', 0x0, 0x0) 08:20:45 executing program 5: open(&(0x7f0000002940)='./file0\x00', 0x0, 0x0) open(&(0x7f0000003d80)='./file0\x00', 0xe0ff, 0x0) 08:20:45 executing program 3: bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000001580), 0x0, 0x0) [ 424.714286][ T4851] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 425.009671][ T4851] usb 5-1: Using ep0 maxpacket: 32 [ 425.148121][ T4851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 158, changing to 11 [ 425.164247][ T4851] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 425.174605][ T4851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 425.185014][ T4851] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 425.388942][ T4851] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.402566][ T4851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.410683][ T4851] usb 5-1: Product: ꢛ凈眏鯪渒壅腬ሊ [ 425.417017][ T4851] usb 5-1: Manufacturer: 럺專斪껭㷧⸶嶁Ჟ莞⯝꼫딅葡淰煝㉫㏋麗ॡ梳쑺吊ﰍ鴄伇줹鋤궺绘쫿퍑ꯈፄᰝ撽땼걼ȕ뗋ṋ멷⟒ӂ愊ၼ릇깙罋罿㭉辅鰕ﵸﲌꭙ퇳꜐眻ယ閔蹩P鳦砪鄆믋ꆊ雴ꇮ圕鄌ၕ浑 [ 425.446059][ T4851] usb 5-1: SerialNumber: ࠌ [ 425.478715][T11237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 425.959030][ T4851] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 425.976778][ T4851] usb 5-1: USB disconnect, device number 12 08:20:47 executing program 2: clock_gettime(0x0, &(0x7f0000000080)={0x0}) ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0)={r0}, 0x0, 0x0) 08:20:47 executing program 1: pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) 08:20:47 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 08:20:47 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000480)={0x0, 0xea60}, 0x10) 08:20:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) 08:20:47 executing program 4: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x6400) 08:20:47 executing program 5: syz_usb_connect$uac1(0x0, 0xa7, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x7f, 0x0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}, [@extension_unit={0x7, 0x24, 0x8, 0x0, 0x48a}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x4, 0xff, "b9398a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x3f, 0xff, "", "b1205d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x20, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0xff}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x28, 0x0, "6e59d42a19a483"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0xbf, 0x0, {0x7, 0x25, 0x1, 0x0, 0x7f}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 08:20:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b71, 0x0) 08:20:47 executing program 0: socketpair(0x2f, 0x0, 0x0, &(0x7f0000000040)) 08:20:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/70) 08:20:47 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x0, 0x0, 0x9}) 08:20:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) [ 426.959823][ T5167] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 427.230429][ T5167] usb 6-1: Using ep0 maxpacket: 32 08:20:48 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "51a5013bce8e5db29600143249dd9966ce44db"}) 08:20:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3, 0x62db, 0x8000, 0x6, 0x5}) 08:20:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b71, 0x0) 08:20:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x100}, 0x48) 08:20:48 executing program 2: syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000001800)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x6, 0x0, "51f8"}, @mixer_unit={0x9, 0x24, 0x4, 0x0, 0x0, "c0595166"}, @mixer_unit={0x5}, @extension_unit={0x7}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x9, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 08:20:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b71, 0x0) [ 427.391963][ T5167] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 427.391998][ T5167] usb 6-1: config 1 has no interface number 1 [ 427.392056][ T5167] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 427.392112][ T5167] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.588498][ T5167] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.597613][ T5167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.613390][ T5167] usb 6-1: Product: syz [ 427.620697][ T5167] usb 6-1: Manufacturer: syz [ 427.625442][ T5167] usb 6-1: SerialNumber: syz [ 427.759661][ T921] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 427.979929][ T5167] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 427.999173][ T921] usb 3-1: Using ep0 maxpacket: 32 [ 428.028419][ T5167] usb 6-1: USB disconnect, device number 18 [ 428.053796][ T8273] udevd[8273]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.128509][ T921] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 428.146088][ T921] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 428.155960][ T921] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.171089][ T921] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 08:20:49 executing program 5: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x401, 0x2, 0x400, 0x10001, 0x80000001, 0x7fffffff, 0x5, 0x5, 0x100, 0x7, 0xdd, 0x1, 0x9, 0x7ff}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000280)={0x78, r2, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x1000c004}, 0xc040) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000001640), &(0x7f0000001680)=0x4) 08:20:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="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") 08:20:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b3c, 0x0) 08:20:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b71, 0x0) 08:20:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x540b, 0x7) [ 428.339255][ T921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.353082][ T921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.361287][ T921] usb 3-1: Product: syz [ 428.365544][ T921] usb 3-1: Manufacturer: syz [ 428.370767][ T921] usb 3-1: SerialNumber: syz 08:20:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x10, 0x0, {}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 08:20:49 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 08:20:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xc, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 08:20:49 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x0, 0x10, r0, 0x0) 08:20:49 executing program 4: socketpair(0x5, 0x0, 0x0, &(0x7f0000000100)) [ 428.847112][ T921] usb 3-1: USB disconnect, device number 18 [ 428.983066][ T8273] udevd[8273]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 08:20:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5429, 0x0) 08:20:50 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @rr={0x7, 0x3}]}}}}}}, 0x0) 08:20:50 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getcwd(&(0x7f0000000000)=""/60, 0x3c) 08:20:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5441, 0x0) 08:20:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b47, 0xf0cd28ab7d0000) 08:20:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x560c, 0x0) 08:20:50 executing program 3: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 08:20:50 executing program 0: r0 = socket(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001180)={'sit0\x00', &(0x7f0000001100)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast}}}}) 08:20:50 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) 08:20:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, 0x0, 0x0, "ec21b384e15eee4fa9ac3d2196fada0e26272b"}) 08:20:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b3b, 0x20000000) 08:20:50 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 08:20:50 executing program 0: syz_clone(0x40082180, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)) 08:20:50 executing program 3: pipe2$9p(0x0, 0x84040) 08:20:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000000c0)={0x10}) 08:20:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x540c, 0x0) 08:20:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x540b, 0x2) 08:20:50 executing program 5: socketpair(0x28, 0x0, 0x948, &(0x7f00000000c0)) 08:20:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5412, 0x0) 08:20:51 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="000100006404"], 0x100}}, 0x0) 08:20:51 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:20:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b65, 0x0) 08:20:51 executing program 3: openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) 08:20:51 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0x21, 0x0, 0x0) 08:20:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b66, 0x0) 08:20:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b63, 0x0) 08:20:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5425, 0x0) 08:20:51 executing program 5: socket$unix(0x1, 0xd, 0x0) 08:20:51 executing program 4: r0 = fsopen(&(0x7f0000001f80)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='async\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) 08:20:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x541c, 0x0) 08:20:51 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 08:20:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 08:20:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000008}) 08:20:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x540d, 0x0) 08:20:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x540b, 0x1) 08:20:51 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x4}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 08:20:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x545d, 0x0) 08:20:51 executing program 1: syz_emit_ethernet(0x16, &(0x7f0000000000)={@broadcast, @remote, @val={@void}, {@llc={0x4, {@llc={0xaa, 0x0, "0f", "dd"}}}}}, 0x0) 08:20:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xfffffff7, 0x0, 0xfffffffe, 0xf, 0x0, "9a4ceb72229d09ed28df615ae13ecb326189b8"}) 08:20:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xf00) 08:20:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5606, 0x0) 08:20:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5412, 0x20000000) 08:20:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000000)) 08:20:52 executing program 0: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) 08:20:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b47, 0x20000000) 08:20:52 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff}, 0xc) 08:20:52 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 08:20:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 08:20:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5427, 0x0) 08:20:52 executing program 0: getitimer(0x0, &(0x7f0000001040)) 08:20:52 executing program 2: shmat(0x0, &(0x7f0000ff4000/0x9000)=nil, 0x4000) shmdt(0x0) 08:20:52 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xa, 0x0, 0x0) 08:20:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x20, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, "064258a0e895172ffcd5788f307e79dddde93c9a62f5ff697325722cbe896f52"}) 08:20:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0xd, 0x14, 0x142}) 08:20:52 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x7f, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6, {0x7, 0x25, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x1, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) 08:20:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x560b, 0x0) 08:20:52 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) 08:20:52 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 08:20:52 executing program 1: syz_emit_ethernet(0x300, &(0x7f0000000840)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "04cca6", 0x2c6, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, [{0x0, 0x3, "58d4560381dca52c6dafb81e84a411ee62e675e640ec"}, {0x0, 0xa, "6842dc91124d7c3fe3c3d5db25c7ab5cfc38514f8651c00f806bb6b35c987bf741507e8a7af6034d4ecc70ba823f9b25e77354c8f8240c4af8451c8bd701875d1c4847d9784a92fa156b516814b199e11f022b"}, {0x0, 0x1a, "84127ad1579fb3b6b9dc020187c1f113811ac7183cac58bb0901dde0bbce4b5d464021002049d06f095830ebb2a4e6a2fa9a817d5f65df600ac99b2a0c62f7df52024b72cba73fdb7486264e969d4d16b30c5d3e6846311ebed1bb2b6ad6826ce1306b0838997dd9c3c5564f9569355b49ba918deb78b753c91aa8f2461968a55705efb398f8dfc0a7693faee605b23ac43da1d91ba1a62eca65ce8b436004732044ea7f86e597cf954a91712441175d000fca7a39da3a6505f617a92648ab5a134b5b2a4e043e61e249f8bbad892a04648afd"}, {0x0, 0xd, "37ee2974690001122052bf52b992217bed6b0862a51e49aa37fbe1b52508d6d51e939b840ebe079eeb33b50068223483fe2d87d181580ef0c66c4e1e7601d1afd5d8affbe5c36953d6a994f1aeffed05213f9a6bb6a71e0c5dd68df1bbc62c78635ea6a0dedbde3eddf86317c8"}, {0x0, 0x15, "f48198d5378f8ff5f64cd56a847ddc54f3f2ed0f4e3a27321fa2eaed6a9219e0ea0ce8fbcaa3036becf93a2cae6ff2376ae9038b973d938c6b6ef200cc7fffb3257a445ec35f38d8909d92f744115d05631582277e50a07b39f39c03bd581e9bd029d86cdbdfc657c011f44c6fb963d72d493c2554ea799b24aad20fb426c757558c620ac315bcbddab4f3d7d1cc8aeac12fa424e564a7a60a9c4a7cfb7c3e44832dd99d9d62ef7ad6ea4879f6"}, {0x0, 0xa, "978101566f326a38c92f0e1c8110ab8c5976de955ed67d9925b8aa4b799923f01f0908b5295e9cb7014e5e593fdaaf74b73b29afa226cf4c0645062c3563a831e8764a43b6b854c785b9fee16120bdcc"}]}}}}}}, 0x0) 08:20:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x4}]}]}, 0x4c}}, 0x0) 08:20:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b3d, 0x0) 08:20:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b68, 0x0) 08:20:52 executing program 3: add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, "ffda095b6e5dd23a839ef6ca9ea4475ccb998301722ec02918107f0da593cdc3de8e856ab2f25514fefe4349ef51f345707063e08005354d0c16b8e44836f350"}, 0x48, 0xfffffffffffffffc) [ 431.737914][ T5172] usb 5-1: new high-speed USB device number 13 using dummy_hcd 08:20:53 executing program 5: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x97, 0x0}, {0x62, 0x0}]}) 08:20:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0xffffffffffffffff) 08:20:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) sched_setscheduler(r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="97cafeea77d46deb04f862dae12c5fb1178703d096a34ee1483e672a200fca397e219c937d1c40416672ce24ce8aaa645749bb8eea3e86b67c71770fea0fc4fc831144804d193eaed5528993d3b36e3ddf5878a940002e5b6390eb5a2acb4ea5daf16e5ff6d8b9c4f386736d70a79e77cfde6d69def530defb09901cdc81e8f8b0f9c664a5d8e6e2130f13b4432804cf98d5ce2c451fe0a9820368f80905b5746ba0fe32212f51d5c4db8ccbf085396c74d80fb8820e"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ptrace(0x10, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000600)='task_newtask\x00'}, 0x10) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), 0x0, 0x0, {0x2}, &(0x7f0000000880)=""/226, 0xe2, 0x0, 0x0}, 0x58) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x80100800, &(0x7f0000000000), &(0x7f0000000280), 0x0, {0x1d}, &(0x7f0000000340)=""/48, 0x30, &(0x7f0000000700)=""/119, &(0x7f0000000400), 0x0, {r6}}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffff003) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) [ 432.060043][ T5172] usb 5-1: Using ep0 maxpacket: 32 [ 432.228698][ T5172] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 432.264537][ T5172] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 432.284595][ T5172] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.378398][ T1146] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 432.488052][ T5172] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.488094][ T5172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.488122][ T5172] usb 5-1: Product: syz [ 432.488141][ T5172] usb 5-1: Manufacturer: syz [ 432.488161][ T5172] usb 5-1: SerialNumber: syz [ 432.638107][ T1146] usb 6-1: Using ep0 maxpacket: 32 [ 432.768068][ T1146] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 432.768101][ T1146] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 432.768125][ T1146] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.850307][ T5172] usb 5-1: 0:2 : does not exist [ 432.907315][ T5172] usb 5-1: USB disconnect, device number 13 [ 433.018196][ T1146] usb 6-1: language id specifier not provided by device, defaulting to English 08:20:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x4b2f, 0x0) 08:20:54 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88001, 0x0) 08:20:54 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) 08:20:54 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "42551c", 0x8, 0x0, 0x0, @empty, @private0, {[@fragment={0x2c}]}}}}}, 0x0) [ 433.378040][ T1146] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 08:20:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x560d, 0x0) [ 433.378077][ T1146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 08:20:54 executing program 0: r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d40), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r1, 0xe13, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 433.378106][ T1146] usb 6-1: Product: syz [ 433.378127][ T1146] usb 6-1: SerialNumber: syz 08:20:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000000)="121c7096fcd32a8b94ee042d88ca", 0x36, 0x0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="702e3e1d37c3"}, 0x14) 08:20:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000000203010200070000000000000200000908000540000000000800044000000002080005400000001008000440000000140800034000000400080003400000004008000540000000010900020000000003010000000800054000000021"], 0x68}}, 0x0) 08:20:54 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0x40086602, 0x0) [ 433.748425][ T1146] usb 6-1: 0:2 : does not exist [ 433.753707][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 433.844412][ T1146] usb 6-1: USB disconnect, device number 19 [ 433.973442][ T8273] udevd[8273]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 08:20:55 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='}') 08:20:55 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000040001b00000006241a000000090581030000070000090401224a78cd0000090401"], 0x0) 08:20:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) sched_setscheduler(r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="97cafeea77d46deb04f862dae12c5fb1178703d096a34ee1483e672a200fca397e219c937d1c40416672ce24ce8aaa645749bb8eea3e86b67c71770fea0fc4fc831144804d193eaed5528993d3b36e3ddf5878a940002e5b6390eb5a2acb4ea5daf16e5ff6d8b9c4f386736d70a79e77cfde6d69def530defb09901cdc81e8f8b0f9c664a5d8e6e2130f13b4432804cf98d5ce2c451fe0a9820368f80905b5746ba0fe32212f51d5c4db8ccbf085396c74d80fb8820e"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ptrace(0x10, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000600)='task_newtask\x00'}, 0x10) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), 0x0, 0x0, {0x2}, &(0x7f0000000880)=""/226, 0xe2, 0x0, 0x0}, 0x58) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x80100800, &(0x7f0000000000), &(0x7f0000000280), 0x0, {0x1d}, &(0x7f0000000340)=""/48, 0x30, &(0x7f0000000700)=""/119, &(0x7f0000000400), 0x0, {r6}}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffff003) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) 08:20:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 08:20:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8912, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) 08:20:56 executing program 1: r0 = memfd_create(&(0x7f00000010c0)='\x00\x94\xe3^P,\a\x9e\xae\x9e\x9b\x01\'\xa4\xa4\x7f\x85\xb7s\xc1\xf2\xbb)\xa8\x03\xd0\x00o\xebH-A\x95\x11\x16O\xe1#fPZ\xa4\xd8\x1eF', 0x0) ioctl(r0, 0x1, &(0x7f0000000040)) 08:20:56 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8c401, 0x0) 08:20:56 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001980), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "17"}}, 0x119) 08:20:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 08:20:56 executing program 4: syz_emit_ethernet(0x26, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x300}]}}}}}}, 0x0) 08:20:56 executing program 5: syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3}]}}}}}}, 0x0) 08:20:56 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@multicast, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "c6c77c", 0x8, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x0, 0x4e23, 0x8}}}}}}, 0x0) 08:20:56 executing program 4: r0 = openat$drirender128(0xffffff9c, &(0x7f0000001300), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0x5421, 0x0) [ 435.102933][ T4851] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/1 [ 435.135002][ T4851] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 08:20:58 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000400000000000006241a0000000905810300000000000904210000020d00000904010102020d000009058202000000000009"], 0x0) 08:20:58 executing program 2: r0 = fsopen(&(0x7f0000000140)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x8, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 08:20:58 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "63e878", 0x0, "d934b8"}}}}}}, 0x0) 08:20:58 executing program 1: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/204, 0xcc}], 0x1, &(0x7f0000000580)=[{0x0}, {&(0x7f00000004c0)=""/60, 0x3c}, {&(0x7f0000000500)=""/41, 0x29}], 0x3, 0x0) 08:20:58 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000840)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "04cca6", 0x14, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) 08:20:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) sched_setscheduler(r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="97cafeea77d46deb04f862dae12c5fb1178703d096a34ee1483e672a200fca397e219c937d1c40416672ce24ce8aaa645749bb8eea3e86b67c71770fea0fc4fc831144804d193eaed5528993d3b36e3ddf5878a940002e5b6390eb5a2acb4ea5daf16e5ff6d8b9c4f386736d70a79e77cfde6d69def530defb09901cdc81e8f8b0f9c664a5d8e6e2130f13b4432804cf98d5ce2c451fe0a9820368f80905b5746ba0fe32212f51d5c4db8ccbf085396c74d80fb8820e"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ptrace(0x10, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000600)='task_newtask\x00'}, 0x10) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), 0x0, 0x0, {0x2}, &(0x7f0000000880)=""/226, 0xe2, 0x0, 0x0}, 0x58) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x80100800, &(0x7f0000000000), &(0x7f0000000280), 0x0, {0x1d}, &(0x7f0000000340)=""/48, 0x30, &(0x7f0000000700)=""/119, &(0x7f0000000400), 0x0, {r6}}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffff003) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) 08:20:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=@dellinkprop={0x4c, 0x6d, 0x2a288b50c9dbd515, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_BROADCAST={0xa, 0x2, @dev}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wg2\x00'}]}]}, 0x4c}}, 0x0) 08:20:58 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x40, 0x7, 0x7fff}, 0x48) 08:20:58 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_expedited', 0x0, 0x0) read$FUSE(r0, 0x0, 0x2) 08:20:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x5450, 0x0) 08:20:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x5460, 0x0) 08:20:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x20, 0x0) ioctl$EVIOCSREP(r0, 0x80084504, &(0x7f0000001580)) 08:21:01 executing program 0: syz_clone(0x248a8500, 0x0, 0x0, 0x0, 0x0, 0x0) 08:21:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x801c581f, 0x0) 08:21:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x20, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000001580)=[0xfdfdffff]) 08:21:01 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1837, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x81, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x9, {0x9}}}]}}]}}, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001c40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4b4, 0xde61, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) 08:21:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0xc0189436, &(0x7f00000014c0)={'tunl0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}) 08:21:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) sched_setscheduler(r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="97cafeea77d46deb04f862dae12c5fb1178703d096a34ee1483e672a200fca397e219c937d1c40416672ce24ce8aaa645749bb8eea3e86b67c71770fea0fc4fc831144804d193eaed5528993d3b36e3ddf5878a940002e5b6390eb5a2acb4ea5daf16e5ff6d8b9c4f386736d70a79e77cfde6d69def530defb09901cdc81e8f8b0f9c664a5d8e6e2130f13b4432804cf98d5ce2c451fe0a9820368f80905b5746ba0fe32212f51d5c4db8ccbf085396c74d80fb8820e"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ptrace(0x10, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000600)='task_newtask\x00'}, 0x10) syz_clone3(&(0x7f0000000800)={0x41001400, &(0x7f0000000300), 0x0, 0x0, {0x2}, &(0x7f0000000880)=""/226, 0xe2, 0x0, 0x0}, 0x58) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x80100800, &(0x7f0000000000), &(0x7f0000000280), 0x0, {0x1d}, &(0x7f0000000340)=""/48, 0x30, &(0x7f0000000700)=""/119, &(0x7f0000000400), 0x0, {r6}}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffff003) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) [ 440.382076][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.388556][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 08:21:01 executing program 2: syz_usb_connect(0x0, 0x2f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe, 0x86, 0xa, 0x10, 0xbb4, 0xa0b, 0x59b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x44, 0x74, 0x9e, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x4}]}}]}}]}}]}}, 0x0) 08:21:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x2, &(0x7f0000001580)) 08:21:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x541b, 0x0) 08:21:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x4020940d, &(0x7f0000001580)) 08:21:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x4b, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) [ 440.778161][ T921] usb 5-1: new high-speed USB device number 14 using dummy_hcd 08:21:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, 0x0}) 08:21:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x17, 0x0, &(0x7f0000000340)) 08:21:02 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5451, 0x0) [ 441.007904][ T5167] usb 3-1: new high-speed USB device number 19 using dummy_hcd 08:21:02 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) [ 441.029905][ T921] usb 5-1: Using ep0 maxpacket: 32 [ 441.106037][T11546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.106529][T11546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.168224][ T921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 441.228116][ T921] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 441.228172][ T921] usb 5-1: can't read configurations, error -71 [ 441.248013][ T5167] usb 3-1: Using ep0 maxpacket: 16 [ 441.368194][ T5167] usb 3-1: config 0 has an invalid interface descriptor of length 2, skipping [ 441.368266][ T5167] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 08:21:02 executing program 4: r0 = socket$unix(0x1, 0x3, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs, 0xffffffffffffffa4) 08:21:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x6, 0x0, &(0x7f0000000340)) [ 441.528534][ T5167] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a0b, bcdDevice=59.b7 [ 441.528578][ T5167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.528607][ T5167] usb 3-1: Product: syz [ 441.528627][ T5167] usb 3-1: Manufacturer: syz [ 441.528647][ T5167] usb 3-1: SerialNumber: syz [ 441.532273][ T5167] usb 3-1: config 0 descriptor?? [ 441.788287][ T5172] usb 3-1: USB disconnect, device number 19 08:21:03 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="62c168492567", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) 08:21:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x2, 0x0, 0x0, 0x0) 08:21:03 executing program 1: syz_clone(0x8200300, 0x0, 0x0, 0x0, 0x0, 0x0) 08:21:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 08:21:03 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 08:21:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5450, 0x0) 08:21:03 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2}}}}}}, 0x0) 08:21:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x46, 0x0, 0x0) 08:21:04 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x11, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) 08:21:04 executing program 1: r0 = fsopen(&(0x7f0000001f80)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x2, 0x0, 0x0, 0x0) 08:21:04 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, 0x0) 08:21:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2021) 08:21:04 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) [ 443.048699][ T1146] usb 3-1: new high-speed USB device number 20 using dummy_hcd 08:21:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 08:21:04 executing program 3: syz_emit_ethernet(0x1e, &(0x7f0000001180)={@link_local, @empty, @void, {@generic={0x88ca, "296d4a5bf3748275573b0b8e4e347bbb"}}}, 0x0) 08:21:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 443.314914][ T28] audit: type=1326 audit(1703492464.492:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11610 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe9579 code=0x0 [ 443.348082][ T1146] usb 3-1: Using ep0 maxpacket: 32 [ 443.488566][ T1146] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 443.509162][ T1146] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 443.526515][ T1146] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.708146][ T1146] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 443.719720][ T1146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.735852][ T1146] usb 3-1: Product: syz [ 443.745466][ T1146] usb 3-1: Manufacturer: syz [ 443.760415][ T1146] usb 3-1: SerialNumber: syz [ 443.788434][T11587] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 443.795869][T11587] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 444.066367][ T1146] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 444.084275][ T1146] usb 3-1: USB disconnect, device number 20 08:21:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 08:21:05 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') 08:21:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@FRA_DST={0x8, 0xf, @broadcast}]}, 0x24}}, 0x0) 08:21:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x1e, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}}, 0x0) 08:21:05 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x23, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f230002"]}) 08:21:05 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x2a, 0x0, 0x0) 08:21:05 executing program 1: syz_clone(0x71240100, 0x0, 0x0, 0x0, 0x0, 0x0) 08:21:05 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3ea}, 0x10}}, 0x0) 08:21:05 executing program 3: r0 = fsopen(&(0x7f0000001f80)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x4, 0x0, 0x0, 0x0) 08:21:05 executing program 5: r0 = socket$unix(0x1, 0x3, 0x0) sendto$unix(r0, &(0x7f00000001c0)="8b", 0x1, 0x400c0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 08:21:06 executing program 1: bpf$MAP_CREATE(0x4, &(0x7f0000000180), 0x48) 08:21:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@can_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}, @CGW_FILTER={0xc}]}, 0x30}}, 0x0) 08:21:06 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000180)=0x3) 08:21:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@setneightbl={0x14, 0x13, 0x1}, 0x14}}, 0x0) 08:21:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x18, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_PARMS={0x4}]}, 0x18}}, 0x0) 08:21:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@setneightbl={0x14, 0x26, 0x1}, 0x14}}, 0x0) 08:21:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) 08:21:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x2e, 0x0, 0x0) 08:21:08 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @remote}}}}}, 0x0) 08:21:08 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000480)) 08:21:08 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, 0x0) 08:21:08 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3ed}, 0x10}}, 0x0) 08:21:08 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0xc008744c, 0x0) 08:21:08 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2}}}}}}, 0x0) 08:21:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@FRA_DST={0x8, 0x8, @broadcast}]}, 0x24}}, 0x0) 08:21:09 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2}}}}}}, 0x0) 08:21:09 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000001c40)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @local}, {0x16, 0x0, 0x0, @broadcast}}}}}, 0x0) 08:21:09 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000480)) 08:21:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x23, 0x0, 0x0) 08:21:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x14, 0x0, &(0x7f0000000340)) [ 448.019622][ T921] usb 3-1: new high-speed USB device number 21 using dummy_hcd 08:21:09 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @parameter_prob={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2}}}}}}, 0x0) 08:21:09 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x29}) [ 448.307910][ T921] usb 3-1: Using ep0 maxpacket: 32 [ 448.428249][ T921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.439919][ T921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.457983][ T921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.476626][ T921] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 448.487071][ T921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 448.498724][ T921] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 448.668086][ T921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.683718][ T921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.691790][ T921] usb 3-1: Product: syz [ 448.696017][ T921] usb 3-1: Manufacturer: syz [ 448.706189][ T921] usb 3-1: SerialNumber: syz [ 448.749103][ T921] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 448.964541][ T921] usb 3-1: USB disconnect, device number 21 08:21:10 executing program 2: bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0xffffffffffffffa2) 08:21:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x20, 0x21, 0x1, 0x0, 0x0, {0x2}, [@NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_MCAST_PROBES={0x8}]}]}, 0x20}}, 0x0) 08:21:10 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x801) 08:21:10 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000480)) 08:21:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x80}, [@FRA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) 08:21:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x20, 0x0, 0x0, @dev, @private0}}) [ 449.545201][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 08:21:10 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 08:21:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x16, 0x0, 0x0) 08:21:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 08:21:10 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) write$ppp(r0, 0x0, 0x0) 08:21:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 08:21:11 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000480)) 08:21:11 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback}, {0x0, 0x0, 0x8}}}}}, 0x0) 08:21:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x1e, 0x0, 0x0) 08:21:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0x0, 0x0, 0x2404, 0xffffffffffffffff, 0x9493}, 0x48) 08:21:11 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$unix(r0, 0x0, 0x0) 08:21:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_MCAST_PROBES={0x8}]}]}, 0x20}}, 0x0) 08:21:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_delrule={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8}, @FRA_FLOW={0x8, 0x12}]}, 0x2c}}, 0x0) 08:21:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x3c, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) 08:21:11 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2}}}}}}, 0x0) 08:21:11 executing program 0: syz_emit_ethernet(0x62, &(0x7f0000000000)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "8cd06d", 0x28, 0x6, 0x0, @rand_addr=' \x01\x00', @private2, {[], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}}}, 0x0) 08:21:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x29, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}}, 0x0) 08:21:11 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000480)) 08:21:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x24, 0x26, 0x1, 0x0, 0x0, {}, [@NDTA_PARMS={0x4}, @NDTA_NAME={0xc, 0x1, 'batadv0\x00'}]}, 0x24}}, 0x0) 08:21:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 08:21:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}}, 0x0) 08:21:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@setneightbl={0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 08:21:11 executing program 1: syz_clone(0x18821400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) 08:21:11 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 08:21:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}}, 0x0) 08:21:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x24, 0x28, 0x1, 0x0, 0x0, {}, [@NDTA_PARMS={0x4}, @NDTA_NAME={0xc, 0x1, 'batadv0\x00'}]}, 0x24}}, 0x0) 08:21:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 08:21:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@setneightbl={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 08:21:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x15, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) 08:21:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x88, 0x64, 0x0, &(0x7f0000000340)) 08:21:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_delrule={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0x5}, @FRA_DST={0x8, 0x1, @loopback}]}, 0x2c}}, 0x0) [ 450.829443][T11743] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 08:21:12 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0x23}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1f5d00", 0x0, "cd71c2"}}}}}}, 0x0) 08:21:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x18, {0x4e23}}]}, 0x24}}, 0x0) 08:21:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x2, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) 08:21:12 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x0, 0x10, 0x0, @prog_id}, 0x20) 08:21:12 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) write$ppp(r0, &(0x7f0000000300)="a0", 0x1) 08:21:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000480), 0x8) 08:21:12 executing program 0: syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, 'kQ\v', 0x20, 0x6, 0x0, @mcast1, @remote, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}, 0x0) 08:21:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x32, 0x0, 0x0) 08:21:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0xe, 0x0, &(0x7f0000000340)) 08:21:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x2c, 0x28, 0x1, 0x0, 0x0, {}, [@NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_MCAST_PROBES={0x8}]}, @NDTA_NAME={0xc, 0x1, 'batadv0\x00'}]}, 0x2c}}, 0x0) 08:21:12 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x19, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) 08:21:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x19, 0x1, 0x0, 0x0, {0xa}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}}, 0x0) 08:21:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x5, 0x0, 0x0) 08:21:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@RTM_GETNSID={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@NETNSA_PID={0x8}]}, 0x1c}}, 0x0) 08:21:12 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3eb}, 0x10}}, 0x0) [ 451.438256][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 08:21:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$MRT6_DEL_MIF(r0, 0x11, 0xcb, 0x0, 0x0) [ 451.524539][T11775] netlink: 'syz-executor.1': attribute type 21 has an invalid length. 08:21:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getroute={0x14, 0x1a, 0x1}, 0x14}}, 0x0) 08:21:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@setneightbl={0x14, 0x28, 0x1}, 0x14}}, 0x0) 08:21:12 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000480)=0x2) 08:21:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x42, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) [ 451.679738][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 08:21:13 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x4d, 0x0, 0x0) 08:21:13 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x23, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f"]}) 08:21:13 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd}, {0x6}, [@country_functional={0x8, 0x24, 0x7, 0x0, 0x0, [0x0]}, @mdlm={0x15}, @mbim_extended={0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x9f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x0, 0x3f}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x62, &(0x7f0000000200)=@string={0x62, 0x3, "4055f0f36146cc045c679f1ed9a736d8d6deecfaed8f3fea06785d3e57afdd97180b1145728375440273f555447f3ea71af71dec9782e0a9505220764a8c30e8bb59fddfe8cd2943554e4def8397b225a978f8307953064f7d82814f2ddbc0bb"}}, {0x0, 0x0}]}) 08:21:13 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, 0x0) 08:21:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000380)=0xcb) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000480)=0x62) 08:21:13 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @remote}, "39ed30d69c8afa69ec78c937371487e1f2b91e176020cc53662f6982c21ccb0304046007fd73d322"}}}}, 0x0) 08:21:13 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @remote}, "39ed30d69c8afa69ec78c937371487e1f2b91e17"}}}}, 0x0) 08:21:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x18, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) 08:21:13 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x1a, 0x0, 0x0) 08:21:13 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c00)={0xffffffffffffffff}, 0x4) 08:21:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x4, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) [ 452.318126][ T5170] usb 6-1: new high-speed USB device number 20 using dummy_hcd 08:21:13 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) write$ppp(r0, &(0x7f0000000300)="a0120c96d6", 0x5) 08:21:13 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400}}]}}}]}}]}}, 0x0) [ 452.397999][ T5201] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 452.578361][ T5170] usb 6-1: Using ep0 maxpacket: 32 [ 452.668032][ T5201] usb 5-1: Using ep0 maxpacket: 16 [ 452.758049][ T5170] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 452.788228][ T5201] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 159, changing to 11 [ 452.799986][ T5201] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.809896][ T5201] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 452.819779][ T5201] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 452.832065][ T5201] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 452.938415][ T5170] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.950134][ T5170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.961348][ T5170] usb 6-1: Product: syz [ 452.965568][ T5170] usb 6-1: Manufacturer: syz [ 452.974836][ T5170] usb 6-1: SerialNumber: syz [ 453.040511][ T5170] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 453.198118][ T5201] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.213244][ T5201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.221797][ T5201] usb 5-1: Manufacturer: 啀䙡ӌ杜ẟꟙ𝫖﫬迭砆㹝꽗韝ଘ䔑荲䑵猂嗵罄Ꜿ芗ꧠ剐瘠豊妻취䌩乕鞃▲碩ヸ卹伆艽侁므 [ 453.238561][ T5201] usb 5-1: SerialNumber: syz [ 453.249202][ T1146] usb 6-1: USB disconnect, device number 20 [ 453.532741][ T5201] cdc_ncm 5-1:1.0: bind() failure [ 453.541992][ T5201] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 453.553422][ T5201] cdc_ncm 5-1:1.1: bind() failure [ 453.569586][ T5201] usb 5-1: USB disconnect, device number 16 08:21:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@ipv6_newaddrlabel={0x1c, 0x48, 0x1}, 0x1c}}, 0x0) 08:21:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@setneightbl={0x14, 0x30, 0x1}, 0x14}}, 0x0) 08:21:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x4c, 0x0, 0x0) 08:21:15 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0x2}}, 0x0) 08:21:15 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0xffffff7f) 08:21:15 executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x1f, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @rand_addr, @loopback, @private, @empty]}, @rr={0x7, 0x13, 0x0, [@empty, @private, @local, @multicast2]}, @rr={0x7, 0xb, 0x0, [@loopback, @remote]}]}}}}}}}, 0x0) 08:21:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x2c, 0x2e, 0x1, 0x0, 0x0, {}, [@NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_MCAST_PROBES={0x8}]}, @NDTA_NAME={0xc, 0x1, 'batadv0\x00'}]}, 0x2c}}, 0x0) 08:21:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1}, 0x1c}}, 0x0) 08:21:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x1e}]}, 0x24}}, 0x0) 08:21:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x1e, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 08:21:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@NDTA_PARMS={0x4}, @NDTA_NAME={0xc, 0x1, 'batadv0\x00'}]}, 0x24}}, 0x0) [ 454.261686][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 454.332982][T11838] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 454.361295][T11840] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 454.438362][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:21:16 executing program 0: socket$unix(0x2, 0xa, 0x0) 08:21:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@setneightbl={0x14, 0x1e, 0x1}, 0x14}}, 0x0) 08:21:16 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xe80}}, 0x0) 08:21:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_delrule={0x18, 0x14, 0x1}, 0x1c}}, 0x0) 08:21:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private1, 0x0, 0x0, 0xffff8000, 0x8}}) 08:21:16 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x8004745a, &(0x7f0000000480)) 08:21:16 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x80047456, 0x0) 08:21:16 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x31, 0x0, 0x0) 08:21:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x5, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) 08:21:16 executing program 4: add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000300)="9d", 0x1, 0xfffffffffffffffa) 08:21:16 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x23, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f230002"]}) 08:21:17 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x1f, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @rand_addr, @loopback, @private, @empty]}, @rr={0x7, 0x13, 0x0, [@empty, @private, @local, @multicast2]}, @rr={0x7, 0xb, 0x0, [@loopback, @remote]}]}}}}}}}, 0x0) 08:21:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x30, 0x0, 0x0) 08:21:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x20, 0x1c, 0x1, 0x0, 0x0, {}, [@NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_MCAST_PROBES={0x8}]}]}, 0x20}}, 0x0) 08:21:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_getnexthop={0x1c, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 08:21:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x88, 0x67, 0x0, &(0x7f0000000340)) 08:21:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$MRT6_DEL_MIF(r0, 0x11, 0xcb, 0x0, 0x4) 08:21:17 executing program 3: alarm(0x1) [ 456.100360][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:21:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000300), 0x4) 08:21:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002000)={0xe88, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0xa8, 0x8, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private0, 0x3f}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xd7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PEERS={0xda4, 0x8, 0x0, 0x1, [{0x2e8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2d0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x4c4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "723ab0f2463e6c5ec893cfb7e3119fcb5dd550c477d2b2bcc9bc62a8a41eeecd"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x418, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9240861c623bf18a28dc361f8e61b9c8fd8c615f31c4326f54f8fb5be4d022de"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "20647c7f0143049ef3798d140d257f38060adaa5b6d58c1b91de3af1bdc56e56"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c3cbe463553bdeb09bf6b1b60999632e4dbcb74775e94b8c3916780f1e352306"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8}]}, {0x270, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @remote}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x22c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x29c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cdb956ae8bb6a639011bf98148bd762a91b720518d4b60349200fab0fbb20008"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8f, @loopback, 0xffffff16}}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}]}, 0xe88}, 0x1, 0x0, 0x0, 0x841}, 0x0) 08:21:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x0) 08:21:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x43, 0x0, &(0x7f0000000800)) 08:21:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x24, 0x31, 0x1, 0x0, 0x0, {}, [@NDTA_PARMS={0x4}, @NDTA_NAME={0xc, 0x1, 'batadv0\x00'}]}, 0x24}}, 0x0) 08:21:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x1b, 0x0, 0x0) 08:21:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x13, 0x0, 0x0) 08:21:20 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000480)=0x62) 08:21:20 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x8}, 0x0) 08:21:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) 08:21:20 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x4}, 0xc) 08:21:20 executing program 4: syz_clone(0x15341e00, 0x0, 0x0, 0x0, 0x0, 0x0) 08:21:20 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @remote}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast2}}}}}}, 0x0) 08:21:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private1}}) 08:21:20 executing program 2: syz_usb_connect$uac1(0x0, 0x95, &(0x7f0000001800)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x6, 0x0, "51f8"}, @mixer_unit={0x7, 0x24, 0x4, 0x0, 0x0, "c059"}, @mixer_unit={0x5}, @extension_unit={0x8, 0x24, 0x8, 0x0, 0x0, 0x0, "81"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9d}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x1, {0x7}}}}}}}]}}, 0x0) 08:21:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x32, 0x0, &(0x7f0000000340)) 08:21:20 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000480)=0x1f00) 08:21:20 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x23, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f23"]}) 08:21:20 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{}]}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x23, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f230002"]}) 08:21:20 executing program 4: bpf$MAP_CREATE(0x3, &(0x7f0000000180), 0x48) 08:21:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x20, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xc, 0x1, 'batadv0\x00'}]}, 0x20}}, 0x0) 08:21:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x98}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 08:21:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000043d534"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r0) 08:21:20 executing program 0: getresuid(&(0x7f0000008f80), &(0x7f0000008fc0), &(0x7f0000009000)) [ 459.641290][ T921] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 459.702304][ T28] audit: type=1326 audit(1703492480.872:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x0 08:21:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0x341}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 08:21:20 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="657da98f78a5", @random="51f168bbd6fa", @val, {@ipv4}}, 0x0) [ 459.758549][ T5201] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 459.901214][ T1146] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 459.909927][ T921] usb 3-1: Using ep0 maxpacket: 32 [ 460.028047][ T921] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 460.038734][ T5201] usb 2-1: Using ep0 maxpacket: 32 [ 460.045503][ T921] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 460.073332][ T921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.082748][ T921] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 460.157897][ T1146] usb 4-1: Using ep0 maxpacket: 32 [ 460.248083][ T5201] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 460.266064][ T921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.275566][ T921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.284047][ T921] usb 3-1: Product: syz [ 460.293590][ T921] usb 3-1: Manufacturer: syz [ 460.298170][ T1146] usb 4-1: descriptor type invalid, skip [ 460.298664][ T921] usb 3-1: SerialNumber: syz [ 460.304963][ T1146] usb 4-1: descriptor type invalid, skip [ 460.408116][ T1146] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.419233][ T1146] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.428287][ T5201] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.432309][ T1146] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.441752][ T5201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.451260][ T1146] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 460.469562][ T1146] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 460.472850][ T5201] usb 2-1: Product: syz [ 460.481063][ T1146] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 460.491582][ T5201] usb 2-1: Manufacturer: syz [ 460.500748][ T5201] usb 2-1: SerialNumber: syz [ 460.552509][ T5201] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 460.638360][ T921] usb 3-1: 0:2 : does not exist [ 460.663327][ T921] usb 3-1: USB disconnect, device number 22 [ 460.678091][ T1146] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.692033][ T1146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.705358][ T8273] udevd[8273]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.712477][ T1146] usb 4-1: Product: syz [ 460.737633][ T1146] usb 4-1: Manufacturer: syz [ 460.744067][ T1146] usb 4-1: SerialNumber: syz [ 460.767039][ T5201] usb 2-1: USB disconnect, device number 11 [ 460.801046][ T1146] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 461.007235][ T1146] usb 4-1: USB disconnect, device number 14 08:21:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xa, @empty}, 0x10) 08:21:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000021c0)={'vxcan0\x00'}) 08:21:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0x341}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 08:21:22 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000005e40), r0) 08:21:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000640)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000002000)={0xe84, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xa8, 0x8, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private0, 0x3f}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xd7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PEERS={0xcc8, 0x8, 0x0, 0x1, [{0x2e8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2d0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x4c4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "723ab0f2463e6c5ec893cfb7e3119fcb5dd550c477d2b2bcc9bc62a8a41eeecd"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x418, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9240861c623bf18a28dc361f8e61b9c8fd8c615f31c4326f54f8fb5be4d022de"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "20647c7f0143049ef3798d140d257f38060adaa5b6d58c1b91de3af1bdc56e56"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c3cbe463553bdeb09bf6b1b60999632e4dbcb74775e94b8c3916780f1e352306"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @remote}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_ALLOWEDIPS={0x13c, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}]}, {0x2c0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cdb956ae8bb6a639011bf98148bd762a91b720518d4b60349200fab0fbb20008"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8f, @loopback, 0xffffff16}}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_PEERS={0xf4, 0x8, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x90}}]}]}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0xe84}, 0x1, 0x0, 0x0, 0x841}, 0x0) 08:21:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 08:21:22 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6 \x00'}, 0x20) 08:21:22 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x30}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 08:21:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0x7c0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)="694d927d57f8bd96b8bcb489688bd24628437a4c", 0x14}, {&(0x7f0000001340)="692ea1a182bef7fad32c5aec386dbb5f8cfecf2abf8fdc41970425ac39ee12049b58f185c47aa2d2f2cb37f0f856879ecccf1e78acf17802f9a0814a34e400c8e90e7d6b8a3189a5e7debf01cd456c9839f10221385b23e0432a4ded07497e6e9483371437d3038562785a684a90e3194ca3d00b922dc0adc6023e26749e43071895d5cb24f2420e50a6096950602cf45c75d8a02207d4bfb97ce2b6c95e0506608329efaea8461bea42d792deebef184fd73c8bc81e8f0f75db36b3226201195a8dd6f8139d939f9a0324ff4a5f3d2e68bb327723909b8ce2b46111d67de590e3c2c9120675b451a056825afda92e04792fa5ad8870995953df080b2d03cdc2f2985437ce1931858f4d289079f9751ac4469aa6976d44c10235ce0245b1124637eadf6c6f69091e9c8b5700f8f99c2d37747109d8183792355a23b9193df2b71549cde4879cdc3188381d26aa855c7b242278590abd8a", 0x157}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 08:21:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f00000003c0)) 08:21:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000080)) 08:21:22 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 08:21:22 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0x62c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 08:21:22 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:22 executing program 3: socketpair(0x28, 0x0, 0x751, &(0x7f00000053c0)) 08:21:23 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) 08:21:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4084) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 08:21:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000020e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000900)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 08:21:23 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000008240), 0xffffffffffffffff) 08:21:23 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 462.050705][T11970] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 462.093822][T11970] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 462.108773][T11970] bridge0: port 3(team0) entered blocking state [ 462.158004][T11970] bridge0: port 3(team0) entered disabled state [ 462.166944][T11970] team0: entered allmulticast mode [ 462.177199][T11970] team_slave_0: entered allmulticast mode [ 462.201493][T11970] team_slave_1: entered allmulticast mode [ 462.232216][T11970] team0: entered promiscuous mode [ 462.255524][T11970] team_slave_0: entered promiscuous mode [ 462.277247][T11970] team_slave_1: entered promiscuous mode [ 462.315942][T11970] bridge0: port 3(team0) entered blocking state [ 462.322977][T11970] bridge0: port 3(team0) entered forwarding state 08:21:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0393db1036a1ec8a376c919cdd0b40dbb899c07f1349c7a1113f57495c795bc7e38166a7bdef463457189549f4b13279fffd050bdfea3477a62d3edea8321a2e98c65330fe7199ca6bee7202aa5a5d56c4ed4c22dbb28cebcaec033c75eb78820ad1d8ceb6f90b569e165002e702e1a206666d3c9d903ce78c73f778eae82d58317c634016a3e01ae29607f7b5ff253c607e4f60c0aa49021205073cdd574a3d4c25fbf79cc8ac99ff149ae54aa56286204e628dc2dfe4384ef74c8dac04ace6c5762d03f9e19942e4b6bbbb41fefc569cc23b3319d4ebc55551fecf8f936221e9787e744f2e1422baaa25b2f5bf59205190b7fe52f0641f149c5e00b764c493afadeaa04324783c268f48772b1c532d52d211865704db5fbafc3193385adc9855a1ad9ea0c05479329efd6c08ed22c5656eab2ea050f53bf441a9dfb4157d14b99214fa59b8b0e53200795762145a63d61c5c526edb03429e1e14072e1d7dff102fdb9801234bbbb8e0274a861dd60f3a21f129326b2f6fee61f690fa3967cdc5f6f9519282c48e28d6aa7d1b0ed07bdd72ebf1dd97b46f24ffde352095f4bffd6fdd0b9f0d60f16746f1c1ec46656cf94ae2237540c558c1863fb2ffd4619e5ee5b7aa5757e252b821e003fcef57f33cd70f19ec0b5f8098c030741147e8e4319109892fd56b22d261800b7107a393b9a7d835383e3504f5f2794f30914c4f8145ed446a06e3787eb32ab90abf595d45013c8b6d9c26cf4e60812b02427a4d2a8dcbdfaf8ace4e17f0f598676a5f26dc3615eddea77e1d68c857fbe2b39b67ccacd6afcea94b4f9592490c1a51e11f4ffc6dd4d4cdc44995b09864743b906e07a12c93045b654abf2faaf1127ee92698e09efee1d8d45ceb103973c3d1d5c98090d9af08789f867873bbeb522cb367bacaf2d94bc6fa7aab57b542af353d693230a3da636762204d96f2889f7decc9ad3992a8be2be92bdd6a7367bd64c8604ec219a92c80a7536f218926b5d18677f4bc22454a843f7ec6bfaadaec1a47896f902725cddc264226a0c7f673468459528101da2368d77d37d9ae6d52cb44efb9b5af74fdd4c8341980d7b3f4a3176c8de3c3a0144e3f327fcb30c6bda7a62ec37215367d06ef1b85fa2bc329fe99071f65b0d5a48b50139016b0753bc99c389f4aba551bf2da38b78e7b4dbb3be3ecf8749b39a022c86febf3a30070def590bd2a9cb0f95d09eac8de27c370d758e340193773a7dfbb2046e0b2e34bef073ed8368f4fbf464206fbe88c3260f6974b383bcf8a000db483d822536000df416d09dfc55c920cbc3c8b24af1757099903759e9312b576b9f04e61ae20a60d7d0ce978d193dbf9e7a20c04b4f985936402823feb4c045be085b565c283602d9f4c7efe1db4d81f126855712cb5d9cc86250c4b81f4cd823b4b3204d5e88c77f671b93f8ca0d7846a4eb429ab9aa3c8283e3aabe924b5b33d99ba5933d79856316642459e1b0806a0f7546fcf2db6159ad2f5d28c0141dc8777dbc67e3d1b02e2daa828eee0bb0fae22852012318cef6d55e0677fe28340f7c02b20ddbbeef78b6522d5c90540939b471306acadbfda2c3a91f9b5fa4d201c484b4a092a05fb2473610be8d70e662dd3113c892a5dab15e374ee246df73d53aadf43e46ef5fc5e53f81eeb8e234b4d4a26112e6db1f1ee915977a4aa2a564641ed13892342e76790b4a221977e1ac1692ff952c09f8f3405ed8867b36ca056d2b2457888cb6b5cf4a36beee3b493e26909614114a013855a1761c7597bd289bdc00ab3cbfb0735c865a025f56c2fb288e2348d65567931a3ab4bd83accb0b037b9379158ff7c2876f0444515a56d16acbb437fe9b91ede3622649ad89f377577a70f3abb37fd9f0a732cf849dd781eae1893bce173af5c455ba9f31259928ce60c338d74fcd1cf171b9fdc7db75b85114102e4c25f06540958e675ed538fc61b0243cd6a4565f8ffacb73032f13c4ba242671d2328aef233e921d19d625", 0x5ed}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001cc0)="e98f0bf058597735ffb47ecd712fc0840875cf3ae0200f93c254430122a394d34bbcfc923590058554d06e82f550bc901c4f228c05642409ab570157a85d38a7edf4867d0feedc3a71d48477c16d0c3710ab39889305dc048e3cb4cdfa5d543483368aca8da5085892055b3f06fc4e951f0ba7e9972e92b07c20b4f597a74bdd92d95129336a0e504b661cdabf48335aa99f4a33499610179c3c2b8918a7675b8c157927365faef1aaf71ea51969c040c51eabccd16837e66450c59466e566e5b2d685c980b8bc827f714eb6e6c696cf312e8da352cfeb80cfda9ec8215c", 0xde}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f65", 0x7, 0x11, 0x0, 0x0) 08:21:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000fffeffffffffffffffffffff8100000086dd60d0900a00142c0000000000000000000000c4ac6202ee8e0b"], 0x52) 08:21:23 executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 08:21:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) 08:21:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x1c, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 08:21:23 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@bridge_getlink={0x50, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x34020, 0x4800}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x44e2}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_NET_NS_FD={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80000000}]}, 0x50}}, 0x4000040) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001cc0)="e9", 0x1}], 0x1}}], 0x1, 0x0) 08:21:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x15}, @void}}}, 0x1c}}, 0x0) 08:21:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x208000, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 08:21:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 08:21:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x0, 0x3, 0x101}, 0x14}}, 0x0) 08:21:24 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8934, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000200)={0x0, 0xc00, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x6ce643c71059ad, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000000)=r3) 08:21:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 08:21:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={0x0}}, 0x40001) 08:21:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x1c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:21:24 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, 0x0) 08:21:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@bridge_getlink={0x50, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x34020, 0x4800}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x44e2}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_NET_NS_FD={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80000000}]}, 0x50}}, 0x4000040) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001cc0)="e9", 0x1}], 0x1}}], 0x1, 0x0) 08:21:24 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:24 executing program 3: socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000080)={0xff67, 0x2}, 0x10) 08:21:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x101, 0x6, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}]}, 0x34}}, 0x0) 08:21:24 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000008000000000002", @ANYRES32], 0x48}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000020e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 08:21:24 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @random="7a2b950c5f47", @val, {@ipv6}}, 0x0) 08:21:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0x7a5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001cc0)="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", 0x2eb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001040)="541173bb5a7d621d6e36f6b69f501fa94a93f497dc2a276f947ad8de818ca697f993f9e82472f8f876229703c8fea2007f14f122ae119452910f01030b06a2a15f7fb2901f00ff478985dcf5abcf49060e8037c86111f4180cab9393d11294e3649b10a1be460f47f288e4d0a888dff22aa095d706ea64cc2fae313ba76bbba88ebfb258006a2290d547e9050899b98606a2c51490fd160f89289966d26aac31db9606983a12fc97ad69b8200031c3f445dd5a503127ee93267477b7dff6265e4f3abc318335eb32236b10d85316e52b4a10c49076b31be4601f0997a2e4e2ef20e9c545f08b449528856da1fd01dfe10cb2d461f8", 0xf5}, {&(0x7f0000000340)="694d927d57f8bd96b8bcb489688bd24628437a4c", 0x14}, {&(0x7f0000001340)="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", 0x164}], 0x3}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 463.401551][T12027] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 08:21:24 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) 08:21:24 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) 08:21:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@bridge_getlink={0x50, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x34020, 0x4800}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x44e2}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_NET_NS_FD={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80000000}]}, 0x50}}, 0x4000040) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001cc0)="e9", 0x1}], 0x1}}], 0x1, 0x0) 08:21:24 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 08:21:25 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0x6c1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001cc0)="e98f0bf058597735ffb47ecd712fc0840875cf3ae0200f93c254430122a394d34bbcfc923590058554d06e82f550bc901c4f228c05642409ab570157a85d38a7edf4867d0feedc3a71d48477c16d0c3710ab39889305dc048e3cb4cdfa5d543483368aca8da5085892055b3f06fc4e951f0ba7e9", 0x74}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1", 0x25, 0x11, 0x0, 0x0) 08:21:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 08:21:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) 08:21:25 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002200)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_id}, 0x20) socketpair(0x21, 0x0, 0x0, &(0x7f0000002480)) 08:21:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac040000", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf2514000000800002802c00038008000200000080ff080001000600000008000100000000000800020007000000080002000100000004000400040004001c00038008000100000000000800020001000000080002001f00000004000400b600038008000100040000001400038008000200de000000080002000100000008000100010000001c000280080001006025ffff0800010000000000080002000500000044010680080006008100000008000100000000000400050004000200810003001fab449092b93419f68b35de932e6e6c3548465a14fc216e4a93bc4209868dd5e4a2e6a12f5a33e49e1b9f7c255b815c4a2c00a0c7b4cb333b26fc080b07a7e1f789049cc326fd27dd774cfb8d637ec1ae331f8ee5e8bf816d28b7b9224e83fc17051e70eaa3058fea5dd1be2830b0c97e77ded4e675fd00ba681b5c760000004b00040067636d2861657329000000000000000000000000000000000000000000000000230000006a19b57cf825c023d4174daedfa074696fb35d1ab572e9a026e842aa2cf87147ad0ac80008000600070000000400020008000100080000004400040067636d28616573290000000000000000000000000000000000000000000000001c00000080c4a64b96f848d3279fd5a5705aa31e2b184cb6d3a85552d12b101a5c0006800400020008000100c3000000040005004700040067636d28616573290000000000000000000000000000000000000000000000001f00000036a72ef9f664a67f0e272b6edf695440412b3b6294740a8b61742bea74abb600380007800c00040000000000000000000800020006"], 0x4ac}}, 0x0) 08:21:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@bridge_getlink={0x50, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x34020, 0x4800}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x44e2}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_NET_NS_FD={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80000000}]}, 0x50}}, 0x4000040) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001cc0)="e9", 0x1}], 0x1}}], 0x1, 0x0) [ 464.324020][T12064] netlink: 548 bytes leftover after parsing attributes in process `syz-executor.3'. [ 464.367925][T12064] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 08:21:25 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000020e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001cc0)="e98f0bf058597735ffb47ecd712fc0840875cf3ae0200f93c254430122a394d34bbcfc923590058554d06e82f550bc901c4f228c05642409ab570157a85d38a7edf4867d0feedc3a71d48477c16d0c3710ab39889305dc048e3cb4cdfa5d543483368aca8da5085892055b3f06fc4e951f0ba7e9972e92b07c20b4f597a74bdd92d95129336a0e504b661cdabf48335aa99f4a33499610179c3c2b8918a7675b8c157927365faef1aaf71ea51969c040c51eabccd16837e66450c59466e566e5b2d685c980b8bc827f", 0xc9}], 0x1}}], 0x1, 0x0) 08:21:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x100, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 08:21:25 executing program 3: getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) 08:21:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) 08:21:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@bridge_getlink={0x50, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x34020, 0x4800}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x44e2}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_NET_NS_FD={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80000000}]}, 0x50}}, 0x4000040) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) [ 464.596214][T12072] netlink: 'syz-executor.2': attribute type 10 has an invalid length. 08:21:25 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005d40)=@bpf_lsm={0x1d, 0x3, &(0x7f0000005640)=@framed, &(0x7f0000005740)='GPL\x00', 0x8, 0x1a, &(0x7f0000005780)=""/26, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000005940), 0x8}, 0x90) 08:21:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000002480)=[{&(0x7f0000002500)="ae545f758626b134c0f8a060b4e1d637843b90907d3b11d17440fcff96c4359a6d0fa5bdddd200fd668b81d8320b42a38872cb9962ebee2893724e6615d4cca83e7045a372ccff9336464c8029d96c8386a942b898ad7494334294f0a1e16cfc310f38a7130a5351f1dc07d9f9cb76a220f0ccf0d4cf3de01c65569adff6d4c727fa7ff4d88b6672b328e8d40c6e9f8b11efaa8fd0218d6a0eddfcbf4bce9b250400900be488720098398f687aa8493514301d46f6072c2007956404707096f6678f0037337c87a46b04d36e17bb8acd428804a7346a8ce7727314f07953", 0xde}, {&(0x7f0000000180)="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", 0x6a6}], 0x2) 08:21:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 08:21:26 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0x67d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)}, {&(0x7f0000001cc0)="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", 0x2e6}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_u8={{0x11}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="542d990d747aa07252f0136578b21577bf4c4de3b1d50c17905bfb35505fd32dd34b508df35f95f573924e807ecdf84aa288b8bf78c5ee04c2d494", 0x3b}, {&(0x7f0000001040)="541173bb5a7d621d6e36f6b69f501fa94a", 0x11}], 0x2}}], 0x4, 0x0) 08:21:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@bridge_getlink={0x50, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x34020, 0x4800}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x44e2}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_NET_NS_FD={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80000000}]}, 0x50}}, 0x4000040) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 08:21:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000640)="af", 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="55d575b1585c245747c0ee0409db24dd78cd3a39eb6125b3fd068d674cec208a30c9938f7480ea1796afbb00e8a06befdfcce9fd9badc7b540197b4885e65ea1024a9abfe4065f3f073a03dcbac82b2ff133dfa40185791467eadc3b31dea14d17eb65758b79c1586c4d324842fa05a2cc4a69041fd9bef9ba50aa9851fbdd73db54bb3298e40ac06abf5f5d6be792ba74e92775f437ebacf3f67567e80b195b47a4132cfbf95885394c77e455315dc0d3dfc6cf8367f8deca6f95f1d7ef26ae0e100ad48cf466bdfe", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="2ed90ebf63c047bb14f76eece1316370f66c8b0c06ba8cd7dee0298ea91f1ac76916bbe3d7beeb8761dabe0f04fc73d920c30d1dd63db59e4ab489ae080b8721840873d7da8ee1a95e598ea4d397ee3e9c418834a71bd9193beaeb92a879be60ebb83159835055b7", 0x68}], 0x1}}], 0x2, 0x80) 08:21:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="b99e", 0x2}], 0x1, &(0x7f0000000200)=[@dstopts_2292={{0x11}}, @dontfrag={{0x14}}], 0x30}}], 0x1, 0x0) 08:21:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0393db1036a1ec8a376c919cdd0b40dbb899c07f1349c7a1113f57495c795bc7e38166a7bdef463457189549f4b13279fffd050bdfea3477a62d3edea8321a2e98c65330fe7199ca6bee7202aa5a5d56c4ed4c22dbb28cebcaec033c75eb78820ad1d8ceb6f90b569e165002e702e1a206666d3c9d903ce78c73f778eae82d58317c634016a3e01ae29607f7b5ff253c607e4f60c0aa49021205073cdd574a3d4c25fbf79cc8ac99ff149ae54aa56286204e628dc2dfe4384ef74c8dac04ace6c5762d03f9e19942e4b6bbbb41fefc569cc23b3319d4ebc55551fecf8f936221e9787e744f2e1422baaa25b2f5bf59205190b7fe52f0641f149c5e00b764c493afadeaa04324783c268f48772b1c532d52d211865704db5fbafc3193385adc9855a1ad9ea0c05479329efd6c08ed22c5656eab2ea050f53bf441a9dfb4157d14b99214fa59b8b0e53200795762145a63d61c5c526edb03429e1e14072e1d7dff102fdb9801234bbbb8e0274a861dd60f3a21f129326b2f6fee61f690fa3967cdc5f6f9519282c48e28d6aa7d1b0ed07bdd72ebf1dd97b46f24ffde352095f4bffd6fdd0b9f0d60f16746f1c1ec46656cf94ae2237540c558c1863fb2ffd4619e5ee5b7aa5757e252b821e003fcef57f33cd70f19ec0b5f8098c030741147e8e4319109892fd56b22d261800b7107a393b9a7d835383e3504f5f2794f30914c4f8145ed446a06e3787eb32ab90abf595d45013c8b6d9c26cf4e60812b02427a4d2a8dcbdfaf8ace4e17f0f598676a5f26dc3615eddea77e1d68c857fbe2b39b67ccacd6afcea94b4f9592490c1a51e11f4ffc6dd4d4cdc44995b09864743b906e07a12c93045b654abf2faaf1127ee9269", 0x2c8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600)=0x1801, 0x4) 08:21:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 08:21:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0xeac}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) 08:21:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000180)) 08:21:26 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 08:21:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@bridge_getlink={0x50, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x34020, 0x4800}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x44e2}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_NET_NS_FD={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80000000}]}, 0x50}}, 0x4000040) socket(0x0, 0x0, 0x0) 08:21:26 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000099c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000040)="c4", 0x1}], 0x1}}], 0x1, 0x845) 08:21:26 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0xfe}}}]}, 0x78}}, 0x0) 08:21:26 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/2327], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', r3, 0x29, 0x0, 0x20, 0xffffffff, 0x1, @empty, @private0, 0x10, 0x8000, 0x6, 0xffffffff}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r4, &(0x7f0000001600)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000080)="f842", 0x2}], 0x1, 0x0, 0x3d}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r7, r5}) write$binfmt_misc(r6, &(0x7f0000000440)={'syz0'}, 0xfdef) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000b80)=0xc) [ 465.604433][T12120] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 08:21:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 08:21:27 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:27 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0xfe}}}]}, 0x78}}, 0x0) 08:21:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 08:21:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@bridge_getlink={0x50, 0x12, 0x400, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x34020, 0x4800}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x44e2}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_NET_NS_FD={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80000000}]}, 0x50}}, 0x4000040) 08:21:27 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f0000001a00)={&(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xff}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000001440)="56294a1e", 0x4}], 0x1}, 0x0) 08:21:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), 0xffffffffffffffff) 08:21:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000640)=@dellink={0x34, 0x11, 0x531, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dvmrp0\x00'}]}, 0x34}}, 0x0) 08:21:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0x758}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001cc0)="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", 0x2eb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)}, {&(0x7f0000001040)="541173bb5a7d621d6e36f6b69f501fa94a93f497dc2a276f947ad8de818ca697f993f9e82472f8f876229703c8fea2007f14f122ae119452910f01030b06a2a15f7fb2901f00ff478985dcf5abcf49060e8037c86111f4180cab9393d11294e3649b10a1be460f47f288e4d0a888dff22aa095d706ea64cc2fae313ba76bbba88ebfb258006a2290d547e9050899b98606a2c51490fd160f89289966d26aac31db9606983a12fc97ad69b8200031c3f445dd5a503127ee93267477b7dff6265e4f3abc318335eb32236b10d85316e52b4a10c49076b31be4601f0997a2e4e2ef20e9c545f08b449528856da1fd01dfe10cb2d461f8", 0xf5}, {&(0x7f0000000340)="694d927d57f8bd96b8bcb489688bd2462843", 0x12}, {&(0x7f0000001340)="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", 0x162}], 0x4}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 08:21:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0x786}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001cc0)="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", 0x17b}], 0x1}}], 0x2, 0x0) 08:21:27 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:27 executing program 4: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x900}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 08:21:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) 08:21:27 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 08:21:27 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "126157", 0x18, 0x6, 0x0, @empty, @mcast2, {[@srh], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, "ff1ada"}}}}}}}, 0x0) 08:21:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000001340)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21, @loopback}], 0x20) 08:21:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x15, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000001a850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 08:21:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) 08:21:27 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:28 executing program 5: mq_open(&(0x7f0000000500)='SB\vLD7h\x05 V\x80`<\xd3\xea~\xae)\xb4\xe2|\xe5T\x1e#\x18\xbd\xd9\x88\xc2\a\x91\x83\x9fq\xb8\xa2\xd8\xb0L\x17\xa6\x1b\x0fD\xbc$i\x9c\xb0\xcb\xde\xad:.\xbb?X\x00?\xf2\x91\xde\xd3a\xed\xdf1}\xe95\x10&\xb6\xa1j-\xa4\xfda\x8c@\xac\xc9\x9ag\xbbr\xe0\xf3\x8bQ\x1a\x92M\xf4/\xfa\x16m\xdc\xf0\xd6\xad\xf7\xe6e\xdf\xaa\xb8\xde\xb0q\x8b\x12\x18\x7fu\xe9\xb3t\xd3\xf89_\xf5\x01S\xe1\x86\xbfAIU\t\xfa\xa5n\x90\xabG\x96\xd1U&B@\f\x89^s2\xfcI\x8e\xd7r\xebY(\b\xbd\xfeL\x9b\xa0C{\xc8\x89\x93q\xf5\xa6\xa3q8\x8d$\x85\"\xbc\x9dtu\xe1!\xcf\x8a\xa0G\xaf\x9dn\x19\x0e\x9b09\x93~\b\xdf\xaf\xe2SY\x9cT6&7\x16\xb7V\xe48\xa2\'%\x85V\x1aZ\x99\xa3\xb2\xb3\xc7\xb9D\xe3\xa3`3\xf4\xa68&\x8a\xa3\x98OU\xd6UKz\x99&\x9e\xe0\x9b\xbaS\xee\xa1\xfe\xe11\xa8\t\x18.\xf3\x01\xc1@\xb6\xafNT\xaf\x11\xfd\x9b\xced\xe6\xc5\xdf79\xbd\x9d,\xf0N\x87,7N\xb6~V\xe6\x16;.j\xc8\x82\x18S\xce\xfa\xb0\x9d\xa6;~]\x14\xb9\xa9\xba\xa6\x15\x8f<\x8c\x82\x1d\x910\xfb7\xe7c\xc6\x92\x15\x140\xa3\x05v\xe4\xe4\xc0\xb4\xaeW\xab\xcb\x12b\xe4\xf3n\xb0\n\xd3\x81\\;(\xe5\xcd5\xa3\xc3\xf9j\n\xff\xe3\xf7\xcc\x1cJ\x15\x05\x82\x9e]\xcfwH\xeb\x90\xdd\xc5\x00\x00\x00\x00\x00T\xde\xa8\xda\xaeL\x9b\xc5\x97\xeaz\x88\xb0\x839\xf0\xde\xc45\x06\xf1\x7f\x11\xee~W\xa7\x00\xeex\xaf\x8bk\x99\xca)\x8a\xd5\x04_p\xae\xc2\x13\x96\x7f(\xadd&t\xe7\xfaQ\xd4w\xe2\xd4\x1c\xa5\xfb\x17\xeb\xd3\x99-\x15R;\xd7l\xc7!\x16\xf4S\xd9\xd3\xc6+-\x11\xda\x82\x9f\xd5r\xaa+\xf4\xdc\xafix\x81\x90\xde\xf6=?\x15\xe7l\xab\xa5\x0f\xa9\xc7\x98\xef\x19\xb2\x83\xa7\xbf\xcb3\x81\x16o\xe2Ei-\xad!(z\\\x1dR\x1a~\xd2hb<\xb2\xa6\x1e\xa9 \x1a\xab$4\xa4\x0fz\xdf\xabk\xa0\x19\x8e\xfe\xef\x03v\xe4\xcbdxh;K', 0x80, 0xc0, &(0x7f0000000000)) 08:21:28 executing program 3: r0 = shmget(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) 08:21:28 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000002080)={0x18}, 0xffffffffffffff79) 08:21:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:28 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0393db1036a1ec8a376c919cdd0b40dbb899c07f1349c7a1113f57495c795bc7e38166a7bdef463457189549f4b13279fffd050bdfea3477a62d3edea8321a2e98c65330fe7199ca6bee7202aa5a5d56c4ed4c22dbb28cebcaec033c75eb78820ad1d8ceb6f90b569e165002e702e1a206666d3c9d903ce78c73f778eae82d58317c634016a3e01ae29607f7b5ff253c607e4f60c0aa49021205073cdd574a3d4c25fbf79cc8ac99ff149ae54aa56286204e628dc2dfe4384ef74c8dac04ace6c5762d03f9e19942e4b6bbbb41fefc569cc23b3319d4ebc55551fecf8f936221e9787e744f2e1422baaa25b2f5bf59205190b7fe52f0641f149c5e00b764c493afadeaa04324783c268f48772b1c532d52d211865704db5fbafc3193385adc9855a1ad9ea0c05479329efd6c08ed22c5656eab2ea050f53bf441a9dfb4157d14b99214fa59b8b0e53200795762145a63d61c5c526edb03429e1e14072e1d7dff102fdb9801234bbbb8e0274a861dd60f3a21f129326b2f6fee61f690fa3967cdc5f6f9519282c48e28d6aa7d1b0ed07bdd72ebf1dd97b46f24ffde352095f4bffd6fdd0b9f0d60f16746f1c1ec46656cf94ae2237540c558c1863fb2ffd4619e5ee5b7aa5757e252b821e003fcef57f33cd70f19ec0b5f8098c030741147e8e4319109892fd56b22d261800b7107a393b9a7d835383e3504f5f2794f30914c4f8145ed446a06e3787eb32ab90abf595d45013c8b6d9c26cf4e60812b02427a4d2a8dcbdfaf8ace4e17f0f598676a5f26dc3615eddea77e1d68c857fbe2b39b67ccacd6afcea94b4f9592490c1a51e11f4ffc6dd4d4cdc44995b09864743b906e07a12c93045b654abf2faaf1127ee92698e09efee1d8d45ceb103973c3d1d5c98090d9af08789f867873bbeb522cb367bacaf2d94bc6fa7aab57b542af353d693230a3da636762204d96f2889f7decc9ad3992a8be2be92bdd6a7367bd64c8604ec219a92c80a7536f218926b5d18677f4bc22454a843f7ec6bfaadaec1a47896f902725cddc264226a0c7f673468459528101da2368d77d37d9ae6d52cb44efb9b5af74fdd4c8341980d7b3f4a3176c8de3c3a0144e3f327fcb30c6bda7a62ec37215367d06ef1b85fa2bc329fe99071f65b0d5a48b50139016b0753bc99c389f4aba551bf2da38b78e7b4dbb3be3ecf8749b39a022c86febf3a30070def590bd2a9cb0f95d09eac8de27c370d758e340193773a7dfbb2046e0b2e34bef073ed8368f4fbf464206fbe88c3260f6974b383bcf8a000db483d822536000df416d09dfc55c920cbc3c8b24af1757099903759e9312b576b9f04e61ae20a60d7d0ce978d193dbf9e7a20c04b4f985936402823feb4c045be085b565c283602d9f4c7efe1db4d81f126855712cb5d9cc86250c4b81f4cd823b4b3204d5e88c77f671b93f8ca0d7846a4eb429ab9aa3c8283e3aabe924b5b33d99ba5933d79856316642459e1b0806a0f7546fcf2db6159ad2f5d28c0141dc8777dbc67e3d1b02e2daa828eee0bb0fae22852012318cef6d55e0677fe28340f7c02b20ddbbeef78b6522d5c90540939b471306acadbfda2c3a91f9b5fa4d201c484b4a092a05fb2473610be8d70e662dd3113c892a5dab15e374ee246df73d53aadf43e46ef5fc5e53f81eeb8e234b4d4a26112e6db1f1ee915977a4aa2a564641ed13892342e76790b4a221977e1ac1692ff952c09f8f3405ed8867b36ca056d2b2457888cb6b5cf4a36beee3b493e26909614114a013855a1761c7597bd289bdc00ab3cbfb0735c865a025f56c2fb288e2348d65567931a3ab4bd83accb0b037b9379158ff7c2876f0444515a56d16acbb437fe9b91ede3622649ad89f377577a70f3abb37fd9f0a732cf849dd781eae1893bce173af5c455ba9f31259928ce60c338d74fcd1cf171b9fdc7db75b85114102e4c25f06540958e675ed538fc61b0243cd6a4565f8ffacb73032f13c4ba242671d2328aef233e921d19d625e79cde9d1b1c4f3e9e3a52e2f333050c1661b294a919faad9e946d893588ba0fbab294dc911af4cb782abcbf628adf724410f1014d70a0aabcaa7a9ec25c967293b1849e2dcaeafa6ce0c4c6cc82709aea742bb3e77e97f62a6953062e5eee17917ca8b6cd141f3f1708f29ecce6956380f04d27f121ac5841abb56f8c2db7c162ff0ea80652372c3762b1c8cefb434a452cc3c6e2116ec637ebaa6eb80497195f2dc027dc6d007486b4d34302962e7b1afcae8d3c50477ce229b560511b5cc08b350a2fe8c49697a110574e85acaa6b3d1410fa7ce314d250009b304b49230e4e54f6a84ea7d28907ca65ee7017de404772a7ad171737fe048fec238b8720f78a42768b0a438261b799a5cd8128cad10810eee0c034ea4514fd41cae01c6814881914bf6f67087264f0c1ca1a8991f4c32be3fea66d17968e214a571e075ce137c8c59193edcf52f2f3ba392c3242f94fc4c44d30d2a49b58a42fa60dacf646d5976969fad6de5cdc69ea", 0x758}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001cc0)="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", 0x2eb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)}, {&(0x7f0000001040)="541173bb5a7d621d6e36f6b69f501fa94a93f497dc2a276f947ad8de818ca697f993f9e82472f8f876229703c8fea2007f14f122ae119452910f01030b06a2a15f7fb2901f00ff478985dcf5abcf49060e8037c86111f4180cab9393d11294e3649b10a1be460f47f288e4d0a888dff22aa095d706ea64cc2fae313ba76bbba88ebfb258006a2290d547e9050899b98606a2c51490fd160f89289966d26aac31db9606983a12fc97ad69b8200031c3f445dd5a503127ee93267477b7dff6265e4f3abc318335eb32236b10d85316e52b4a10c49076b31be4601f0997a2e4e2ef20e9c545f08b449528856da1fd01dfe10cb2d461f8", 0xf5}, {&(0x7f0000000340)="694d927d57f8bd96b8bcb489688bd2462843", 0x12}, {&(0x7f0000001340)="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", 0x162}], 0x4}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 08:21:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0393db1036a1ec8a376c919cdd0b40dbb899c07f1349c7a1113f57495c795bc7e38166a7bdef463457189549f4b13279fffd050bdfea3477a62d3edea8321a2e98c65330fe7199ca6bee7202aa5a5d56c4ed4c22dbb28cebcaec033c75eb78820ad1d8ceb6f90b569e165002e702e1a206666d3c9d903ce78c73f778eae82d58317c634016a3e01ae29607f7b5ff253c607e4f60c0aa49021205073cdd574a3d4c25fbf79cc8ac99ff149ae54aa56286204e628dc2dfe4384ef74c8dac04ace6c5762d03f9e19942e4b6bbbb41fefc569cc23b3319d4ebc55551fecf8f936221e9787e744f2e1422baaa25b2f5bf59205190b7fe52f0641f149c5e00b764c493afadeaa04324783c268f48772b1c532d52d211865704db5fbafc3193385adc9855a1ad9ea0c05479329efd6c08ed22c5656eab2ea050f53bf441a9dfb4157d14b99214fa59b8b0e53200795762145a63d61c5c526edb03429e1e14072e1d7dff102fdb9801234bbbb8e0274a861dd60f3a21f129326b2f6fee61f690fa3967cdc5f6f9519282c48e28d6aa7d1b0ed07bdd72ebf1dd97b46f24ffde352095f4bffd6fdd0b9f0d60f16746f1c1ec46656cf94ae2237540c558c1863fb2ffd4619e5ee5b7aa5757e252b821e003fcef57f33cd70f19ec0b5f8098c030741147e8e4319109892fd56b22d261800b7107a393b9a7d835383e3504f5f2794f30914c4f8145ed446a06e3787eb32ab90abf595d45013c8b6d9c26cf4e60812b02427a4d2a8dcbdfaf8ace4e17f0f598676a5f26dc3615eddea77e1d68c857fbe2b39b67ccacd6afcea94b4f9592490c1a51e11f4ffc6dd4d4cdc44995b09864743b906e07a12c93045b654abf2faaf1127ee92698e09efee1d8d45ceb103973c3d1d5c98090d9af08789f867873bbeb522cb367bacaf2d94bc6fa7aab57b542af353d693230a3da636762204d96f2889f7decc9ad3992a8be2be92bdd6a7367bd64c8604ec219a92c80a7536f218926b5d18677f4bc22454a843f7ec6bfaadaec1a47896f902725cddc264226a0c7f673468459528101da2368d77d37d9ae6d52cb44efb9b5af74fdd4c8341980d7b3f4a3176c8de3c3a0144e3f327fcb30c6bda7a62ec37215367d06ef1b85fa2bc329fe99071f65b0d5a48b50139016b0753bc99c389f4aba551bf2da38b78e7b4dbb3be3ecf8749b39a022c86febf3a30070def590bd2a9cb0f95d09eac8de27c370d758e340193773a7dfbb2046e0b2e34bef073ed8368f4fbf464206fbe88c3260f6974b383bcf8a000db483d822536000df416d09dfc55c920cbc3c8b24af1757099903759e9312b576b9f04e61ae20a60d7d0ce978d193dbf9e7a20c04b4f985936402823feb4c045be085b565c283602d9f4c7efe1db4d81f126855712cb5d9cc86250c4b81f4cd823b4b3204d5e88c77f671b93f8ca0d7846a4eb429ab9aa3c8283e3aabe924b5b33d99ba5933d79856316642459e1b0806a0f7546fcf2db6159ad2f5d28c0141dc8777dbc67e3d1b02e2daa828eee0bb0fae22852012318cef6d55e0677fe28340f7c02b20ddbbeef78b6522d5c90540939b471306acadbfda2c3a91f9b5fa4d201c484b4a092a05fb2473610be8d70e662dd3113c892a5dab15e374ee246df73d53aadf43e46ef5fc5e53f81eeb8e234b4d4a26112e6db1f1ee915977a4aa2a564641ed13892342e76790b4a221977e1ac1692ff952c09f8f3405ed8867b36ca056d2b2457888cb6b5cf4a36beee3b493e26909614114a013855a1761c7597bd289bdc00ab3cbfb0735c865a025f56c2fb288e2348d65567931a3ab4bd83accb0b037b9379158ff7c2876f0444515a56d16acbb437fe9b91ede3622649ad89f377577a70f3abb37fd9f0a732cf849dd781eae1893bce173af5c455ba9f31259928ce60c338d74fcd1cf171b9fdc7db75b85114102e4c25f06540958e675ed538fc61b0243cd6a4565f8ffacb73032f13c4ba242671d2328aef233e921d19d625e79cde9d1b1c4f3e9e3a52e2f333050c1661b294a919faad9e946d893588ba0fba", 0x60e}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 08:21:28 executing program 4: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) gettid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) 08:21:28 executing program 5: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000021c0)={'vxcan0\x00'}) 08:21:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:28 executing program 3: pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 08:21:28 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:28 executing program 4: pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0xfffffffffffffd01) 08:21:28 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket(0x11, 0x2, 0x0) 08:21:28 executing program 3: r0 = eventfd(0x0) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x0, {0xfffffff4}}, 0x43) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = dup2(r1, r1) write$cgroup_devices(r2, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xffffffd9) close(r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup2(r3, r3) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) write$P9_RREADLINK(r4, 0x0, 0x0) write$P9_RWSTAT(r4, 0x0, 0x0) write$P9_RMKDIR(r4, 0x0, 0x0) write$9p(r2, 0x0, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) write$9p(r4, 0x0, 0x0) write$P9_ROPEN(r4, 0x0, 0x0) rt_sigreturn() timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r6+10000000}}, 0x0) 08:21:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x2, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000000)=0x1e) pwrite64(0xffffffffffffffff, &(0x7f0000000280)="7f7504a5b8ab41aeed7a8d387ece813adc163b970de957c91ae5a65cba0e6c3fea6856afaa2043f9e95d92d65f35252bd624f9fbebcbdf79e9877bd477153f94bfef7ff33cc511bcf307b0e3108d574f5ad31ad10060803758895aa8f564c1957fb308d3572047c6366620ec2f40915924cdd34f96499aef280023e4513f32a98a3c650770ce8811145cad60bdba786bbf1546a486317391bad09b92869cc904b5bdfa5ec7b11e26722f41a0759822a858e36575", 0xb4, 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x58880, 0x0) ioctl$PIO_UNIMAPCLR(r3, 0x5450, 0x0) dup(0xffffffffffffffff) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) 08:21:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) [ 467.795218][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. 08:21:29 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 08:21:29 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfffffe81) 08:21:29 executing program 4: socket$unix(0x2, 0x6, 0x0) 08:21:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:29 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:29 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system', 0x0, 0x0) write$char_usb(r0, 0x0, 0xfffffffffffffd79) 08:21:29 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x0, 0x0) write$FUSE_DIRENT(r0, 0x0, 0xffffffffffffff8f) 08:21:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:29 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_script(r0, 0x0, 0x3f0257ec) 08:21:30 executing program 3: r0 = eventfd(0x0) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x0, {0xfffffff4}}, 0x43) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = dup2(r1, r1) write$cgroup_devices(r2, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xffffffd9) close(r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup2(r3, r3) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) write$P9_RREADLINK(r4, 0x0, 0x0) write$P9_RWSTAT(r4, 0x0, 0x0) write$P9_RMKDIR(r4, 0x0, 0x0) write$9p(r2, 0x0, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) write$9p(r4, 0x0, 0x0) write$P9_ROPEN(r4, 0x0, 0x0) rt_sigreturn() timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r6+10000000}}, 0x0) 08:21:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x90) 08:21:30 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:30 executing program 5: msgget(0x0, 0x606) socket$inet_tcp(0x2, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) r1 = msgget(0x0, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000040)=""/131) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000000)=""/54) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x696000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x2d) r3 = msgget$private(0x0, 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000000180)=""/202) 08:21:30 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001580), 0x0, 0x0) 08:21:30 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:30 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 08:21:30 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_setup(0x0, &(0x7f0000000340)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 08:21:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:30 executing program 4: semget(0x3, 0x0, 0x1b9e7a6cb17ea66b) 08:21:30 executing program 2: msgget$private(0x0, 0x214) 08:21:31 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) 08:21:31 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, &(0x7f0000000180)) 08:21:31 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:31 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 08:21:31 executing program 3: r0 = eventfd(0x0) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x0, {0xfffffff4}}, 0x43) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = dup2(r1, r1) write$cgroup_devices(r2, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xffffffd9) close(r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup2(r3, r3) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) write$P9_RREADLINK(r4, 0x0, 0x0) write$P9_RWSTAT(r4, 0x0, 0x0) write$P9_RMKDIR(r4, 0x0, 0x0) write$9p(r2, 0x0, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) write$9p(r4, 0x0, 0x0) write$P9_ROPEN(r4, 0x0, 0x0) rt_sigreturn() timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r6+10000000}}, 0x0) 08:21:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000180)="0e", 0x1) 08:21:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_INIT(r0, &(0x7f00000020c0)={0x50}, 0x50) 08:21:31 executing program 4: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000180)=""/136) 08:21:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:31 executing program 2: semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000000080)=""/175) 08:21:31 executing program 5: semget(0x3, 0x3, 0x5aa) 08:21:31 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:31 executing program 4: shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) 08:21:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:31 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20102, 0x0) write$cgroup_type(r0, 0x0, 0x0) 08:21:31 executing program 2: semget(0x0, 0x3, 0x6c8) 08:21:32 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x15) 08:21:32 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 08:21:32 executing program 3: r0 = eventfd(0x0) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x0, {0xfffffff4}}, 0x43) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = dup2(r1, r1) write$cgroup_devices(r2, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xffffffd9) close(r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup2(r3, r3) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) write$P9_RREADLINK(r4, 0x0, 0x0) write$P9_RWSTAT(r4, 0x0, 0x0) write$P9_RMKDIR(r4, 0x0, 0x0) write$9p(r2, 0x0, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) write$9p(r4, 0x0, 0x0) write$P9_ROPEN(r4, 0x0, 0x0) rt_sigreturn() timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r6+10000000}}, 0x0) 08:21:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:32 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 08:21:32 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:32 executing program 4: semget(0x2, 0x0, 0x598) 08:21:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 08:21:32 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 08:21:32 executing program 0: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:32 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:32 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/12) 08:21:32 executing program 2: semget(0x1, 0x4, 0x200) 08:21:33 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_pressure(r0, &(0x7f0000000140)={'some'}, 0x2f) 08:21:33 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 08:21:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:33 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0xfffffe69) 08:21:33 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20102, 0x0) write$cgroup_devices(r0, 0x0, 0xff52) 08:21:33 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:33 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0xc1c0, 0x81) 08:21:33 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x0) 08:21:33 executing program 4: semget$private(0x0, 0x2, 0x401) 08:21:33 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:33 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x6041, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 08:21:33 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:33 executing program 4: getrandom(&(0x7f0000000100)=""/243, 0xf3, 0x3) 08:21:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28}, 0x28) 08:21:33 executing program 0: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:34 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0xc0c0, 0x1) 08:21:34 executing program 5: msgget$private(0x0, 0x404) 08:21:34 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8, 0x103) 08:21:34 executing program 2: pipe2$9p(&(0x7f00000000c0), 0x80800) 08:21:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 08:21:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000002d80), 0x4) 08:21:34 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:34 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000200)) 08:21:34 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x24060, 0x0) 08:21:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 08:21:34 executing program 2: semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000000)=""/219) 08:21:34 executing program 3: semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000040)=""/64) 08:21:34 executing program 5: semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000000)=""/108) 08:21:34 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:34 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) statx(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', 0x2000, 0x20, &(0x7f0000004a40)) 08:21:34 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0xc0c0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x4000050) 08:21:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 08:21:34 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) 08:21:34 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_type(r0, 0x0, 0xffffffffffffff83) 08:21:34 executing program 4: getrusage(0xfffffffffffffff9, 0x0) 08:21:34 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/route\x00') write$FUSE_ENTRY(r0, 0x0, 0x0) 08:21:34 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x6041, 0x0) write$FUSE_WRITE(r0, 0x0, 0x0) 08:21:34 executing program 2: utimensat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x0) 08:21:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:34 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 08:21:35 executing program 1: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:35 executing program 3: semget$private(0x0, 0x6, 0x172) 08:21:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_ENTRY(r0, 0x0, 0x0) 08:21:35 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) 08:21:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000000)) 08:21:35 executing program 3: semget$private(0x0, 0x3, 0xc5) 08:21:35 executing program 1: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') write$FUSE_DIRENT(r0, 0x0, 0x0) 08:21:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:35 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 08:21:35 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20000008) 08:21:35 executing program 1: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:35 executing program 2: semget(0x2, 0x3, 0x8c) 08:21:35 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0xc0c0, 0x5aef54b01d1ad31a) 08:21:35 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$sock(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 08:21:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:35 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$FUSE_LK(r0, 0x0, 0x0) 08:21:35 executing program 4: semget$private(0x0, 0x6, 0x150) 08:21:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 08:21:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:35 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:35 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_LK(r0, 0x0, 0x0) 08:21:35 executing program 5: io_setup(0x0, &(0x7f0000000340)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000240), 0x0) 08:21:35 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20102, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 08:21:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 08:21:36 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:36 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0xe4c0, 0x1d7) 08:21:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:36 executing program 5: semget$private(0x0, 0x3, 0x148) 08:21:36 executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x4, &(0x7f00000002c0)) 08:21:36 executing program 4: open$dir(&(0x7f0000000040)='./file0\x00', 0x8c3c1, 0x1) 08:21:36 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:36 executing program 5: prlimit64(0x0, 0x2, &(0x7f0000004740), &(0x7f0000004780)) 08:21:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_POLL(r0, &(0x7f0000003780)={0x18}, 0x18) 08:21:36 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 08:21:36 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:36 executing program 4: memfd_create(&(0x7f0000000080)='\x00', 0x2) 08:21:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:36 executing program 3: msgget(0x0, 0x238) 08:21:36 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 08:21:36 executing program 2: semget(0x1, 0x0, 0x282) 08:21:36 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0xfffffffffffffefc) 08:21:36 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:36 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0xfffffffffffffef9) 08:21:36 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 08:21:36 executing program 2: semget(0x2, 0x1, 0x1b9e7a6cb17ea4d9) 08:21:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:36 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000100)) 08:21:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:37 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10, 0x103) 08:21:37 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x0) 08:21:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x54) 08:21:37 executing program 4: msgget(0x0, 0x10) 08:21:37 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:37 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 08:21:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:37 executing program 2: open$dir(&(0x7f0000000100)='./file0\x00', 0x900040, 0x181) 08:21:37 executing program 3: r0 = getpgrp(0x0) ptrace(0x10, r0) 08:21:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000100)) 08:21:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:37 executing program 3: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r0, 0x0, 0x54) 08:21:37 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4f2801, 0x0) 08:21:37 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=""/158, &(0x7f00000000c0)=0x9e) 08:21:37 executing program 2: msgget$private(0x0, 0x245) 08:21:38 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 08:21:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0xe3}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:38 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x2c0, 0x0) 08:21:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x2, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000000)=0x1e) 08:21:38 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/psched\x00') write$cgroup_devices(r0, 0x0, 0x0) 08:21:38 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:38 executing program 5: semget$private(0x0, 0x1, 0x144) 08:21:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) 08:21:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x60004}, 0x0) 08:21:38 executing program 5: semget$private(0x0, 0x1, 0x141) 08:21:38 executing program 4: semget(0x1, 0x0, 0x48a) 08:21:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:21:38 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xa, 0x0, 0x0) 08:21:38 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) 08:21:39 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x8000, 0x0) 08:21:39 executing program 4: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2122) pipe2$9p(0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 08:21:39 executing program 5: r0 = memfd_create(&(0x7f0000000200)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xc2_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x161\x13r\xc49\x80\x86\x1a\xbf\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xf5\xcc\xc9Z\x9f\xa6\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdkMu\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmX0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\xc1W\x10r\x9b~n`m:]#\x989', 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000580)='\a', 0x1}], 0x1) r1 = dup(r0) sendfile(r0, r1, &(0x7f0000000080), 0x20000080000001) r2 = memfd_create(&(0x7f0000000200)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xc2_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x161\x13r\xc49\x80\x86\x1a\xbf\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xf5\xcc\xc9Z\x9f\xa6\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcI\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdkMu\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmX0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\xc1W\x10r\x9b~n`m:]#\x989', 0x0) r3 = dup(r2) r4 = memfd_create(&(0x7f0000000340)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xec\xe0\xdd\t\"\xb8?\xfa4\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZZp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb1\x80\xb9\xdfj\xed\xc2_o\xa6\x04\xf5\x9f\x04\xf1\x9d\xb7MF\x161\x13r\xc49\x80\x86\x1a\xbf\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xf5\xcc\xc9Z\x9f\xa6\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\x04I\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$u\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmX0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4bT\xc1W\x10r\x9b~n`m:]#\x98v\x0eq\xc5\xa2?\x12w\xe0\xbc\xf1\xee\xfe.\x99\xfdz\xcb \x19\xfd\xac`\x0eKj\xc9\x00\xd3D\xe6\xd8\xd4|\xaft\xb1\x979C\x0e\x81oW\xc8\xf5\xe6\x85\xd7\v\xfe\xeb\xbdQ\xf5XQ\x7f\x92\xac\x12p(\xce\xceH9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xdf\xcdz3!!%K\xac\xf6fDe\x8a2_\xc4!Z\xabJ\x02\xf1}\xa7\x16\xc3\n\xdeF\xd9\x1d\xf3\xbbAy\xd7\x87n(zv\xf6\xe6\xf7\x90\x9ci\xfb\xcd>;\xfe\xc4\x1e\xd1\xd5\x86\x9az\x10\x1b!\'&\xe1!\xf1\xef\x8a\xe59\xb4\xaa\xf8\xfb/\x14)W\x1dO*\xe0^!\xcc\xfa\xea)P? \xc3(\xf7\xe2\xd5\xca#\xb4\"\x1ed\xff%>7\x89\x88\xeb\xa1K\x92g#E\xfa\xae+\xd7\xd3\xd1\xa3E\xb7\f\x17\xbe\x96\xf0\x9b23\x89l\xebdY\xe6^\xf7\xc3\xdd3\xc5', 0x0) r5 = dup(r4) renameat(r3, &(0x7f0000000240)='./file0\x00', r5, &(0x7f00000002c0)='./file0/../file0\x00') 08:21:39 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:39 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) pipe2$9p(&(0x7f0000000a80), 0x0) fcntl$setpipe(r0, 0x407, 0x0) 08:21:39 executing program 0: r0 = memfd_create(&(0x7f00000003c0)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xc2_o\xa6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x16=q\x93u\xf1\xde\xa2\xa9\xef\xacQ1\x13r\xc49\x80\x86\x1a\xbf\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xcbX\x891\xed\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcIv\xe6\xd1\xb5\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfdk\x7f\x00\x9bQ\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89bmX0\x94T\x10\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4b', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') close_range(r0, r1, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0x6, 0x0) 08:21:39 executing program 2: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x101140, 0x76) 08:21:39 executing program 0: symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 08:21:39 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:39 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x240, 0xe2) 08:21:39 executing program 2: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x2710}}, 0x100) 08:21:39 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1) utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:21:39 executing program 0: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000840)='./file0\x00', 0x42, 0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)) 08:21:40 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x101140, 0x100) 08:21:40 executing program 3: symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400) 08:21:40 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:40 executing program 2: r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x26042, 0x85) 08:21:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002a40), 0x0, 0x0) syz_open_pts(r0, 0x10041) 08:21:40 executing program 5: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x101140, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x1) 08:21:40 executing program 0: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) 08:21:40 executing program 5: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000001c0)=""/185, 0xb9) 08:21:40 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:40 executing program 2: symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/43, 0x2b) 08:21:40 executing program 3: open$dir(&(0x7f0000000080)='./file0\x00', 0x8042, 0x66) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x1000) 08:21:40 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x2, 0x103) 08:21:40 executing program 5: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x121440, 0x102) 08:21:40 executing program 0: symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00') statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 08:21:40 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x42, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x200) 08:21:40 executing program 4: symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00') faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6, 0x1300) 08:21:40 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:40 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000200)='./file0\x00', 0x20, 0x1) 08:21:40 executing program 0: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000840)='./file0\x00', 0x42, 0x0) unlinkat(r0, &(0x7f0000000380)='./file0\x00', 0x0) 08:21:40 executing program 5: symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 08:21:40 executing program 2: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x2a0c3, 0x0) 08:21:40 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:40 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x101340, 0x149) 08:21:40 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x4) 08:21:40 executing program 0: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000001440)='./file0\x00', r0, &(0x7f0000001480)='./file0\x00') 08:21:40 executing program 5: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x80, 0x103) 08:21:40 executing program 3: symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00') faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) 08:21:40 executing program 2: semget$private(0x0, 0x2, 0x404) 08:21:41 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x1) 08:21:41 executing program 0: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/200, 0xc8) 08:21:41 executing program 5: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000200)='./file0\x00', 0x6000, 0x0) 08:21:41 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x121140, 0x149) 08:21:41 executing program 2: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x121440, 0x0) 08:21:41 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:41 executing program 4: symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 08:21:41 executing program 0: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000200)='./file0\x00', 0x2, 0x1) 08:21:41 executing program 5: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x101140, 0x10) 08:21:41 executing program 2: symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00') faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x300) 08:21:41 executing program 4: r0 = open$dir(&(0x7f0000000840)='./file0\x00', 0x42, 0x0) fchownat(r0, &(0x7f0000005280)='\x00', 0xee01, 0x0, 0x1000) 08:21:41 executing program 0: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0x105042, 0x8) 08:21:41 executing program 5: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x101140, 0x13d) 08:21:41 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x101140, 0x0) 08:21:41 executing program 2: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8042, 0x0) write$cgroup_subtree(r0, 0x0, 0x37) 08:21:41 executing program 4: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x10, 0x0) 08:21:41 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:41 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x4, 0x0) 08:21:41 executing program 5: symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 08:21:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmdt(0x0) 08:21:41 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @val, {@ipv6}}, 0x0) 08:21:41 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 08:21:41 executing program 2: syz_emit_ethernet(0xaf, &(0x7f0000000040)={@broadcast, @random="4be44fc4b364", @val, {@ipv6}}, 0x0) 08:21:42 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) 08:21:42 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff}) getpeername$inet(r0, 0x0, 0x0) 08:21:42 executing program 4: syz_emit_ethernet(0x9f, &(0x7f00000001c0)={@broadcast, @random="23667045cdf1", @val, {@ipv6}}, 0x0) 08:21:42 executing program 3: setitimer(0x1, &(0x7f0000000040)={{}, {0x0, 0x1a6}}, 0x0) 08:21:42 executing program 2: open(&(0x7f00000000c0)='.\x00', 0x1, 0x0) 08:21:42 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:42 executing program 5: syz_emit_ethernet(0x38, &(0x7f00000001c0)={@broadcast, @random="23667045cdf1", @val, {@ipv6}}, 0x0) 08:21:42 executing program 4: r0 = socket(0x18, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x2}, 0x8) 08:21:42 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffff010032c4aaaaaaaaaa86dd60a4724600080000fe8001000000000000004b021d18f02ef2"], 0x0) 08:21:42 executing program 2: execve(&(0x7f00000006c0)='.\x00', 0x0, 0x0) 08:21:42 executing program 5: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@broadcast, @random="23667045cdf1", @val, {@ipv6}}, 0x0) 08:21:42 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 08:21:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000080)=0xc) 08:21:42 executing program 2: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r1, 0x0, r0) 08:21:42 executing program 3: open$dir(&(0x7f00000000c0)='./file0\x00', 0x833f661137bdb61d, 0x0) 08:21:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) sendmsg(0xffffffffffffffff, 0x0, 0x0) 08:21:42 executing program 5: syz_emit_ethernet(0x46, &(0x7f00000001c0)={@broadcast, @local, @val, {@ipv6}}, 0x0) 08:21:42 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:42 executing program 4: setitimer(0x2, &(0x7f0000000000)={{}, {0x0, 0x8}}, 0x0) setitimer(0x1, &(0x7f0000000040)={{}, {0x9}}, 0x0) 08:21:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) r0 = getegid() r1 = getuid() lchown(&(0x7f0000000100)='./file0\x00', r1, r0) 08:21:42 executing program 2: syz_emit_ethernet(0x9f, &(0x7f00000001c0)={@broadcast, @random="23667045cdf1", @val, {@ipv6}}, 0x0) 08:21:42 executing program 0: socket(0x1, 0x3, 0x3) 08:21:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 08:21:42 executing program 3: pipe(&(0x7f0000000580)) getitimer(0x0, &(0x7f0000000280)) 08:21:42 executing program 2: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @rand_addr, @empty, @multicast1}}}}, 0x0) 08:21:43 executing program 4: r0 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file1\x00', 0x1000, 0x0) 08:21:43 executing program 0: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 08:21:43 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 08:21:43 executing program 3: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x22140, 0x81) 08:21:43 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:43 executing program 2: symlinkat(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000240)=""/255, 0xff) 08:21:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) r0 = getuid() chown(&(0x7f0000000000)='./file0\x00', r0, 0xffffffffffffffff) 08:21:43 executing program 5: r0 = msgget(0x2, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)) 08:21:43 executing program 0: nanosleep(&(0x7f00000000c0)={0x0, 0x7fffffffffffffff}, 0x0) 08:21:43 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 08:21:43 executing program 2: symlinkat(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000240)=""/255, 0xff) 08:21:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000840)=""/144, 0x90, 0x2, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000080)="93", 0x1, 0x0, 0x0, 0x0) 08:21:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x21, 0x0) 08:21:43 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r0, 0x0, 0x0) 08:21:43 executing program 3: setitimer(0x0, &(0x7f0000000140)={{}, {0x100000000}}, 0x0) 08:21:43 executing program 2: symlinkat(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000240)=""/255, 0xff) 08:21:43 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) 08:21:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="d63872b247a581f9376c8485e5446c082e15f47453eee522f2a0eca20aaa1e683dc253532b57510ab3d8c1be9f06cde09a15f1e04e5fce028c163a5b5aabc90e9c037c08840c417c3285be00877b8196edc2c9ad69c9eadd40444ee60c999cff75d0822eff40a8009c6805831d1bedf78e367fcd550eb2e90f4012c8144f8f0533ba11e2e4e78c5ccc963e13ab9dae63", 0x90}, {&(0x7f0000000300)="a9142980069ba82568453fdc66e2800c1a", 0x11}, {&(0x7f0000000440)="526c7ea3b3dacad0b7693aee2cfa4b29e14ab98ae4cd7f6f884ff6e8be93545d5b7182d533ddf7b122d496b0e99f72453a249c9124f9529d9053d332c512bbf252f3585d6ca0a6993b0070", 0x4b}, {&(0x7f00000004c0)="f147b8dd565128a86a4004e3b23f2b958f3b128845293882e70a158195b2cee6ee71611572a58e69dcd490d801b96efa39b7cefd408fd9e4464d2bd578908093838bedbed28c0a3cb708de5525d500659e274364f761972c0c6750ff61fbb284d866e693a2549b6e7aa4b36c08e41fa447dcc84c83f24d1a1d8fa56b7c86", 0x7e}, {&(0x7f0000000540)="fbeb47098acd6e", 0x7}], 0x10000000000002c1}, 0x0) execve(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) 08:21:43 executing program 0: r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000080), 0x4) 08:21:43 executing program 2: symlinkat(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000240)=""/255, 0xff) 08:21:43 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, @val, {@ipv6}}, 0x0) 08:21:44 executing program 5: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@random="e59ea87bb0dc", @remote, @val, {@ipv4}}, 0x0) 08:21:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 08:21:44 executing program 0: syz_emit_ethernet(0xe, &(0x7f00000001c0)={@broadcast, @random="23667045cdf1"}, 0x0) 08:21:44 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0xb, 0xffffffffffffffff) 08:21:44 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:44 executing program 3: pipe(&(0x7f0000000600)={0xffffffffffffffff}) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:21:44 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x3}) msgctl$IPC_RMID(r0, 0x0) 08:21:44 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x148) chown(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) 08:21:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) poll(&(0x7f0000001940)=[{r2}], 0x1, 0x0) sendto$unix(r0, &(0x7f0000000080)="93", 0x1, 0x0, 0x0, 0x0) 08:21:44 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x18, 0x2}, 0xc) 08:21:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000840)=""/144, 0x90, 0x2, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:21:44 executing program 4: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x0, 0xfffffffffffffffe}}, 0x0) 08:21:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 08:21:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) connect$inet(r2, &(0x7f0000000000)={0x2, 0x1}, 0xc) 08:21:44 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @local, @val, {@ipv6}}, 0x0) 08:21:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 08:21:44 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:44 executing program 3: r0 = getuid() r1 = getuid() setreuid(r1, r0) 08:21:44 executing program 5: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 08:21:44 executing program 0: setrlimit(0x0, &(0x7f0000000080)) setrlimit(0x2, &(0x7f0000000000)={0x60000000, 0x60000000}) 08:21:44 executing program 3: pipe(&(0x7f0000000600)={0xffffffffffffffff}) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 08:21:44 executing program 5: connect(0xffffffffffffff9c, &(0x7f0000000040)=@in={0x2, 0x1}, 0xc) poll(&(0x7f0000000000)=[{}], 0x28, 0x0) 08:21:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) fchmod(r0, 0x0) 08:21:44 executing program 3: syz_emit_ethernet(0xfffffffffffffeec, &(0x7f0000000100)={@broadcast, @empty, @val, {@generic={0x0, "8ad87f6f9d1f485660fdb95b75b0723cc3d9e11f40602d183e449662f4d4261bb0b08c22aa54f1f6a2704f12540dcd07910b6f90343c6d060d3683bcd4a25c2cec164994aa6d4ed1cdeefc42caf261e0acd870dfb417ef86169e737ba6330b9d326650f3263894bda198d111e08eb7a7755b32177d053b647154ea955637a99cbd63bf2f1df5a78347efc67fd39d1bead391f514fd35bb9e867a1fb6b3cb6dd9eb92f04a6761223b4b4d16eaafa11021d15401b862c0743c628573452e407b334b"}}}, 0x0) 08:21:44 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) 08:21:45 executing program 5: open$dir(&(0x7f0000002c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 08:21:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = getpgid(0x0) fcntl$setown(r0, 0x6, r1) close(r0) 08:21:45 executing program 2: open$dir(&(0x7f0000000080)='./file0\x00', 0x10719, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00') 08:21:45 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) chdir(&(0x7f0000000080)='./file0\x00') 08:21:45 executing program 5: pipe(&(0x7f0000000600)) clock_getres(0x3, &(0x7f00000001c0)) 08:21:45 executing program 3: syz_emit_ethernet(0xbd, &(0x7f00000000c0)={@broadcast, @local, @val, {@ipv6}}, 0x0) 08:21:45 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000000)={@remote, @broadcast, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @empty, "5755a177ccfda5c447b881aa275b50f0"}}}}, 0x0) 08:21:45 executing program 2: syz_emit_ethernet(0x4f, &(0x7f0000000000)={@broadcast, @local, @val, {@ipv6}}, 0x0) 08:21:45 executing program 0: syz_emit_ethernet(0x58, &(0x7f0000000000)={@local, @random="9138d507fb53", @val, {@ipv4}}, 0x0) 08:21:45 executing program 3: r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000200)=""/4085, 0xff5) close(r0) 08:21:45 executing program 4: semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff}}) 08:21:45 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) 08:21:45 executing program 2: setrlimit(0x8, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, 0x0) 08:21:45 executing program 0: r0 = getuid() setreuid(0xffffffffffffffff, r0) 08:21:45 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:45 executing program 4: symlinkat(&(0x7f00000003c0)='\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 08:21:45 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = getuid() r2 = getegid() fchown(r0, r1, r2) 08:21:45 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 08:21:45 executing program 5: open(&(0x7f00000005c0)='./file0\x00', 0x200, 0x0) 08:21:45 executing program 2: r0 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000140)) 08:21:45 executing program 4: setitimer(0x0, &(0x7f0000000380)={{0xfffbfffffffffffd}}, 0x0) 08:21:45 executing program 3: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 08:21:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 08:21:45 executing program 2: symlinkat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 08:21:46 executing program 4: setitimer(0x1, &(0x7f0000000000)={{0x0, 0x6}, {0x80000000}}, &(0x7f0000000040)) 08:21:46 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 08:21:46 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:46 executing program 3: syz_emit_ethernet(0x4e304c83f5d659ab, 0xffffffffffffffff, 0x0) 08:21:46 executing program 5: r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001200)=""/4096, 0x1000) 08:21:46 executing program 2: mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) 08:21:46 executing program 4: syz_emit_ethernet(0x2fbf, &(0x7f0000005b80)={@local, @empty, @val, {@ipv6}}, 0x0) 08:21:46 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @remote, @val, {@ipv6}}, 0x0) 08:21:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) fcntl$lock(r0, 0x9, 0x0) 08:21:46 executing program 3: readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/79, 0xfffffffffffffdb7}, {&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/254, 0xfe}], 0x5) 08:21:46 executing program 2: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 08:21:46 executing program 4: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff}}) getrusage(0xffffffffffffffff, &(0x7f00000009c0)) 08:21:46 executing program 5: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0xba61e4e64832d2db) 08:21:46 executing program 0: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@random="e59ea87bb0dc", @remote, @val, {@ipv4}}, 0x0) 08:21:46 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xd0880, 0x0) 08:21:46 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:46 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', r0, 0xffffffffffffffff, 0x0) 08:21:46 executing program 3: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) pipe2(0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) pipe2$watch_queue(0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000002300)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xe94, 0x8, 0x0, 0x1, [{0x3b4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a66fc2e6466ab354196dba5bfcb9a5e97fd4e8e72032ff409d10ae111b3294ec"}, @WGPEER_A_ALLOWEDIPS={0x384, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f0655407a66cead604ef2be1b6e5e789bfc71cce9046ea6656a516a964842354"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9b8d}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fef5849c96eab3f3f721da968e409c0c30bc704391be0c367a78407999e3c4b3"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x5c0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x488, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b0ac77a8cf008fbe1eaa997a5bc2766cb33bc65185f3dfb6545c9ff92ee3cf60"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e363801513e47ee04a41553c4a8fe3b3b5576f0f3881a4ada3a615fc21a9f9d7"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}]}, {0x398, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x40) 08:21:46 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 08:21:46 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:46 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) (fail_nth: 1) 08:21:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002"], 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r8, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x51, 0xbe, "62895c8d6f123ffd892c4874eca292eb9a29f3a5d651d2bd418e85af01557f633a54e033d3394e545bccf9c0aba77767f267f36f2381324424fe2b208ccc3bf5944140b4d579cfa32230311bbf"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1f, 0x9}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000890}, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24040050) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 485.982275][T12984] FAULT_INJECTION: forcing a failure. [ 485.982275][T12984] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 486.019981][T12984] CPU: 1 PID: 12984 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller #0 [ 486.028842][T12984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 486.039296][T12984] Call Trace: [ 486.042693][T12984] [ 486.045656][T12984] dump_stack_lvl+0x125/0x1b0 [ 486.050518][T12984] should_fail_ex+0x496/0x5b0 [ 486.055355][T12984] _copy_from_user+0x30/0xf0 [ 486.060085][T12984] get_compat_msghdr+0xa8/0x170 [ 486.065058][T12984] ? __get_compat_msghdr+0x4d0/0x4d0 [ 486.070485][T12984] ? find_held_lock+0x2d/0x110 [ 486.075367][T12984] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 486.081381][T12984] ___sys_sendmsg+0x1ac/0x1d0 [ 486.086437][T12984] ? do_recvmmsg+0x740/0x740 [ 486.091142][T12984] ? find_held_lock+0x2d/0x110 [ 486.095959][T12984] ? __fget_light+0xe6/0x260 [ 486.100863][T12984] __sys_sendmsg+0x117/0x1e0 [ 486.105480][T12984] ? __sys_sendmsg_sock+0x30/0x30 [ 486.110560][T12984] __do_fast_syscall_32+0x62/0xe0 [ 486.115731][T12984] do_fast_syscall_32+0x33/0x70 [ 486.120695][T12984] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 486.127391][T12984] RIP: 0023:0xf7f95579 [ 486.131477][T12984] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 486.151465][T12984] RSP: 002b:00000000f7f905ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 486.159926][T12984] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 486.168104][T12984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.176096][T12984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.184193][T12984] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 486.192274][T12984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.200286][T12984] 08:21:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:47 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x69, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:21:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) (fail_nth: 2) 08:21:47 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x69, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:21:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 1) 08:21:47 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 486.605599][T13002] FAULT_INJECTION: forcing a failure. [ 486.605599][T13002] name failslab, interval 1, probability 0, space 0, times 1 08:21:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x1) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002"], 0x24}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050002"], 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r8, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x51, 0xbe, "62895c8d6f123ffd892c4874eca292eb9a29f3a5d651d2bd418e85af01557f633a54e033d3394e545bccf9c0aba77767f267f36f2381324424fe2b208ccc3bf5944140b4d579cfa32230311bbf"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1f, 0x9}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000890}, 0x1) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24040050) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 486.687947][T13002] CPU: 1 PID: 13002 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller #0 [ 486.696690][T13002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 486.706873][T13002] Call Trace: [ 486.710185][T13002] [ 486.713205][T13002] dump_stack_lvl+0x125/0x1b0 [ 486.717933][T13002] should_fail_ex+0x496/0x5b0 [ 486.722662][T13002] should_failslab+0x9/0x20 [ 486.727244][T13002] kmem_cache_alloc_node+0x71/0x330 [ 486.733978][T13002] ? __alloc_skb+0x287/0x330 [ 486.738730][T13002] __alloc_skb+0x287/0x330 [ 486.743219][T13002] ? __napi_build_skb+0x50/0x50 [ 486.748294][T13002] ? __netlink_dump_start+0x970/0x9c0 [ 486.753844][T13002] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.759799][T13002] ? apparmor_socket_getpeersec_dgram+0x9/0x10 [ 486.766191][T13002] netlink_sendmsg+0x9c6/0xe40 [ 486.771178][T13002] ? netlink_unicast+0x810/0x810 [ 486.776171][T13002] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 486.781508][T13002] ? netlink_unicast+0x810/0x810 [ 486.786546][T13002] __sock_sendmsg+0xd5/0x180 [ 486.791169][T13002] ____sys_sendmsg+0x6ac/0x940 [ 486.795959][T13002] ? kernel_sendmsg+0x50/0x50 [ 486.800664][T13002] ? get_compat_msghdr+0x11b/0x170 [ 486.805896][T13002] ? find_held_lock+0x2d/0x110 [ 486.810777][T13002] ___sys_sendmsg+0x135/0x1d0 [ 486.815488][T13002] ? do_recvmmsg+0x740/0x740 [ 486.820099][T13002] ? find_held_lock+0x2d/0x110 [ 486.824913][T13002] ? __fget_light+0xe6/0x260 [ 486.829520][T13002] __sys_sendmsg+0x117/0x1e0 [ 486.834134][T13002] ? __sys_sendmsg_sock+0x30/0x30 [ 486.839206][T13002] __do_fast_syscall_32+0x62/0xe0 [ 486.844253][T13002] do_fast_syscall_32+0x33/0x70 [ 486.849127][T13002] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 486.855560][T13002] RIP: 0023:0xf7f95579 [ 486.859731][T13002] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 486.879624][T13002] RSP: 002b:00000000f7f905ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 486.888144][T13002] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 486.896141][T13002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.904132][T13002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.912491][T13002] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 486.920587][T13002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.928605][T13002] [ 486.983145][T13009] FAULT_INJECTION: forcing a failure. [ 486.983145][T13009] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:21:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x69, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 487.033300][T13009] CPU: 1 PID: 13009 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 487.042149][T13009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 487.052320][T13009] Call Trace: [ 487.055712][T13009] [ 487.058665][T13009] dump_stack_lvl+0x125/0x1b0 [ 487.063397][T13009] should_fail_ex+0x496/0x5b0 [ 487.068226][T13009] _copy_from_user+0x30/0xf0 [ 487.072867][T13009] get_compat_msghdr+0xa8/0x170 [ 487.077769][T13009] ? __get_compat_msghdr+0x4d0/0x4d0 08:21:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) (fail_nth: 3) [ 487.083098][T13009] ? find_held_lock+0x2d/0x110 [ 487.087911][T13009] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 487.093978][T13009] ___sys_sendmsg+0x1ac/0x1d0 [ 487.098802][T13009] ? do_recvmmsg+0x740/0x740 [ 487.103456][T13009] ? find_held_lock+0x2d/0x110 [ 487.108307][T13009] ? __fget_light+0xe6/0x260 [ 487.112945][T13009] __sys_sendmsg+0x117/0x1e0 [ 487.117763][T13009] ? __sys_sendmsg_sock+0x30/0x30 [ 487.122875][T13009] __do_fast_syscall_32+0x62/0xe0 [ 487.127957][T13009] do_fast_syscall_32+0x33/0x70 [ 487.132958][T13009] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 487.139334][T13009] RIP: 0023:0xf7f98579 [ 487.143439][T13009] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 487.163261][T13009] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 487.171714][T13009] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 487.180049][T13009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.188122][T13009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.196285][T13009] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 487.204440][T13009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.212437][T13009] 08:21:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002"], 0x24}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r8, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x51, 0xbe, "62895c8d6f123ffd892c4874eca292eb9a29f3a5d651d2bd418e85af01557f633a54e033d3394e545bccf9c0aba77767f267f36f2381324424fe2b208ccc3bf5944140b4d579cfa32230311bbf"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1f, 0x9}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000890}, 0x1) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24040050) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:21:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) (fail_nth: 4) 08:21:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:48 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 2) 08:21:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) recvmsg(r0, &(0x7f0000001240)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x2}, 0x103) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 487.557111][T13027] FAULT_INJECTION: forcing a failure. [ 487.557111][T13027] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:21:48 executing program 2: r0 = getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) syz_clone3(&(0x7f0000002740)={0x81600, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)=0x0, {0x1e}, &(0x7f0000001600)=""/4096, 0x1000, &(0x7f0000002600)=""/240, &(0x7f0000002700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003080)={0x6, 0x4, &(0x7f0000002dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000002e00)='syzkaller\x00', 0x6, 0xe2, &(0x7f0000002e40)=""/226, 0x41000, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002f40)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000002f80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002fc0)=[{0x4, 0x2, 0x7}, {0x4, 0x3, 0xa, 0xb}, {0x5, 0x3, 0xc, 0x7}, {0x0, 0x3, 0x1, 0x7}, {0x4, 0x1, 0xf, 0x4}, {0x4, 0x4, 0x10, 0x9}, {0x3, 0x3, 0xf, 0x3}, {0x0, 0x1, 0x2, 0x6}, {0x1, 0x4, 0x10, 0x1}, {0x1, 0x3, 0x6, 0x6}], 0x10, 0xfffffff9}, 0x90) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000003140)='devices.allow\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003180)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003200)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000003300)=0xe4) lstat(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() r11 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r12, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="df5f7bfc3a1ce407e6bf326f4a0bf1c53dcd3fc20f2b7ecd823f78c34bdc37b0e8ef4d9296048690d81800709383bd72f4cf68b3fbb0b8c3c85b502a07e0e39836cb4448f82c17a58afe607c16f44d4555cfec26719e69164c18dfc9df65b56c20f35c1068c41a2826a1c597d50d01217fcfe2260380484ac1e86b6bf7ce14f1b97cad41f520bd479db8674570f1fac432f831a32b8e79db5513", 0x9a}, {&(0x7f0000000480)="9bcc8e7500fa1c7e50d605e53fa834113d8105098155089eb8f7a66de379c4cc87bd8062e4d0dd5d22fd37f0e20a41ed0f978f8521b0e66dc38e12d1d62bdb0c3133bcdffb9c8d90013a8390cbd0fc9cf6e6ff6393c12e5c1398156c0dbbe0efb0e3f7cecc7534e10977ffd9f7d6ea07e1362c9d6140ca97", 0x78}, {&(0x7f00000005c0)="5b62f41a065266648c73f917c46a85ee2fd643a3900586cc55d4aa05c8b0b601220da2333ecf6123d44de3329f196511c0792ff431c1888803524dac60c15bf35db903abe08a207bff88cc125c1869a10a3e34372da59d5322662928ff2fca942cb24fa5df4b5fc26b5e4cec9793e45cfa0763eb33db30e8a8a71340a6dbb890d18df88278ecc46aa1578393b984d1e499ca682b750fee6fb1d17bd49d87ad4339b80a5b90bbcc6b77d464852953e58ee5", 0xb1}, {&(0x7f0000000500)="16619b5744034efe124a203da3e9148e7b4186e39c989fc4ff612a860b9bce17ddde91027c0c84186759d0920408497eb82794396d71f47891b8ea61a873d58b04d5e4dd4c354057f1a4df6320e35823ff7669bdab7cf126727e", 0x5a}, {&(0x7f0000000000)="8eba27e6f68c3f5e515ab629ac45a93a5a70dd844d82f217416b43fbb5bdadf061fe9343fa167a7cac372b28d2183e60126400e5065c68e87e4f", 0x3a}, {&(0x7f0000000680)="c942b28f294db6d24f5e483f4bdb3edae5ece082017f146556854270f8bf2c85bfa2ac2d22e2299cbd5491d311479c4f56adb74a316acc177466b4ecef0c6dbe81438e31", 0x44}, {&(0x7f0000000700)="c532193a8e7ef531239b1dfc789447912a7c0e620ee1e499b7b0d4e5ff50e06892dd4b3a59fb6806729ea777500bce292a5354d3f144441fd092bdf50a2e857f7505b9dccd3bca52783d7f990c1847b2a96c0602772903683e5eb6d2ad3d5abb3a2c9ebbc37a9330885f57452237a113c25646c11c12", 0x76}], 0x7, 0x0, 0x0, 0x4004881}}, {{&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000880)="740b560cd46a4ce586d96fc75693ca2abaab42ee4426f1e447f2e119349fd2f23636fd6ce21c33f9c92848e62f15f624a5a7aa309f1c37dcd142561046c3c815c2242692859a32ab5aed75c170e386e2b04e6060b28abf92a17506b16001611727e73e622c54a077b901984fcec9b1defd91ddea99974131a206a0da0e9bc5a55b31afc2ed2f7e9f758c37e014644bdc8634a42f2bc85448a9864692fbebce98aeda3c3faa5a13fbfbe732eb1fd760644bee8ca77143e0a7106060f54f235cd64a02378d56a1191ed87e4cc68b1681986fdc08ce1588", 0xd6}, {&(0x7f0000000980)="1f49a4e7161744f71c7d4d02ae199a49101b25e89b2c80b95ab9a187b97aa1877e1f62c014869d5ae47d47a5ea1c3079bf12464388f634dfbd890e3369a4ba577b51008040f4739d8f3746c328043e19884ad2be1403f2d58e59fce24cd9de76ba4ebb651c5531b35fcf91272c5c952d2cf8", 0x72}, {&(0x7f0000000a00)="6c036f3202aadf078d49edc53070772e907744aee1a35ac8053c3ed8a12e847940c1298be8246988bd88f608896194970b646e26df93bce8f58a71eee2deb4f387a6285db1c32743b5c10f6e4b6366d406f709a817cecce91ce61bbbcde2e2519985e2df4508561fc1c7e7ebf39fa9a01bef9654fd036da35d1b368e569219eb41594ede4ac9b7d2af7c2c", 0x8b}, {&(0x7f0000000ac0)="7d3bea6797bfbc7160f3d3dffe6e87501686bd8e9502eba7785603ed8b8e543af67a59218ae8df39178d72576fc34972dafd9320a9732c30f111f11ea8a2c37b85a23ec8e11c18444960075f7ed10f8289e0983996d4314a08196ec65a2c26c4c19be4491efad58c94e73bb83ad91a38bbf6db6a971d2628abdb98968f0c16afe3ed62e10ec53fd6152ced13225d8d870442584b23869d26ca4cac4d2e1ff2d5ce576b76f827f7ca409c8286b13fefb8768abcb00b18577fb0f3c4c7ccc7fe28a27d094aca4eef365e5aef0fae852fbc47edb6b6466a09c9598c7bbd5c226d2ee44368c06d21", 0xe6}, {&(0x7f0000000bc0)="f6977ac8803ac2685b7f1880733f969baed50022d668642dde909d8afea037f836722508639a764ac918709b3cefe839b53b7d654401823be41e6c68d14196018b51ffd4be79741257dea410178f507df73582b7d0b8989637d3de22e1", 0x5d}, {&(0x7f0000000c40)="0a30c99df5694f92063aada5e9ea2eccee047a7fc875f798a0258f56142234f922b4b8d676520e5fed1b9ea4d79c5d450f89c3365a3bda4c4294354f1465cc13c70b1256a2535a37d921419e97d4733fbae6448f745e0dc7f8b5f5db5bcd604ece8ac6d578f2b0ead24a41055124d916197bf84100fa54d4cbbc7010daa97eab0c88f2f3c446bbb40f80797dcdf9ce3eeba3dcd4dff6a6ead764fb65280e64915fc8ba96fd50f2a82505924b5545abfa1a7f8d8352e1cf5a74bfed3e6006fb7f913846ee04b51d58b584b9fa3bc2c87aad", 0xd1}, {&(0x7f0000000d40)="54c7004b51c12219b20abbd1559b57393327e3d4d46a004baeda98b6c25339eac85d22152d4674f90d1bfcf4da136b110e62d184d89022bd6cabb85580875c8300dbe78a7c6dd26d615a4b21a0cd02e806188b7d562eba9242bb9a8afc0f40462bb04888b80fa6868311b3eab866f9867fcd16d8e0623da97b4556de05e6b4b5191dd8fc76a2025db7dc1dd3471a65169ff7e7", 0x93}], 0x7, 0x0, 0x0, 0x22008015}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000e40)="5b39b64baf36538d3703545944a317ff0a732aa816f18f3ebda30ffb2cffc6396166fae842238882024ed8b03eacf7da89d31f49139cfdb9431f85487da131cd720a57591624ca0696dfb7ef4359040dec2d589a61004f08e972202269bca607c3100eed0207078d237c64474d13f779a7620c273d94d7228d20378e4d3c1cb9258ac67d9445c7e738a4b7abcada3542797290b014751b215ea3a3eec7a68fbf1e7725b0a3ed090e5c4a94005c1e3346ea8953709bc2978cd4d9bc26dcfbe3febf9fc29f675c1fbe16d48eaa203a1ec93f18", 0xd2}, {&(0x7f0000000f40)="bf851fa9fe16610ece83a91e68afdf372447ec48e5a90bd7c19a2d8b968f8713ef8961ec419ff82f756b5b450a9da2676dc040d83824c74b15080f0e3685f8dfe58668f303171b6556f9ba5264ab03ca578f271330e3cae1718e3b976e2ef29e38ffe34f639ca63b058270cd39bdf19355a24fdd1d359fc376e231c8c7df23158734a5af148ac377364dc954a8e1681bda7e1d02b8b10bc6469186fd6afae652fd6d2f9b870dc31008aaf5ca", 0xac}, {&(0x7f0000001000)="2cd0e02c67391a510ddbc06e9bf4e43a3d828427ee342348e310c839f896cb4635ce6f57e3261e51e6493ae4861ec27671", 0x31}], 0x3, &(0x7f00000027c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r1}}}, @cred={{0x18, 0x1, 0x2, {r2, 0xee00, r4}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x12c, 0x40080}}, {{&(0x7f0000002900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002980)="2bf62f656add168b438ec28cdce0c4789fa63da8197abcfb3853d3df4c38c7ba9a05b5ccf33d4f5709fc04d84994d051059a3dbe882b01102b", 0x39}, {&(0x7f00000029c0)="312455fefcae24529a0020b10c0739b72824d7bab94aaec175a368846ec5dc923dd68573f8d44b990cb5b2e1a7b9ad7c7f09111adbe55b7dd5e2c6af2762f2cff13db2796f3dd59392edac05d98078ce7d69ea21670ae9b61c4f1320503891", 0x5f}, {&(0x7f0000002a40)="6beb68258753454a4abc06f4b88204a49949e2c52cdbd4395219ded21ec266093097436aa068163b34dd9242615896d12783a731959449be6e935db7bd739b90013834dc431c1fa6202f3e9f309037c35dee20fd9124f5c53fee864cebbb98c56e4cb205b24320780716535552c7107d7c12d2d21ae0aed89e0546f13b0a136dbdb42c908d35d5f2a18733c24228120dce9f40e661", 0x95}], 0x3, 0x0, 0x0, 0x4040000}}, {{&(0x7f0000002b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002bc0)="a80dc5861a414d04206a4b40e80880dda3a3b4889be73480b6d2daf6ed1502cf910e9592729968666d1d42906ffd843753f82ba1692edf5f7ae3af72eb08db42b5aed4d8ca98d9713be530bd6efbcdfaa776f435806a4feffd2182a492634b4518f9b21035389ed9dca1409c9a8959cc87cdf9b251eae24af62bbcec73d5b2a0bb17a02523b94b29104b9319f7776bff2b0d82336394bf4c1cb0b7f359", 0x9d}, {&(0x7f0000002c80)="b2370506eaadef27a0daee9ce7fc77ca021b256c4de84f7693c223f887359eaf93ed7b0e59bf4938922c6e4543706d283b0e68980596b2e5b071319baa8785dae801e5186769a151442fb52fb5499a0fde37fcb0825c156d355dd3656de208437e8f16aab24e16415b", 0x69}, {&(0x7f0000002d00)="9c47e4080212ebdb125ecf1091fd4a0fb888afbd85bd1e7084d43a0760030aa1b0871ab89b844ce4e97b956c3eb7b113e17497c1f6dc242cb1940377beab080570e7b7009550aef589d69f1328630a077728457cbb1d1a", 0x57}], 0x3, &(0x7f0000003400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x18, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x18, 0x1, 0x2, {r10, r12, 0xee01}}}], 0x50, 0x40000}}], 0x5, 0x8000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x3c}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r13, @ANYRES16=r13, @ANYRESHEX=r17, @ANYRES32=r15, @ANYBLOB="cf0edc986896164e7a83248e494d97d09939aa79e3e9b2b383dc526732f001c174029ca416f9d90ec86bb8290b461c36616e2a5083d7b38a15bdfecd011cd2d0a4846ad9fbb0ee8ba08bd712a121cc010f9c6f40ac3945160f15a7f2b14f0bc8e9d9c01c97a8802713de165b1ea8e3f0cc52ebf9521c2fa304faa4105b6e7b0d4d6dcb1bf38553312507c26be2"], 0x3c}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r19}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r18, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r13, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r20}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @broadcast, @from_mac, {0xf, 0xff9}}, @ver_80211n={0x0, 0x100, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) [ 487.653580][T13027] CPU: 1 PID: 13027 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller #0 [ 487.662419][T13027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 487.665251][T13030] FAULT_INJECTION: forcing a failure. [ 487.665251][T13030] name failslab, interval 1, probability 0, space 0, times 0 [ 487.672493][T13027] Call Trace: [ 487.672507][T13027] [ 487.672517][T13027] dump_stack_lvl+0x125/0x1b0 [ 487.672558][T13027] should_fail_ex+0x496/0x5b0 [ 487.700906][T13027] _copy_from_iter+0x246/0x10f0 [ 487.705857][T13027] ? __build_skb_around+0x278/0x3a0 [ 487.711203][T13027] ? page_copy_sane+0x2c0/0x2c0 [ 487.716466][T13027] ? __napi_build_skb+0x50/0x50 [ 487.721376][T13027] ? __netlink_dump_start+0x970/0x9c0 [ 487.726808][T13027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 487.732833][T13027] ? __virt_addr_valid+0x5e/0x2d0 [ 487.737949][T13027] ? __phys_addr_symbol+0x30/0x70 [ 487.743034][T13027] ? __check_object_size+0x323/0x730 [ 487.748646][T13027] netlink_sendmsg+0x897/0xe40 [ 487.753568][T13027] ? netlink_unicast+0x810/0x810 [ 487.758669][T13027] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 487.764104][T13027] ? netlink_unicast+0x810/0x810 [ 487.769718][T13027] __sock_sendmsg+0xd5/0x180 [ 487.774543][T13027] ____sys_sendmsg+0x6ac/0x940 [ 487.779449][T13027] ? kernel_sendmsg+0x50/0x50 [ 487.784184][T13027] ? get_compat_msghdr+0x11b/0x170 [ 487.789530][T13027] ? find_held_lock+0x2d/0x110 [ 487.794445][T13027] ___sys_sendmsg+0x135/0x1d0 [ 487.799187][T13027] ? do_recvmmsg+0x740/0x740 [ 487.803838][T13027] ? find_held_lock+0x2d/0x110 [ 487.808751][T13027] ? __fget_light+0xe6/0x260 [ 487.813479][T13027] __sys_sendmsg+0x117/0x1e0 [ 487.818217][T13027] ? __sys_sendmsg_sock+0x30/0x30 [ 487.823520][T13027] __do_fast_syscall_32+0x62/0xe0 [ 487.828610][T13027] do_fast_syscall_32+0x33/0x70 [ 487.833518][T13027] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 487.839994][T13027] RIP: 0023:0xf7f95579 [ 487.844276][T13027] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 487.864122][T13027] RSP: 002b:00000000f7f905ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 487.872578][T13027] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 487.880584][T13027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 487.888624][T13027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.896641][T13027] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 487.904909][T13027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 487.912936][T13027] [ 487.915990][T13030] CPU: 0 PID: 13030 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 487.926620][T13030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 487.936873][T13030] Call Trace: [ 487.940510][T13030] [ 487.943466][T13030] dump_stack_lvl+0x125/0x1b0 [ 487.948204][T13030] should_fail_ex+0x496/0x5b0 [ 487.953011][T13030] should_failslab+0x9/0x20 [ 487.957541][T13030] kmem_cache_alloc_node+0x71/0x330 [ 487.962774][T13030] ? __alloc_skb+0x287/0x330 [ 487.967390][T13030] __alloc_skb+0x287/0x330 [ 487.971831][T13030] ? __napi_build_skb+0x50/0x50 [ 487.976707][T13030] ? __netlink_dump_start+0x970/0x9c0 [ 487.982104][T13030] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 487.988016][T13030] ? apparmor_socket_getpeersec_dgram+0x9/0x10 [ 487.994193][T13030] netlink_sendmsg+0x9c6/0xe40 [ 487.999089][T13030] ? netlink_unicast+0x810/0x810 [ 488.004105][T13030] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 488.009431][T13030] ? netlink_unicast+0x810/0x810 [ 488.014400][T13030] __sock_sendmsg+0xd5/0x180 [ 488.019022][T13030] ____sys_sendmsg+0x6ac/0x940 [ 488.023850][T13030] ? kernel_sendmsg+0x50/0x50 [ 488.028554][T13030] ? get_compat_msghdr+0x11b/0x170 [ 488.033806][T13030] ? find_held_lock+0x2d/0x110 [ 488.038616][T13030] ___sys_sendmsg+0x135/0x1d0 [ 488.043332][T13030] ? do_recvmmsg+0x740/0x740 [ 488.047954][T13030] ? find_held_lock+0x2d/0x110 [ 488.052800][T13030] ? __fget_light+0xe6/0x260 [ 488.057411][T13030] __sys_sendmsg+0x117/0x1e0 [ 488.062036][T13030] ? __sys_sendmsg_sock+0x30/0x30 [ 488.067164][T13030] __do_fast_syscall_32+0x62/0xe0 [ 488.072236][T13030] do_fast_syscall_32+0x33/0x70 [ 488.077132][T13030] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 488.083491][T13030] RIP: 0023:0xf7f98579 [ 488.087664][T13030] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 488.107381][T13030] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 488.115965][T13030] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 488.124130][T13030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.132198][T13030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.140177][T13030] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 488.148253][T13030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.156272][T13030] 08:21:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 3) 08:21:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) (fail_nth: 5) 08:21:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 488.267683][T13034] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 488.284059][T13036] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port 08:21:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (rerun: 32) recvmsg(r0, &(0x7f0000001240)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x2}, 0x103) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:21:49 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:49 executing program 2: r0 = getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (async) syz_clone3(&(0x7f0000002740)={0x81600, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)=0x0, {0x1e}, &(0x7f0000001600)=""/4096, 0x1000, &(0x7f0000002600)=""/240, &(0x7f0000002700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003080)={0x6, 0x4, &(0x7f0000002dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000002e00)='syzkaller\x00', 0x6, 0xe2, &(0x7f0000002e40)=""/226, 0x41000, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002f40)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000002f80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002fc0)=[{0x4, 0x2, 0x7}, {0x4, 0x3, 0xa, 0xb}, {0x5, 0x3, 0xc, 0x7}, {0x0, 0x3, 0x1, 0x7}, {0x4, 0x1, 0xf, 0x4}, {0x4, 0x4, 0x10, 0x9}, {0x3, 0x3, 0xf, 0x3}, {0x0, 0x1, 0x2, 0x6}, {0x1, 0x4, 0x10, 0x1}, {0x1, 0x3, 0x6, 0x6}], 0x10, 0xfffffff9}, 0x90) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000003140)='devices.allow\x00', 0x2, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003180)={0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003200)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000003300)=0xe4) (async) lstat(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = getpid() (async) r11 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r12, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="df5f7bfc3a1ce407e6bf326f4a0bf1c53dcd3fc20f2b7ecd823f78c34bdc37b0e8ef4d9296048690d81800709383bd72f4cf68b3fbb0b8c3c85b502a07e0e39836cb4448f82c17a58afe607c16f44d4555cfec26719e69164c18dfc9df65b56c20f35c1068c41a2826a1c597d50d01217fcfe2260380484ac1e86b6bf7ce14f1b97cad41f520bd479db8674570f1fac432f831a32b8e79db5513", 0x9a}, {&(0x7f0000000480)="9bcc8e7500fa1c7e50d605e53fa834113d8105098155089eb8f7a66de379c4cc87bd8062e4d0dd5d22fd37f0e20a41ed0f978f8521b0e66dc38e12d1d62bdb0c3133bcdffb9c8d90013a8390cbd0fc9cf6e6ff6393c12e5c1398156c0dbbe0efb0e3f7cecc7534e10977ffd9f7d6ea07e1362c9d6140ca97", 0x78}, {&(0x7f00000005c0)="5b62f41a065266648c73f917c46a85ee2fd643a3900586cc55d4aa05c8b0b601220da2333ecf6123d44de3329f196511c0792ff431c1888803524dac60c15bf35db903abe08a207bff88cc125c1869a10a3e34372da59d5322662928ff2fca942cb24fa5df4b5fc26b5e4cec9793e45cfa0763eb33db30e8a8a71340a6dbb890d18df88278ecc46aa1578393b984d1e499ca682b750fee6fb1d17bd49d87ad4339b80a5b90bbcc6b77d464852953e58ee5", 0xb1}, {&(0x7f0000000500)="16619b5744034efe124a203da3e9148e7b4186e39c989fc4ff612a860b9bce17ddde91027c0c84186759d0920408497eb82794396d71f47891b8ea61a873d58b04d5e4dd4c354057f1a4df6320e35823ff7669bdab7cf126727e", 0x5a}, {&(0x7f0000000000)="8eba27e6f68c3f5e515ab629ac45a93a5a70dd844d82f217416b43fbb5bdadf061fe9343fa167a7cac372b28d2183e60126400e5065c68e87e4f", 0x3a}, {&(0x7f0000000680)="c942b28f294db6d24f5e483f4bdb3edae5ece082017f146556854270f8bf2c85bfa2ac2d22e2299cbd5491d311479c4f56adb74a316acc177466b4ecef0c6dbe81438e31", 0x44}, {&(0x7f0000000700)="c532193a8e7ef531239b1dfc789447912a7c0e620ee1e499b7b0d4e5ff50e06892dd4b3a59fb6806729ea777500bce292a5354d3f144441fd092bdf50a2e857f7505b9dccd3bca52783d7f990c1847b2a96c0602772903683e5eb6d2ad3d5abb3a2c9ebbc37a9330885f57452237a113c25646c11c12", 0x76}], 0x7, 0x0, 0x0, 0x4004881}}, {{&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000880)="740b560cd46a4ce586d96fc75693ca2abaab42ee4426f1e447f2e119349fd2f23636fd6ce21c33f9c92848e62f15f624a5a7aa309f1c37dcd142561046c3c815c2242692859a32ab5aed75c170e386e2b04e6060b28abf92a17506b16001611727e73e622c54a077b901984fcec9b1defd91ddea99974131a206a0da0e9bc5a55b31afc2ed2f7e9f758c37e014644bdc8634a42f2bc85448a9864692fbebce98aeda3c3faa5a13fbfbe732eb1fd760644bee8ca77143e0a7106060f54f235cd64a02378d56a1191ed87e4cc68b1681986fdc08ce1588", 0xd6}, {&(0x7f0000000980)="1f49a4e7161744f71c7d4d02ae199a49101b25e89b2c80b95ab9a187b97aa1877e1f62c014869d5ae47d47a5ea1c3079bf12464388f634dfbd890e3369a4ba577b51008040f4739d8f3746c328043e19884ad2be1403f2d58e59fce24cd9de76ba4ebb651c5531b35fcf91272c5c952d2cf8", 0x72}, {&(0x7f0000000a00)="6c036f3202aadf078d49edc53070772e907744aee1a35ac8053c3ed8a12e847940c1298be8246988bd88f608896194970b646e26df93bce8f58a71eee2deb4f387a6285db1c32743b5c10f6e4b6366d406f709a817cecce91ce61bbbcde2e2519985e2df4508561fc1c7e7ebf39fa9a01bef9654fd036da35d1b368e569219eb41594ede4ac9b7d2af7c2c", 0x8b}, {&(0x7f0000000ac0)="7d3bea6797bfbc7160f3d3dffe6e87501686bd8e9502eba7785603ed8b8e543af67a59218ae8df39178d72576fc34972dafd9320a9732c30f111f11ea8a2c37b85a23ec8e11c18444960075f7ed10f8289e0983996d4314a08196ec65a2c26c4c19be4491efad58c94e73bb83ad91a38bbf6db6a971d2628abdb98968f0c16afe3ed62e10ec53fd6152ced13225d8d870442584b23869d26ca4cac4d2e1ff2d5ce576b76f827f7ca409c8286b13fefb8768abcb00b18577fb0f3c4c7ccc7fe28a27d094aca4eef365e5aef0fae852fbc47edb6b6466a09c9598c7bbd5c226d2ee44368c06d21", 0xe6}, {&(0x7f0000000bc0)="f6977ac8803ac2685b7f1880733f969baed50022d668642dde909d8afea037f836722508639a764ac918709b3cefe839b53b7d654401823be41e6c68d14196018b51ffd4be79741257dea410178f507df73582b7d0b8989637d3de22e1", 0x5d}, {&(0x7f0000000c40)="0a30c99df5694f92063aada5e9ea2eccee047a7fc875f798a0258f56142234f922b4b8d676520e5fed1b9ea4d79c5d450f89c3365a3bda4c4294354f1465cc13c70b1256a2535a37d921419e97d4733fbae6448f745e0dc7f8b5f5db5bcd604ece8ac6d578f2b0ead24a41055124d916197bf84100fa54d4cbbc7010daa97eab0c88f2f3c446bbb40f80797dcdf9ce3eeba3dcd4dff6a6ead764fb65280e64915fc8ba96fd50f2a82505924b5545abfa1a7f8d8352e1cf5a74bfed3e6006fb7f913846ee04b51d58b584b9fa3bc2c87aad", 0xd1}, {&(0x7f0000000d40)="54c7004b51c12219b20abbd1559b57393327e3d4d46a004baeda98b6c25339eac85d22152d4674f90d1bfcf4da136b110e62d184d89022bd6cabb85580875c8300dbe78a7c6dd26d615a4b21a0cd02e806188b7d562eba9242bb9a8afc0f40462bb04888b80fa6868311b3eab866f9867fcd16d8e0623da97b4556de05e6b4b5191dd8fc76a2025db7dc1dd3471a65169ff7e7", 0x93}], 0x7, 0x0, 0x0, 0x22008015}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000e40)="5b39b64baf36538d3703545944a317ff0a732aa816f18f3ebda30ffb2cffc6396166fae842238882024ed8b03eacf7da89d31f49139cfdb9431f85487da131cd720a57591624ca0696dfb7ef4359040dec2d589a61004f08e972202269bca607c3100eed0207078d237c64474d13f779a7620c273d94d7228d20378e4d3c1cb9258ac67d9445c7e738a4b7abcada3542797290b014751b215ea3a3eec7a68fbf1e7725b0a3ed090e5c4a94005c1e3346ea8953709bc2978cd4d9bc26dcfbe3febf9fc29f675c1fbe16d48eaa203a1ec93f18", 0xd2}, {&(0x7f0000000f40)="bf851fa9fe16610ece83a91e68afdf372447ec48e5a90bd7c19a2d8b968f8713ef8961ec419ff82f756b5b450a9da2676dc040d83824c74b15080f0e3685f8dfe58668f303171b6556f9ba5264ab03ca578f271330e3cae1718e3b976e2ef29e38ffe34f639ca63b058270cd39bdf19355a24fdd1d359fc376e231c8c7df23158734a5af148ac377364dc954a8e1681bda7e1d02b8b10bc6469186fd6afae652fd6d2f9b870dc31008aaf5ca", 0xac}, {&(0x7f0000001000)="2cd0e02c67391a510ddbc06e9bf4e43a3d828427ee342348e310c839f896cb4635ce6f57e3261e51e6493ae4861ec27671", 0x31}], 0x3, &(0x7f00000027c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r1}}}, @cred={{0x18, 0x1, 0x2, {r2, 0xee00, r4}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x12c, 0x40080}}, {{&(0x7f0000002900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002980)="2bf62f656add168b438ec28cdce0c4789fa63da8197abcfb3853d3df4c38c7ba9a05b5ccf33d4f5709fc04d84994d051059a3dbe882b01102b", 0x39}, {&(0x7f00000029c0)="312455fefcae24529a0020b10c0739b72824d7bab94aaec175a368846ec5dc923dd68573f8d44b990cb5b2e1a7b9ad7c7f09111adbe55b7dd5e2c6af2762f2cff13db2796f3dd59392edac05d98078ce7d69ea21670ae9b61c4f1320503891", 0x5f}, {&(0x7f0000002a40)="6beb68258753454a4abc06f4b88204a49949e2c52cdbd4395219ded21ec266093097436aa068163b34dd9242615896d12783a731959449be6e935db7bd739b90013834dc431c1fa6202f3e9f309037c35dee20fd9124f5c53fee864cebbb98c56e4cb205b24320780716535552c7107d7c12d2d21ae0aed89e0546f13b0a136dbdb42c908d35d5f2a18733c24228120dce9f40e661", 0x95}], 0x3, 0x0, 0x0, 0x4040000}}, {{&(0x7f0000002b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002bc0)="a80dc5861a414d04206a4b40e80880dda3a3b4889be73480b6d2daf6ed1502cf910e9592729968666d1d42906ffd843753f82ba1692edf5f7ae3af72eb08db42b5aed4d8ca98d9713be530bd6efbcdfaa776f435806a4feffd2182a492634b4518f9b21035389ed9dca1409c9a8959cc87cdf9b251eae24af62bbcec73d5b2a0bb17a02523b94b29104b9319f7776bff2b0d82336394bf4c1cb0b7f359", 0x9d}, {&(0x7f0000002c80)="b2370506eaadef27a0daee9ce7fc77ca021b256c4de84f7693c223f887359eaf93ed7b0e59bf4938922c6e4543706d283b0e68980596b2e5b071319baa8785dae801e5186769a151442fb52fb5499a0fde37fcb0825c156d355dd3656de208437e8f16aab24e16415b", 0x69}, {&(0x7f0000002d00)="9c47e4080212ebdb125ecf1091fd4a0fb888afbd85bd1e7084d43a0760030aa1b0871ab89b844ce4e97b956c3eb7b113e17497c1f6dc242cb1940377beab080570e7b7009550aef589d69f1328630a077728457cbb1d1a", 0x57}], 0x3, &(0x7f0000003400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x18, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x18, 0x1, 0x2, {r10, r12, 0xee01}}}], 0x50, 0x40000}}], 0x5, 0x8000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r13, @ANYRES16=r13, @ANYRESHEX=r17, @ANYRES32=r15, @ANYBLOB="cf0edc986896164e7a83248e494d97d09939aa79e3e9b2b383dc526732f001c174029ca416f9d90ec86bb8290b461c36616e2a5083d7b38a15bdfecd011cd2d0a4846ad9fbb0ee8ba08bd712a121cc010f9c6f40ac3945160f15a7f2b14f0bc8e9d9c01c97a8802713de165b1ea8e3f0cc52ebf9521c2fa304faa4105b6e7b0d4d6dcb1bf38553312507c26be2"], 0x3c}}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) (async) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r19}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r18, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r13, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r20}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @broadcast, @from_mac, {0xf, 0xff9}}, @ver_80211n={0x0, 0x100, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) 08:21:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 4) [ 488.448878][T13045] FAULT_INJECTION: forcing a failure. [ 488.448878][T13045] name failslab, interval 1, probability 0, space 0, times 0 [ 488.499017][T13045] CPU: 1 PID: 13045 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller #0 [ 488.507755][T13045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 488.517845][T13045] Call Trace: [ 488.521230][T13045] [ 488.524518][T13045] dump_stack_lvl+0x125/0x1b0 [ 488.529243][T13045] should_fail_ex+0x496/0x5b0 [ 488.534026][T13045] should_failslab+0x9/0x20 [ 488.538578][T13045] kmem_cache_alloc+0x69/0x2f0 [ 488.543394][T13045] skb_clone+0x171/0x3c0 [ 488.547675][T13045] netlink_deliver_tap+0xb35/0xd00 [ 488.553019][T13045] netlink_unicast+0x5fa/0x810 [ 488.557898][T13045] ? netlink_attachskb+0x880/0x880 [ 488.563027][T13045] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 488.568943][T13045] ? __phys_addr_symbol+0x30/0x70 [ 488.573997][T13045] ? __check_object_size+0x323/0x730 [ 488.579306][T13045] netlink_sendmsg+0x93c/0xe40 [ 488.584099][T13045] ? netlink_unicast+0x810/0x810 [ 488.589056][T13045] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 488.594385][T13045] ? netlink_unicast+0x810/0x810 [ 488.599364][T13045] __sock_sendmsg+0xd5/0x180 [ 488.603994][T13045] ____sys_sendmsg+0x6ac/0x940 [ 488.608794][T13045] ? kernel_sendmsg+0x50/0x50 [ 488.613501][T13045] ? get_compat_msghdr+0x11b/0x170 [ 488.618650][T13045] ? find_held_lock+0x2d/0x110 [ 488.623452][T13045] ___sys_sendmsg+0x135/0x1d0 [ 488.628170][T13045] ? do_recvmmsg+0x740/0x740 [ 488.632806][T13045] ? find_held_lock+0x2d/0x110 [ 488.637646][T13045] ? __fget_light+0xe6/0x260 [ 488.642282][T13045] __sys_sendmsg+0x117/0x1e0 [ 488.646915][T13045] ? __sys_sendmsg_sock+0x30/0x30 [ 488.652110][T13045] __do_fast_syscall_32+0x62/0xe0 [ 488.657187][T13045] do_fast_syscall_32+0x33/0x70 [ 488.662079][T13045] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 488.668445][T13045] RIP: 0023:0xf7f95579 [ 488.672534][T13045] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 488.692422][T13045] RSP: 002b:00000000f7f905ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 488.701036][T13045] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 488.709382][T13045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.717627][T13045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.725697][T13045] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 488.733683][T13045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.741682][T13045] 08:21:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) recvmsg(r0, &(0x7f0000001240)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x2}, 0x103) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 488.887703][T13056] FAULT_INJECTION: forcing a failure. [ 488.887703][T13056] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:21:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) (fail_nth: 6) 08:21:50 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r1}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 488.961158][T13056] CPU: 1 PID: 13056 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 488.969889][T13056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 488.980061][T13056] Call Trace: [ 488.983377][T13056] [ 488.986337][T13056] dump_stack_lvl+0x125/0x1b0 [ 488.991063][T13056] should_fail_ex+0x496/0x5b0 [ 488.995978][T13056] _copy_from_iter+0x246/0x10f0 [ 489.000975][T13056] ? __build_skb_around+0x278/0x3a0 [ 489.006232][T13056] ? page_copy_sane+0x2c0/0x2c0 [ 489.011134][T13056] ? __napi_build_skb+0x50/0x50 [ 489.016135][T13056] ? __netlink_dump_start+0x970/0x9c0 [ 489.021563][T13056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 489.027509][T13056] ? __virt_addr_valid+0x5e/0x2d0 [ 489.032744][T13056] ? __phys_addr_symbol+0x30/0x70 [ 489.037902][T13056] ? __check_object_size+0x323/0x730 [ 489.043239][T13056] netlink_sendmsg+0x897/0xe40 [ 489.048047][T13056] ? netlink_unicast+0x810/0x810 [ 489.053038][T13056] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 489.058368][T13056] ? netlink_unicast+0x810/0x810 [ 489.063347][T13056] __sock_sendmsg+0xd5/0x180 [ 489.067990][T13056] ____sys_sendmsg+0x6ac/0x940 [ 489.072812][T13056] ? kernel_sendmsg+0x50/0x50 [ 489.077622][T13056] ? get_compat_msghdr+0x11b/0x170 [ 489.082795][T13056] ? find_held_lock+0x2d/0x110 [ 489.087619][T13056] ___sys_sendmsg+0x135/0x1d0 [ 489.092383][T13056] ? do_recvmmsg+0x740/0x740 [ 489.097032][T13056] ? find_held_lock+0x2d/0x110 [ 489.101873][T13056] ? __fget_light+0xe6/0x260 [ 489.106695][T13056] __sys_sendmsg+0x117/0x1e0 [ 489.111350][T13056] ? __sys_sendmsg_sock+0x30/0x30 [ 489.116463][T13056] __do_fast_syscall_32+0x62/0xe0 [ 489.121631][T13056] do_fast_syscall_32+0x33/0x70 [ 489.126541][T13056] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 489.133002][T13056] RIP: 0023:0xf7f98579 [ 489.137102][T13056] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 489.157273][T13056] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 489.166170][T13056] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 489.174531][T13056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.182627][T13056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.191166][T13056] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 489.199186][T13056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.207473][T13056] 08:21:50 executing program 2: r0 = getpid() (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) syz_clone3(&(0x7f0000002740)={0x81600, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)=0x0, {0x1e}, &(0x7f0000001600)=""/4096, 0x1000, &(0x7f0000002600)=""/240, &(0x7f0000002700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003080)={0x6, 0x4, &(0x7f0000002dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000002e00)='syzkaller\x00', 0x6, 0xe2, &(0x7f0000002e40)=""/226, 0x41000, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002f40)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000002f80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002fc0)=[{0x4, 0x2, 0x7}, {0x4, 0x3, 0xa, 0xb}, {0x5, 0x3, 0xc, 0x7}, {0x0, 0x3, 0x1, 0x7}, {0x4, 0x1, 0xf, 0x4}, {0x4, 0x4, 0x10, 0x9}, {0x3, 0x3, 0xf, 0x3}, {0x0, 0x1, 0x2, 0x6}, {0x1, 0x4, 0x10, 0x1}, {0x1, 0x3, 0x6, 0x6}], 0x10, 0xfffffff9}, 0x90) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000003140)='devices.allow\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003180)={0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003200)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000003300)=0xe4) (async) lstat(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() r11 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r12, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)="df5f7bfc3a1ce407e6bf326f4a0bf1c53dcd3fc20f2b7ecd823f78c34bdc37b0e8ef4d9296048690d81800709383bd72f4cf68b3fbb0b8c3c85b502a07e0e39836cb4448f82c17a58afe607c16f44d4555cfec26719e69164c18dfc9df65b56c20f35c1068c41a2826a1c597d50d01217fcfe2260380484ac1e86b6bf7ce14f1b97cad41f520bd479db8674570f1fac432f831a32b8e79db5513", 0x9a}, {&(0x7f0000000480)="9bcc8e7500fa1c7e50d605e53fa834113d8105098155089eb8f7a66de379c4cc87bd8062e4d0dd5d22fd37f0e20a41ed0f978f8521b0e66dc38e12d1d62bdb0c3133bcdffb9c8d90013a8390cbd0fc9cf6e6ff6393c12e5c1398156c0dbbe0efb0e3f7cecc7534e10977ffd9f7d6ea07e1362c9d6140ca97", 0x78}, {&(0x7f00000005c0)="5b62f41a065266648c73f917c46a85ee2fd643a3900586cc55d4aa05c8b0b601220da2333ecf6123d44de3329f196511c0792ff431c1888803524dac60c15bf35db903abe08a207bff88cc125c1869a10a3e34372da59d5322662928ff2fca942cb24fa5df4b5fc26b5e4cec9793e45cfa0763eb33db30e8a8a71340a6dbb890d18df88278ecc46aa1578393b984d1e499ca682b750fee6fb1d17bd49d87ad4339b80a5b90bbcc6b77d464852953e58ee5", 0xb1}, {&(0x7f0000000500)="16619b5744034efe124a203da3e9148e7b4186e39c989fc4ff612a860b9bce17ddde91027c0c84186759d0920408497eb82794396d71f47891b8ea61a873d58b04d5e4dd4c354057f1a4df6320e35823ff7669bdab7cf126727e", 0x5a}, {&(0x7f0000000000)="8eba27e6f68c3f5e515ab629ac45a93a5a70dd844d82f217416b43fbb5bdadf061fe9343fa167a7cac372b28d2183e60126400e5065c68e87e4f", 0x3a}, {&(0x7f0000000680)="c942b28f294db6d24f5e483f4bdb3edae5ece082017f146556854270f8bf2c85bfa2ac2d22e2299cbd5491d311479c4f56adb74a316acc177466b4ecef0c6dbe81438e31", 0x44}, {&(0x7f0000000700)="c532193a8e7ef531239b1dfc789447912a7c0e620ee1e499b7b0d4e5ff50e06892dd4b3a59fb6806729ea777500bce292a5354d3f144441fd092bdf50a2e857f7505b9dccd3bca52783d7f990c1847b2a96c0602772903683e5eb6d2ad3d5abb3a2c9ebbc37a9330885f57452237a113c25646c11c12", 0x76}], 0x7, 0x0, 0x0, 0x4004881}}, {{&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000880)="740b560cd46a4ce586d96fc75693ca2abaab42ee4426f1e447f2e119349fd2f23636fd6ce21c33f9c92848e62f15f624a5a7aa309f1c37dcd142561046c3c815c2242692859a32ab5aed75c170e386e2b04e6060b28abf92a17506b16001611727e73e622c54a077b901984fcec9b1defd91ddea99974131a206a0da0e9bc5a55b31afc2ed2f7e9f758c37e014644bdc8634a42f2bc85448a9864692fbebce98aeda3c3faa5a13fbfbe732eb1fd760644bee8ca77143e0a7106060f54f235cd64a02378d56a1191ed87e4cc68b1681986fdc08ce1588", 0xd6}, {&(0x7f0000000980)="1f49a4e7161744f71c7d4d02ae199a49101b25e89b2c80b95ab9a187b97aa1877e1f62c014869d5ae47d47a5ea1c3079bf12464388f634dfbd890e3369a4ba577b51008040f4739d8f3746c328043e19884ad2be1403f2d58e59fce24cd9de76ba4ebb651c5531b35fcf91272c5c952d2cf8", 0x72}, {&(0x7f0000000a00)="6c036f3202aadf078d49edc53070772e907744aee1a35ac8053c3ed8a12e847940c1298be8246988bd88f608896194970b646e26df93bce8f58a71eee2deb4f387a6285db1c32743b5c10f6e4b6366d406f709a817cecce91ce61bbbcde2e2519985e2df4508561fc1c7e7ebf39fa9a01bef9654fd036da35d1b368e569219eb41594ede4ac9b7d2af7c2c", 0x8b}, {&(0x7f0000000ac0)="7d3bea6797bfbc7160f3d3dffe6e87501686bd8e9502eba7785603ed8b8e543af67a59218ae8df39178d72576fc34972dafd9320a9732c30f111f11ea8a2c37b85a23ec8e11c18444960075f7ed10f8289e0983996d4314a08196ec65a2c26c4c19be4491efad58c94e73bb83ad91a38bbf6db6a971d2628abdb98968f0c16afe3ed62e10ec53fd6152ced13225d8d870442584b23869d26ca4cac4d2e1ff2d5ce576b76f827f7ca409c8286b13fefb8768abcb00b18577fb0f3c4c7ccc7fe28a27d094aca4eef365e5aef0fae852fbc47edb6b6466a09c9598c7bbd5c226d2ee44368c06d21", 0xe6}, {&(0x7f0000000bc0)="f6977ac8803ac2685b7f1880733f969baed50022d668642dde909d8afea037f836722508639a764ac918709b3cefe839b53b7d654401823be41e6c68d14196018b51ffd4be79741257dea410178f507df73582b7d0b8989637d3de22e1", 0x5d}, {&(0x7f0000000c40)="0a30c99df5694f92063aada5e9ea2eccee047a7fc875f798a0258f56142234f922b4b8d676520e5fed1b9ea4d79c5d450f89c3365a3bda4c4294354f1465cc13c70b1256a2535a37d921419e97d4733fbae6448f745e0dc7f8b5f5db5bcd604ece8ac6d578f2b0ead24a41055124d916197bf84100fa54d4cbbc7010daa97eab0c88f2f3c446bbb40f80797dcdf9ce3eeba3dcd4dff6a6ead764fb65280e64915fc8ba96fd50f2a82505924b5545abfa1a7f8d8352e1cf5a74bfed3e6006fb7f913846ee04b51d58b584b9fa3bc2c87aad", 0xd1}, {&(0x7f0000000d40)="54c7004b51c12219b20abbd1559b57393327e3d4d46a004baeda98b6c25339eac85d22152d4674f90d1bfcf4da136b110e62d184d89022bd6cabb85580875c8300dbe78a7c6dd26d615a4b21a0cd02e806188b7d562eba9242bb9a8afc0f40462bb04888b80fa6868311b3eab866f9867fcd16d8e0623da97b4556de05e6b4b5191dd8fc76a2025db7dc1dd3471a65169ff7e7", 0x93}], 0x7, 0x0, 0x0, 0x22008015}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000e40)="5b39b64baf36538d3703545944a317ff0a732aa816f18f3ebda30ffb2cffc6396166fae842238882024ed8b03eacf7da89d31f49139cfdb9431f85487da131cd720a57591624ca0696dfb7ef4359040dec2d589a61004f08e972202269bca607c3100eed0207078d237c64474d13f779a7620c273d94d7228d20378e4d3c1cb9258ac67d9445c7e738a4b7abcada3542797290b014751b215ea3a3eec7a68fbf1e7725b0a3ed090e5c4a94005c1e3346ea8953709bc2978cd4d9bc26dcfbe3febf9fc29f675c1fbe16d48eaa203a1ec93f18", 0xd2}, {&(0x7f0000000f40)="bf851fa9fe16610ece83a91e68afdf372447ec48e5a90bd7c19a2d8b968f8713ef8961ec419ff82f756b5b450a9da2676dc040d83824c74b15080f0e3685f8dfe58668f303171b6556f9ba5264ab03ca578f271330e3cae1718e3b976e2ef29e38ffe34f639ca63b058270cd39bdf19355a24fdd1d359fc376e231c8c7df23158734a5af148ac377364dc954a8e1681bda7e1d02b8b10bc6469186fd6afae652fd6d2f9b870dc31008aaf5ca", 0xac}, {&(0x7f0000001000)="2cd0e02c67391a510ddbc06e9bf4e43a3d828427ee342348e310c839f896cb4635ce6f57e3261e51e6493ae4861ec27671", 0x31}], 0x3, &(0x7f00000027c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r1}}}, @cred={{0x18, 0x1, 0x2, {r2, 0xee00, r4}}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}], 0x12c, 0x40080}}, {{&(0x7f0000002900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002980)="2bf62f656add168b438ec28cdce0c4789fa63da8197abcfb3853d3df4c38c7ba9a05b5ccf33d4f5709fc04d84994d051059a3dbe882b01102b", 0x39}, {&(0x7f00000029c0)="312455fefcae24529a0020b10c0739b72824d7bab94aaec175a368846ec5dc923dd68573f8d44b990cb5b2e1a7b9ad7c7f09111adbe55b7dd5e2c6af2762f2cff13db2796f3dd59392edac05d98078ce7d69ea21670ae9b61c4f1320503891", 0x5f}, {&(0x7f0000002a40)="6beb68258753454a4abc06f4b88204a49949e2c52cdbd4395219ded21ec266093097436aa068163b34dd9242615896d12783a731959449be6e935db7bd739b90013834dc431c1fa6202f3e9f309037c35dee20fd9124f5c53fee864cebbb98c56e4cb205b24320780716535552c7107d7c12d2d21ae0aed89e0546f13b0a136dbdb42c908d35d5f2a18733c24228120dce9f40e661", 0x95}], 0x3, 0x0, 0x0, 0x4040000}}, {{&(0x7f0000002b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002bc0)="a80dc5861a414d04206a4b40e80880dda3a3b4889be73480b6d2daf6ed1502cf910e9592729968666d1d42906ffd843753f82ba1692edf5f7ae3af72eb08db42b5aed4d8ca98d9713be530bd6efbcdfaa776f435806a4feffd2182a492634b4518f9b21035389ed9dca1409c9a8959cc87cdf9b251eae24af62bbcec73d5b2a0bb17a02523b94b29104b9319f7776bff2b0d82336394bf4c1cb0b7f359", 0x9d}, {&(0x7f0000002c80)="b2370506eaadef27a0daee9ce7fc77ca021b256c4de84f7693c223f887359eaf93ed7b0e59bf4938922c6e4543706d283b0e68980596b2e5b071319baa8785dae801e5186769a151442fb52fb5499a0fde37fcb0825c156d355dd3656de208437e8f16aab24e16415b", 0x69}, {&(0x7f0000002d00)="9c47e4080212ebdb125ecf1091fd4a0fb888afbd85bd1e7084d43a0760030aa1b0871ab89b844ce4e97b956c3eb7b113e17497c1f6dc242cb1940377beab080570e7b7009550aef589d69f1328630a077728457cbb1d1a", 0x57}], 0x3, &(0x7f0000003400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x18, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x18, 0x1, 0x2, {r10, r12, 0xee01}}}], 0x50, 0x40000}}], 0x5, 0x8000) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x3c}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r13, @ANYRES16=r13, @ANYRESHEX=r17, @ANYRES32=r15, @ANYBLOB="cf0edc986896164e7a83248e494d97d09939aa79e3e9b2b383dc526732f001c174029ca416f9d90ec86bb8290b461c36616e2a5083d7b38a15bdfecd011cd2d0a4846ad9fbb0ee8ba08bd712a121cc010f9c6f40ac3945160f15a7f2b14f0bc8e9d9c01c97a8802713de165b1ea8e3f0cc52ebf9521c2fa304faa4105b6e7b0d4d6dcb1bf38553312507c26be2"], 0x3c}}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r19}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r18, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r13, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r20}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @broadcast, @from_mac, {0xf, 0xff9}}, @ver_80211n={0x0, 0x100, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x48}}, 0x0) [ 489.219939][T13068] FAULT_INJECTION: forcing a failure. [ 489.219939][T13068] name failslab, interval 1, probability 0, space 0, times 0 [ 489.286011][T13068] CPU: 0 PID: 13068 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller #0 [ 489.294938][T13068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 489.305126][T13068] Call Trace: [ 489.308437][T13068] [ 489.311397][T13068] dump_stack_lvl+0x125/0x1b0 [ 489.316129][T13068] should_fail_ex+0x496/0x5b0 [ 489.320875][T13068] should_failslab+0x9/0x20 [ 489.325530][T13068] kmem_cache_alloc_node+0x71/0x330 [ 489.331150][T13068] ? __alloc_skb+0x287/0x330 08:21:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffff004a08e44ac6ba00010000000150505050505000000007"], 0x4c}}, 0x0) 08:21:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 5) [ 489.336011][T13068] __alloc_skb+0x287/0x330 [ 489.340683][T13068] ? __napi_build_skb+0x50/0x50 [ 489.345607][T13068] netlink_ack+0x3bb/0x1380 [ 489.350263][T13068] ? rtnl_fill_vf+0x4a0/0x4a0 [ 489.355179][T13068] ? netlink_sendmsg+0xe40/0xe40 [ 489.360196][T13068] netlink_rcv_skb+0x345/0x440 [ 489.365089][T13068] ? rtnl_fill_vf+0x4a0/0x4a0 [ 489.369828][T13068] ? netlink_ack+0x1380/0x1380 [ 489.374658][T13068] ? netlink_deliver_tap+0x1a0/0xd00 [ 489.380027][T13068] netlink_unicast+0x53b/0x810 [ 489.384854][T13068] ? netlink_attachskb+0x880/0x880 [ 489.390012][T13068] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 489.395961][T13068] ? __phys_addr_symbol+0x30/0x70 [ 489.401135][T13068] ? __check_object_size+0x323/0x730 [ 489.406480][T13068] netlink_sendmsg+0x93c/0xe40 [ 489.411312][T13068] ? netlink_unicast+0x810/0x810 [ 489.416384][T13068] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 489.421834][T13068] ? netlink_unicast+0x810/0x810 [ 489.426824][T13068] __sock_sendmsg+0xd5/0x180 [ 489.431779][T13068] ____sys_sendmsg+0x6ac/0x940 08:21:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffff004a08e44ac6ba00010000000150505050505000000007"], 0x4c}}, 0x0) [ 489.436688][T13068] ? kernel_sendmsg+0x50/0x50 [ 489.441518][T13068] ? get_compat_msghdr+0x11b/0x170 [ 489.446783][T13068] ? find_held_lock+0x2d/0x110 [ 489.451619][T13068] ___sys_sendmsg+0x135/0x1d0 [ 489.456374][T13068] ? do_recvmmsg+0x740/0x740 [ 489.461054][T13068] ? find_held_lock+0x2d/0x110 [ 489.465906][T13068] ? __fget_light+0xe6/0x260 [ 489.470547][T13068] __sys_sendmsg+0x117/0x1e0 [ 489.475280][T13068] ? __sys_sendmsg_sock+0x30/0x30 [ 489.480387][T13068] __do_fast_syscall_32+0x62/0xe0 [ 489.485642][T13068] do_fast_syscall_32+0x33/0x70 [ 489.490556][T13068] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 489.497134][T13068] RIP: 0023:0xf7f95579 [ 489.501326][T13068] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 489.521153][T13068] RSP: 002b:00000000f7f905ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 489.530242][T13068] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 489.538771][T13068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.546955][T13068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.555179][T13068] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 489.563277][T13068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.571483][T13068] 08:21:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 489.595491][T13077] FAULT_INJECTION: forcing a failure. [ 489.595491][T13077] name failslab, interval 1, probability 0, space 0, times 0 [ 489.608364][T13077] CPU: 0 PID: 13077 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 489.617180][T13077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 489.627356][T13077] Call Trace: [ 489.630664][T13077] [ 489.633617][T13077] dump_stack_lvl+0x125/0x1b0 [ 489.638343][T13077] should_fail_ex+0x496/0x5b0 [ 489.643089][T13077] should_failslab+0x9/0x20 [ 489.647648][T13077] kmem_cache_alloc+0x69/0x2f0 [ 489.652475][T13077] skb_clone+0x171/0x3c0 [ 489.656848][T13077] netlink_deliver_tap+0xb35/0xd00 [ 489.661494][T13070] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 489.662077][T13077] netlink_unicast+0x5fa/0x810 [ 489.662118][T13077] ? netlink_attachskb+0x880/0x880 [ 489.681481][T13077] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 489.687594][T13077] ? __phys_addr_symbol+0x30/0x70 [ 489.692695][T13077] ? __check_object_size+0x323/0x730 [ 489.698039][T13077] netlink_sendmsg+0x93c/0xe40 [ 489.702948][T13077] ? netlink_unicast+0x810/0x810 [ 489.707935][T13077] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 489.712727][T13075] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 489.713279][T13077] ? netlink_unicast+0x810/0x810 [ 489.727779][T13077] __sock_sendmsg+0xd5/0x180 [ 489.732433][T13077] ____sys_sendmsg+0x6ac/0x940 [ 489.737249][T13077] ? kernel_sendmsg+0x50/0x50 [ 489.741967][T13077] ? get_compat_msghdr+0x11b/0x170 [ 489.747197][T13077] ? find_held_lock+0x2d/0x110 [ 489.751999][T13077] ___sys_sendmsg+0x135/0x1d0 [ 489.756710][T13077] ? do_recvmmsg+0x740/0x740 [ 489.761413][T13077] ? find_held_lock+0x2d/0x110 [ 489.766236][T13077] ? __fget_light+0xe6/0x260 [ 489.770940][T13077] __sys_sendmsg+0x117/0x1e0 [ 489.775567][T13077] ? __sys_sendmsg_sock+0x30/0x30 [ 489.781078][T13077] __do_fast_syscall_32+0x62/0xe0 [ 489.786223][T13077] do_fast_syscall_32+0x33/0x70 [ 489.791096][T13077] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 489.797533][T13077] RIP: 0023:0xf7f98579 [ 489.801615][T13077] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 489.821262][T13077] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 489.829691][T13077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 489.837940][T13077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.846015][T13077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.854089][T13077] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 489.862071][T13077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.870250][T13077] 08:21:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffff004a08e44ac6ba00010000000150505050505000000007"], 0x4c}}, 0x0) 08:21:51 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="ee65226410868fe2c46e030043c06c3706d48805c3d5ff0779ade93a944b51a2578449d91171f6c7f167ba602b", @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="2e003300d0002000ff2200ffd0ac57a700002e712e015050505050500000dd0325030000003e01007606000000000000"], 0x4c}}, 0x0) 08:21:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 6) [ 490.001596][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:21:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 490.079116][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:21:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) (fail_nth: 7) 08:21:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="ee65226410868fe2c46e030043c06c3706d48805c3d5ff0779ade93a944b51a2578449d91171f6c7f167ba602b", @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="2e003300d0002000ff2200ffd0ac57a700002e712e015050505050500000dd0325030000003e01007606000000000000"], 0x4c}}, 0x0) [ 490.126765][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:21:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 490.273405][T13096] FAULT_INJECTION: forcing a failure. [ 490.273405][T13096] name failslab, interval 1, probability 0, space 0, times 0 [ 490.323298][T13096] CPU: 1 PID: 13096 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 490.332390][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 490.342504][T13096] Call Trace: [ 490.345814][T13096] [ 490.348764][T13096] dump_stack_lvl+0x125/0x1b0 [ 490.353499][T13096] should_fail_ex+0x496/0x5b0 [ 490.358248][T13096] should_failslab+0x9/0x20 [ 490.362818][T13096] __kmem_cache_alloc_node+0x6b/0x310 08:21:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="ee65226410868fe2c46e030043c06c3706d48805c3d5ff0779ade93a944b51a2578449d91171f6c7f167ba602b", @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="2e003300d0002000ff2200ffd0ac57a700002e712e015050505050500000dd0325030000003e01007606000000000000"], 0x4c}}, 0x0) 08:21:51 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 490.368247][T13096] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x280 [ 490.375660][T13096] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x280 [ 490.383002][T13096] __kmalloc+0x49/0x90 [ 490.387139][T13096] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x280 [ 490.394315][T13096] genl_family_rcv_msg_doit+0xbf/0x2e0 [ 490.399830][T13096] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 490.407283][T13096] ? ns_capable+0xd5/0x110 [ 490.411966][T13096] genl_rcv_msg+0x561/0x800 [ 490.416609][T13096] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 490.422553][T13096] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 490.428600][T13096] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 490.434800][T13096] ? nl80211_set_wiphy+0x2ba0/0x2ba0 [ 490.440180][T13096] ? nl80211_get_power_save+0x480/0x480 [ 490.445877][T13096] netlink_rcv_skb+0x16b/0x440 [ 490.450688][T13096] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 490.456627][T13096] ? netlink_ack+0x1380/0x1380 [ 490.461475][T13096] ? down_read+0xc9/0x330 [ 490.465880][T13096] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 490.471643][T13096] ? netlink_deliver_tap+0x1a0/0xd00 [ 490.477254][T13096] genl_rcv+0x28/0x40 [ 490.481366][T13096] netlink_unicast+0x53b/0x810 [ 490.486358][T13096] ? netlink_attachskb+0x880/0x880 [ 490.491951][T13096] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 490.497912][T13096] ? __phys_addr_symbol+0x30/0x70 [ 490.502986][T13096] ? __check_object_size+0x323/0x730 [ 490.508323][T13096] netlink_sendmsg+0x93c/0xe40 [ 490.513230][T13096] ? netlink_unicast+0x810/0x810 [ 490.518325][T13096] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 490.523684][T13096] ? netlink_unicast+0x810/0x810 [ 490.528754][T13096] __sock_sendmsg+0xd5/0x180 [ 490.533406][T13096] ____sys_sendmsg+0x6ac/0x940 [ 490.538226][T13096] ? kernel_sendmsg+0x50/0x50 [ 490.542962][T13096] ? get_compat_msghdr+0x11b/0x170 [ 490.548133][T13096] ? find_held_lock+0x2d/0x110 [ 490.553052][T13096] ___sys_sendmsg+0x135/0x1d0 [ 490.557784][T13096] ? do_recvmmsg+0x740/0x740 [ 490.562540][T13096] ? find_held_lock+0x2d/0x110 [ 490.567409][T13096] ? __fget_light+0xe6/0x260 08:21:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) [ 490.572045][T13096] __sys_sendmsg+0x117/0x1e0 [ 490.576778][T13096] ? __sys_sendmsg_sock+0x30/0x30 [ 490.581889][T13096] __do_fast_syscall_32+0x62/0xe0 [ 490.587008][T13096] do_fast_syscall_32+0x33/0x70 [ 490.591911][T13096] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 490.598285][T13096] RIP: 0023:0xf7f98579 [ 490.602389][T13096] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 08:21:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) (fail_nth: 8) [ 490.622217][T13096] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 490.631111][T13096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 490.639210][T13096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.647303][T13096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 490.655506][T13096] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 490.663862][T13096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.671973][T13096] 08:21:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r10, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x80, 0x80, 0x7, 0x2, {{0x20, 0x4, 0x3, 0x23, 0x80, 0x68, 0x0, 0xff, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x38}, {[@ssrr={0x89, 0xb, 0x66, [@empty, @local]}, @timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0x6, [{@multicast1, 0x8001}, {@rand_addr=0x64010100, 0x3}, {@empty, 0xe7f}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffff000}, {@rand_addr=0x64010102}]}, @timestamp_addr={0x44, 0x34, 0xae, 0x1, 0xf, [{@multicast1}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0xd4d1}, {@rand_addr=0x64010102, 0x2}, {@multicast1, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)={0x144, r11, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x77b6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x850) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000110}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000240)={0x5e4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0xe4, 0x3, "92b5e22b68988cff84257b5d1b26d370f2c4eee21282b4f3a41a01658652bbd4e28293e876bee88914ed95484fd9c4bdeda7609ef63c5e093019e49128fd4048431222f068ef243733089adea275dc90d20f525df06871e708346cadf7760f351d50ce8a489deb5854d31535b24a8be953e52d63c9c91ebf67174f7e7586571104065c47ef944b37a06986dccfc35563f2d8c71f2b1866ab54b94516069c8f9bcc1d8becfd9162e07e612e98dac463dd93af2c8478aaf73082db01d8a2b6507c7b8a70f19ac5da22742ae9e5849a0ec96ef7f06531bcb43e295b38ec3e59a814"}, @ETHTOOL_A_WOL_MODES={0x2ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x69, 0x5, "099ff2b7cea0e1d346e32451e47ca4c6e3470eda9ca23101d319bf5f4b3c5f1aaabdc1746b2bafe69cafc0067e508eb0c35c360fe9e2782010624bbb1e7e72a3864d3ddcabfbfd99b1b9bf41406abe6b14eff03e53c04fa798af41281a34d833e0d464d8e2"}, @ETHTOOL_A_BITSET_MASK={0x86, 0x5, "fcc5b508aa1f858803f9bf692d5b1d450f5df7cbf3784018a3676b70a4f7cd7164ac936d9487cfafec674607c9c5f8f7fb820c3b372a93a7ac9ee01a2dd2ee087ea4d5db58cec3d30d9856cc57fc63c26132bcf2d2cb6cb0ae6480f37bbd4cfab15ec481869c7705976ae7013a057f75d6317d56381e030aa568656d197079eb98a9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0xd4, 0x4, "3fc664e1a29b320768695ef0ffc59e8103de9af7215988675b3f5dd564252851cc41aa981642eb75338e63befd96d82fd1948bb421b66dda213d3f44b78ad61bbab6cc30f2dd1005ee4ac7d5a823e633aa964c1dcfff79077756eb3727d1778adf7445f7a8c7a74712cee2118297a2974b657717d9fcaef5ea9452b58dcf9be2a329cd2f5cf24aff579212ea6f0e7aa59ff6224052268bb5e723941c81821c18ffc62c03f5702696ee37e0156b510f25d0a9df285e40f5df716ec90d0e6168a2758274e69e664ec1b3c9a3a4fa063819"}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "8cd6424f4a1dd65ab2acb8e1f6d0542032e23e9f4f3dbe4f6e827f2bbf77711fcdc1db2cf58ed0c5a979607c8bbce5902fce164b72fb889fb1f8d6db5500adc0261e04facc3e6e60f4365cc841788bd0850ce005368e573f2700f383922614a0b2dc10f8688632277fbeb36ba2552318a7d30bdef27e6d13c3c359145ee134fcd56655b7212dde47169d014a781f63b223cbecf4fbb21b6ee0522781a547cac28607934f2dfcbb4059160377155eb388bdb4743b220278ea06aacc86a1ee3fbe3d051ed504b571bc4c57519a"}]}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_WOL_SOPASS={0x80, 0x3, "bb1ca555cfeb60c5c6bd6a2e4e01d9f8d09c3e89d6cf5376ad3ec12fd4e6738d5a5cf087cec34db541d00beab25cdeba3b4ce5190cc2723d42bba3a1cfd054e32f06a9857ba2aac65e27ecd7c25b7e7259c8dfec0358092626cb14c125472dda9c8ae4640931d1f3f8f59912c4df787854c2e8c9a12df2946dd0ba25"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x3f, 0x3, "5ae14bbf3fdce46e871c60322048c4cf49124bafe7a6b7be3149c40a41a36f9cacca55ff90616cc72dc215a8fe4bf3cf3e143a91d4af1dde0dec3b"}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3cf}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xaf, 0x4, "6e032b3a78aea9ecd8fa221b28129f841fc7296612f6275a8c709de3cf2b70eae09d4bf411a353390bd2223983ea04597d62b38df06d9aa03547c05a49c1df071315fa86df0765ef6dea833ee67a36c73a7efa74e541d797f58932001c9a58236ff429cda272845f7167b7fb66b20d2633d73dbbfddf6a4e2550aa6cd34d7b70ef5416179f7a7c52dd265ddcabb66898e278be00ffe6624858141b0c9a9ee9b7a9bb9057808b7fb359024f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044010) [ 490.800543][T13112] FAULT_INJECTION: forcing a failure. [ 490.800543][T13112] name failslab, interval 1, probability 0, space 0, times 0 [ 490.815942][T13112] CPU: 1 PID: 13112 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller #0 [ 490.824700][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 490.834975][T13112] Call Trace: [ 490.838400][T13112] [ 490.841541][T13112] dump_stack_lvl+0x125/0x1b0 08:21:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 7) 08:21:52 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 490.846286][T13112] should_fail_ex+0x496/0x5b0 [ 490.851384][T13112] should_failslab+0x9/0x20 [ 490.856210][T13112] kmem_cache_alloc+0x69/0x2f0 [ 490.861088][T13112] skb_clone+0x171/0x3c0 [ 490.865398][T13112] netlink_deliver_tap+0xb35/0xd00 [ 490.870590][T13112] netlink_unicast+0x6b4/0x810 [ 490.880155][T13112] ? netlink_attachskb+0x880/0x880 [ 490.885614][T13112] netlink_ack+0x870/0x1380 [ 490.890185][T13112] ? netlink_sendmsg+0xe40/0xe40 [ 490.895460][T13112] netlink_rcv_skb+0x345/0x440 [ 490.900573][T13112] ? rtnl_fill_vf+0x4a0/0x4a0 [ 490.905327][T13112] ? netlink_ack+0x1380/0x1380 [ 490.910515][T13112] ? netlink_deliver_tap+0x1a0/0xd00 [ 490.916226][T13112] netlink_unicast+0x53b/0x810 [ 490.921154][T13112] ? netlink_attachskb+0x880/0x880 [ 490.926489][T13112] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 490.932455][T13112] ? __phys_addr_symbol+0x30/0x70 [ 490.937723][T13112] ? __check_object_size+0x323/0x730 [ 490.943161][T13112] netlink_sendmsg+0x93c/0xe40 [ 490.948764][T13112] ? netlink_unicast+0x810/0x810 [ 490.954378][T13112] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 490.959724][T13112] ? netlink_unicast+0x810/0x810 [ 490.964902][T13112] __sock_sendmsg+0xd5/0x180 [ 490.969562][T13112] ____sys_sendmsg+0x6ac/0x940 [ 490.974476][T13112] ? kernel_sendmsg+0x50/0x50 [ 490.979213][T13112] ? get_compat_msghdr+0x11b/0x170 [ 490.984403][T13112] ? find_held_lock+0x2d/0x110 [ 490.989243][T13112] ___sys_sendmsg+0x135/0x1d0 [ 490.993990][T13112] ? do_recvmmsg+0x740/0x740 [ 490.998933][T13112] ? find_held_lock+0x2d/0x110 [ 491.003789][T13112] ? __fget_light+0xe6/0x260 [ 491.008525][T13112] __sys_sendmsg+0x117/0x1e0 [ 491.013172][T13112] ? __sys_sendmsg_sock+0x30/0x30 [ 491.018506][T13112] __do_fast_syscall_32+0x62/0xe0 [ 491.023884][T13112] do_fast_syscall_32+0x33/0x70 [ 491.028910][T13112] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 491.035347][T13112] RIP: 0023:0xf7f95579 [ 491.039489][T13112] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 491.059319][T13112] RSP: 002b:00000000f7f905ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 491.068081][T13112] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 491.076185][T13112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.084288][T13112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.092496][T13112] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 08:21:52 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 491.100605][T13112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.108723][T13112] [ 491.132097][T13122] FAULT_INJECTION: forcing a failure. [ 491.132097][T13122] name failslab, interval 1, probability 0, space 0, times 0 [ 491.150482][T13122] CPU: 1 PID: 13122 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 491.159227][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 491.169411][T13122] Call Trace: [ 491.172773][T13122] [ 491.175788][T13122] dump_stack_lvl+0x125/0x1b0 [ 491.180526][T13122] should_fail_ex+0x496/0x5b0 [ 491.185278][T13122] should_failslab+0x9/0x20 [ 491.189843][T13122] kmem_cache_alloc_node+0x71/0x330 [ 491.195192][T13122] ? __alloc_skb+0x287/0x330 [ 491.199847][T13122] __alloc_skb+0x287/0x330 [ 491.204764][T13122] ? __napi_build_skb+0x50/0x50 [ 491.209774][T13122] nl80211_tx_mgmt+0x89f/0xe00 [ 491.214685][T13122] ? nl80211_set_wiphy+0x2ba0/0x2ba0 [ 491.220026][T13122] ? mutex_trylock+0x130/0x130 [ 491.224928][T13122] ? nl80211_pre_doit+0x1b0/0xb10 [ 491.230069][T13122] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 491.235649][T13122] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 491.243145][T13122] ? ns_capable+0xd5/0x110 [ 491.247630][T13122] genl_rcv_msg+0x561/0x800 [ 491.252445][T13122] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 491.258541][T13122] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 491.265033][T13122] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 491.271141][T13122] ? nl80211_set_wiphy+0x2ba0/0x2ba0 [ 491.276888][T13122] ? nl80211_get_power_save+0x480/0x480 [ 491.283114][T13122] netlink_rcv_skb+0x16b/0x440 [ 491.288007][T13122] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 491.293937][T13122] ? netlink_ack+0x1380/0x1380 [ 491.299008][T13122] ? down_read+0xc9/0x330 [ 491.303621][T13122] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 491.309471][T13122] ? netlink_deliver_tap+0x1a0/0xd00 [ 491.315330][T13122] genl_rcv+0x28/0x40 [ 491.319360][T13122] netlink_unicast+0x53b/0x810 [ 491.324272][T13122] ? netlink_attachskb+0x880/0x880 [ 491.329506][T13122] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 491.336047][T13122] ? __phys_addr_symbol+0x30/0x70 [ 491.341104][T13122] ? __check_object_size+0x323/0x730 [ 491.346687][T13122] netlink_sendmsg+0x93c/0xe40 [ 491.351483][T13122] ? netlink_unicast+0x810/0x810 [ 491.356467][T13122] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 491.361808][T13122] ? netlink_unicast+0x810/0x810 [ 491.366998][T13122] __sock_sendmsg+0xd5/0x180 [ 491.371647][T13122] ____sys_sendmsg+0x6ac/0x940 [ 491.376553][T13122] ? kernel_sendmsg+0x50/0x50 [ 491.381357][T13122] ? get_compat_msghdr+0x11b/0x170 [ 491.386637][T13122] ? find_held_lock+0x2d/0x110 [ 491.391647][T13122] ___sys_sendmsg+0x135/0x1d0 [ 491.396379][T13122] ? do_recvmmsg+0x740/0x740 [ 491.401296][T13122] ? find_held_lock+0x2d/0x110 [ 491.406146][T13122] ? __fget_light+0xe6/0x260 [ 491.410874][T13122] __sys_sendmsg+0x117/0x1e0 [ 491.415633][T13122] ? __sys_sendmsg_sock+0x30/0x30 [ 491.420919][T13122] __do_fast_syscall_32+0x62/0xe0 [ 491.426158][T13122] do_fast_syscall_32+0x33/0x70 [ 491.431044][T13122] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 491.437660][T13122] RIP: 0023:0xf7f98579 [ 491.441759][T13122] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 491.461654][T13122] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 491.470119][T13122] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 491.478119][T13122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 491.486111][T13122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.494101][T13122] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 491.502089][T13122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.510117][T13122] 08:21:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) [ 491.575984][T13126] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 08:21:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 8) 08:21:52 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) (fail_nth: 9) 08:21:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) [ 491.700047][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 491.721810][T13121] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 491.838535][T13135] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.878434][T13139] FAULT_INJECTION: forcing a failure. [ 491.878434][T13139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.917755][T13139] CPU: 0 PID: 13139 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller #0 [ 491.928326][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 491.939562][T13139] Call Trace: [ 491.943440][T13139] [ 491.946676][T13139] dump_stack_lvl+0x125/0x1b0 [ 491.952054][T13139] should_fail_ex+0x496/0x5b0 [ 491.956998][T13139] _copy_to_user+0x30/0xb0 [ 491.961925][T13139] simple_read_from_buffer+0xd0/0x160 [ 491.968409][T13139] proc_fail_nth_read+0x1b0/0x280 [ 491.973921][T13139] ? proc_fault_inject_read+0x280/0x280 [ 491.980051][T13139] ? security_file_permission+0xdc/0x100 [ 491.986511][T13139] ? proc_fault_inject_read+0x280/0x280 [ 491.992330][T13139] vfs_read+0x1ce/0x8f0 [ 491.997925][T13139] ? __fdget_pos+0xe7/0x170 [ 492.002957][T13139] ? kernel_read+0x1b0/0x1b0 [ 492.007935][T13139] ? mutex_trylock+0x130/0x130 [ 492.012931][T13139] ? __fget_files+0x1c6/0x340 [ 492.018194][T13139] ksys_read+0x12f/0x250 [ 492.022568][T13139] ? vfs_write+0xdf0/0xdf0 [ 492.027107][T13139] __do_fast_syscall_32+0x62/0xe0 [ 492.032358][T13139] do_fast_syscall_32+0x33/0x70 [ 492.037948][T13139] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 492.044427][T13139] RIP: 0023:0xf7f95579 [ 492.048712][T13139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 492.069254][T13139] RSP: 002b:00000000f7f905e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 08:21:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 08:21:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 9) [ 492.078517][T13139] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f7f90670 [ 492.087592][T13139] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 492.096367][T13139] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 492.105151][T13139] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 492.113335][T13139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 492.121730][T13139] 08:21:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 492.176299][T13143] FAULT_INJECTION: forcing a failure. [ 492.176299][T13143] name failslab, interval 1, probability 0, space 0, times 0 [ 492.207926][T13143] CPU: 1 PID: 13143 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 492.217092][T13143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 492.227844][T13143] Call Trace: [ 492.231192][T13143] [ 492.234460][T13143] dump_stack_lvl+0x125/0x1b0 [ 492.239554][T13143] should_fail_ex+0x496/0x5b0 [ 492.244577][T13143] should_failslab+0x9/0x20 [ 492.249325][T13143] kmem_cache_alloc_node+0x71/0x330 [ 492.255546][T13143] ? __alloc_skb+0x287/0x330 [ 492.260291][T13143] __alloc_skb+0x287/0x330 [ 492.264878][T13143] ? __napi_build_skb+0x50/0x50 [ 492.270433][T13143] ? ieee80211_mgmt_tx+0x1749/0x21b0 [ 492.276267][T13143] __netdev_alloc_skb+0x72/0x3f0 [ 492.281556][T13143] ieee80211_mgmt_tx+0x2a0/0x21b0 [ 492.287311][T13143] cfg80211_mlme_mgmt_tx+0x7c8/0x15f0 [ 492.293315][T13143] nl80211_tx_mgmt+0x956/0xe00 [ 492.298622][T13143] ? nl80211_set_wiphy+0x2ba0/0x2ba0 [ 492.304255][T13143] ? mutex_trylock+0x130/0x130 [ 492.309536][T13143] ? nl80211_pre_doit+0x1b0/0xb10 [ 492.314678][T13143] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 492.321426][T13143] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 492.329862][T13143] ? ns_capable+0xd5/0x110 [ 492.334808][T13143] genl_rcv_msg+0x561/0x800 [ 492.339847][T13143] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 492.346005][T13143] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 492.352270][T13143] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 492.359286][T13143] ? nl80211_set_wiphy+0x2ba0/0x2ba0 [ 492.364966][T13143] ? nl80211_get_power_save+0x480/0x480 [ 492.371191][T13143] netlink_rcv_skb+0x16b/0x440 [ 492.376097][T13143] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 492.382216][T13143] ? netlink_ack+0x1380/0x1380 [ 492.387405][T13143] ? down_read+0xc9/0x330 [ 492.392048][T13143] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 492.397907][T13143] ? netlink_deliver_tap+0x1a0/0xd00 [ 492.403347][T13143] genl_rcv+0x28/0x40 [ 492.407688][T13143] netlink_unicast+0x53b/0x810 [ 492.413192][T13143] ? netlink_attachskb+0x880/0x880 [ 492.418417][T13143] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 492.424695][T13143] ? __phys_addr_symbol+0x30/0x70 [ 492.430028][T13143] ? __check_object_size+0x323/0x730 [ 492.435622][T13143] netlink_sendmsg+0x93c/0xe40 [ 492.440653][T13143] ? netlink_unicast+0x810/0x810 [ 492.445827][T13143] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 492.451173][T13143] ? netlink_unicast+0x810/0x810 [ 492.456422][T13143] __sock_sendmsg+0xd5/0x180 [ 492.461668][T13143] ____sys_sendmsg+0x6ac/0x940 [ 492.466648][T13143] ? kernel_sendmsg+0x50/0x50 [ 492.471877][T13143] ? get_compat_msghdr+0x11b/0x170 [ 492.477199][T13143] ? find_held_lock+0x2d/0x110 [ 492.482971][T13143] ___sys_sendmsg+0x135/0x1d0 [ 492.488486][T13143] ? do_recvmmsg+0x740/0x740 [ 492.493822][T13143] ? find_held_lock+0x2d/0x110 [ 492.498854][T13143] ? __fget_light+0xe6/0x260 [ 492.503517][T13143] __sys_sendmsg+0x117/0x1e0 [ 492.508273][T13143] ? __sys_sendmsg_sock+0x30/0x30 [ 492.513622][T13143] __do_fast_syscall_32+0x62/0xe0 [ 492.518852][T13143] do_fast_syscall_32+0x33/0x70 [ 492.523875][T13143] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 492.530235][T13143] RIP: 0023:0xf7f98579 [ 492.534668][T13143] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 492.554836][T13143] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 492.563677][T13143] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 08:21:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) (async) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r10, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) (async) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r10, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x80, 0x80, 0x7, 0x2, {{0x20, 0x4, 0x3, 0x23, 0x80, 0x68, 0x0, 0xff, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x38}, {[@ssrr={0x89, 0xb, 0x66, [@empty, @local]}, @timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0x6, [{@multicast1, 0x8001}, {@rand_addr=0x64010100, 0x3}, {@empty, 0xe7f}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffff000}, {@rand_addr=0x64010102}]}, @timestamp_addr={0x44, 0x34, 0xae, 0x1, 0xf, [{@multicast1}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0xd4d1}, {@rand_addr=0x64010102, 0x2}, {@multicast1, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)={0x144, r11, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x77b6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x850) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000110}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000110}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000240)={0x5e4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0xe4, 0x3, "92b5e22b68988cff84257b5d1b26d370f2c4eee21282b4f3a41a01658652bbd4e28293e876bee88914ed95484fd9c4bdeda7609ef63c5e093019e49128fd4048431222f068ef243733089adea275dc90d20f525df06871e708346cadf7760f351d50ce8a489deb5854d31535b24a8be953e52d63c9c91ebf67174f7e7586571104065c47ef944b37a06986dccfc35563f2d8c71f2b1866ab54b94516069c8f9bcc1d8becfd9162e07e612e98dac463dd93af2c8478aaf73082db01d8a2b6507c7b8a70f19ac5da22742ae9e5849a0ec96ef7f06531bcb43e295b38ec3e59a814"}, @ETHTOOL_A_WOL_MODES={0x2ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x69, 0x5, "099ff2b7cea0e1d346e32451e47ca4c6e3470eda9ca23101d319bf5f4b3c5f1aaabdc1746b2bafe69cafc0067e508eb0c35c360fe9e2782010624bbb1e7e72a3864d3ddcabfbfd99b1b9bf41406abe6b14eff03e53c04fa798af41281a34d833e0d464d8e2"}, @ETHTOOL_A_BITSET_MASK={0x86, 0x5, "fcc5b508aa1f858803f9bf692d5b1d450f5df7cbf3784018a3676b70a4f7cd7164ac936d9487cfafec674607c9c5f8f7fb820c3b372a93a7ac9ee01a2dd2ee087ea4d5db58cec3d30d9856cc57fc63c26132bcf2d2cb6cb0ae6480f37bbd4cfab15ec481869c7705976ae7013a057f75d6317d56381e030aa568656d197079eb98a9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0xd4, 0x4, "3fc664e1a29b320768695ef0ffc59e8103de9af7215988675b3f5dd564252851cc41aa981642eb75338e63befd96d82fd1948bb421b66dda213d3f44b78ad61bbab6cc30f2dd1005ee4ac7d5a823e633aa964c1dcfff79077756eb3727d1778adf7445f7a8c7a74712cee2118297a2974b657717d9fcaef5ea9452b58dcf9be2a329cd2f5cf24aff579212ea6f0e7aa59ff6224052268bb5e723941c81821c18ffc62c03f5702696ee37e0156b510f25d0a9df285e40f5df716ec90d0e6168a2758274e69e664ec1b3c9a3a4fa063819"}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "8cd6424f4a1dd65ab2acb8e1f6d0542032e23e9f4f3dbe4f6e827f2bbf77711fcdc1db2cf58ed0c5a979607c8bbce5902fce164b72fb889fb1f8d6db5500adc0261e04facc3e6e60f4365cc841788bd0850ce005368e573f2700f383922614a0b2dc10f8688632277fbeb36ba2552318a7d30bdef27e6d13c3c359145ee134fcd56655b7212dde47169d014a781f63b223cbecf4fbb21b6ee0522781a547cac28607934f2dfcbb4059160377155eb388bdb4743b220278ea06aacc86a1ee3fbe3d051ed504b571bc4c57519a"}]}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_WOL_SOPASS={0x80, 0x3, "bb1ca555cfeb60c5c6bd6a2e4e01d9f8d09c3e89d6cf5376ad3ec12fd4e6738d5a5cf087cec34db541d00beab25cdeba3b4ce5190cc2723d42bba3a1cfd054e32f06a9857ba2aac65e27ecd7c25b7e7259c8dfec0358092626cb14c125472dda9c8ae4640931d1f3f8f59912c4df787854c2e8c9a12df2946dd0ba25"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x3f, 0x3, "5ae14bbf3fdce46e871c60322048c4cf49124bafe7a6b7be3149c40a41a36f9cacca55ff90616cc72dc215a8fe4bf3cf3e143a91d4af1dde0dec3b"}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3cf}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xaf, 0x4, "6e032b3a78aea9ecd8fa221b28129f841fc7296612f6275a8c709de3cf2b70eae09d4bf411a353390bd2223983ea04597d62b38df06d9aa03547c05a49c1df071315fa86df0765ef6dea833ee67a36c73a7efa74e541d797f58932001c9a58236ff429cda272845f7167b7fb66b20d2633d73dbbfddf6a4e2550aa6cd34d7b70ef5416179f7a7c52dd265ddcabb66898e278be00ffe6624858141b0c9a9ee9b7a9bb9057808b7fb359024f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044010) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000240)={0x5e4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0xe4, 0x3, "92b5e22b68988cff84257b5d1b26d370f2c4eee21282b4f3a41a01658652bbd4e28293e876bee88914ed95484fd9c4bdeda7609ef63c5e093019e49128fd4048431222f068ef243733089adea275dc90d20f525df06871e708346cadf7760f351d50ce8a489deb5854d31535b24a8be953e52d63c9c91ebf67174f7e7586571104065c47ef944b37a06986dccfc35563f2d8c71f2b1866ab54b94516069c8f9bcc1d8becfd9162e07e612e98dac463dd93af2c8478aaf73082db01d8a2b6507c7b8a70f19ac5da22742ae9e5849a0ec96ef7f06531bcb43e295b38ec3e59a814"}, @ETHTOOL_A_WOL_MODES={0x2ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x69, 0x5, "099ff2b7cea0e1d346e32451e47ca4c6e3470eda9ca23101d319bf5f4b3c5f1aaabdc1746b2bafe69cafc0067e508eb0c35c360fe9e2782010624bbb1e7e72a3864d3ddcabfbfd99b1b9bf41406abe6b14eff03e53c04fa798af41281a34d833e0d464d8e2"}, @ETHTOOL_A_BITSET_MASK={0x86, 0x5, "fcc5b508aa1f858803f9bf692d5b1d450f5df7cbf3784018a3676b70a4f7cd7164ac936d9487cfafec674607c9c5f8f7fb820c3b372a93a7ac9ee01a2dd2ee087ea4d5db58cec3d30d9856cc57fc63c26132bcf2d2cb6cb0ae6480f37bbd4cfab15ec481869c7705976ae7013a057f75d6317d56381e030aa568656d197079eb98a9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0xd4, 0x4, "3fc664e1a29b320768695ef0ffc59e8103de9af7215988675b3f5dd564252851cc41aa981642eb75338e63befd96d82fd1948bb421b66dda213d3f44b78ad61bbab6cc30f2dd1005ee4ac7d5a823e633aa964c1dcfff79077756eb3727d1778adf7445f7a8c7a74712cee2118297a2974b657717d9fcaef5ea9452b58dcf9be2a329cd2f5cf24aff579212ea6f0e7aa59ff6224052268bb5e723941c81821c18ffc62c03f5702696ee37e0156b510f25d0a9df285e40f5df716ec90d0e6168a2758274e69e664ec1b3c9a3a4fa063819"}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "8cd6424f4a1dd65ab2acb8e1f6d0542032e23e9f4f3dbe4f6e827f2bbf77711fcdc1db2cf58ed0c5a979607c8bbce5902fce164b72fb889fb1f8d6db5500adc0261e04facc3e6e60f4365cc841788bd0850ce005368e573f2700f383922614a0b2dc10f8688632277fbeb36ba2552318a7d30bdef27e6d13c3c359145ee134fcd56655b7212dde47169d014a781f63b223cbecf4fbb21b6ee0522781a547cac28607934f2dfcbb4059160377155eb388bdb4743b220278ea06aacc86a1ee3fbe3d051ed504b571bc4c57519a"}]}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_WOL_SOPASS={0x80, 0x3, "bb1ca555cfeb60c5c6bd6a2e4e01d9f8d09c3e89d6cf5376ad3ec12fd4e6738d5a5cf087cec34db541d00beab25cdeba3b4ce5190cc2723d42bba3a1cfd054e32f06a9857ba2aac65e27ecd7c25b7e7259c8dfec0358092626cb14c125472dda9c8ae4640931d1f3f8f59912c4df787854c2e8c9a12df2946dd0ba25"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x3f, 0x3, "5ae14bbf3fdce46e871c60322048c4cf49124bafe7a6b7be3149c40a41a36f9cacca55ff90616cc72dc215a8fe4bf3cf3e143a91d4af1dde0dec3b"}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3cf}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xaf, 0x4, "6e032b3a78aea9ecd8fa221b28129f841fc7296612f6275a8c709de3cf2b70eae09d4bf411a353390bd2223983ea04597d62b38df06d9aa03547c05a49c1df071315fa86df0765ef6dea833ee67a36c73a7efa74e541d797f58932001c9a58236ff429cda272845f7167b7fb66b20d2633d73dbbfddf6a4e2550aa6cd34d7b70ef5416179f7a7c52dd265ddcabb66898e278be00ffe6624858141b0c9a9ee9b7a9bb9057808b7fb359024f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044010) 08:21:53 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 492.571772][T13143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.579849][T13143] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.588188][T13143] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 492.596893][T13143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 492.605197][T13143] 08:21:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) 08:21:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:21:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 10) [ 492.791899][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 492.825270][T13155] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 08:21:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:21:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 492.854737][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.878208][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:21:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:54 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 492.981551][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:21:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 11) [ 493.089385][T10497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:21:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 493.135760][T10497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:21:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) (async) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) (async) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r6, @ANYRES64=r6], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r10, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r6) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x80, 0x80, 0x7, 0x2, {{0x20, 0x4, 0x3, 0x23, 0x80, 0x68, 0x0, 0xff, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x38}, {[@ssrr={0x89, 0xb, 0x66, [@empty, @local]}, @timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0x6, [{@multicast1, 0x8001}, {@rand_addr=0x64010100, 0x3}, {@empty, 0xe7f}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffff000}, {@rand_addr=0x64010102}]}, @timestamp_addr={0x44, 0x34, 0xae, 0x1, 0xf, [{@multicast1}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0xd4d1}, {@rand_addr=0x64010102, 0x2}, {@multicast1, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)={0x144, r11, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x77b6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x850) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000110}, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000240)={0x5e4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0xe4, 0x3, "92b5e22b68988cff84257b5d1b26d370f2c4eee21282b4f3a41a01658652bbd4e28293e876bee88914ed95484fd9c4bdeda7609ef63c5e093019e49128fd4048431222f068ef243733089adea275dc90d20f525df06871e708346cadf7760f351d50ce8a489deb5854d31535b24a8be953e52d63c9c91ebf67174f7e7586571104065c47ef944b37a06986dccfc35563f2d8c71f2b1866ab54b94516069c8f9bcc1d8becfd9162e07e612e98dac463dd93af2c8478aaf73082db01d8a2b6507c7b8a70f19ac5da22742ae9e5849a0ec96ef7f06531bcb43e295b38ec3e59a814"}, @ETHTOOL_A_WOL_MODES={0x2ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x69, 0x5, "099ff2b7cea0e1d346e32451e47ca4c6e3470eda9ca23101d319bf5f4b3c5f1aaabdc1746b2bafe69cafc0067e508eb0c35c360fe9e2782010624bbb1e7e72a3864d3ddcabfbfd99b1b9bf41406abe6b14eff03e53c04fa798af41281a34d833e0d464d8e2"}, @ETHTOOL_A_BITSET_MASK={0x86, 0x5, "fcc5b508aa1f858803f9bf692d5b1d450f5df7cbf3784018a3676b70a4f7cd7164ac936d9487cfafec674607c9c5f8f7fb820c3b372a93a7ac9ee01a2dd2ee087ea4d5db58cec3d30d9856cc57fc63c26132bcf2d2cb6cb0ae6480f37bbd4cfab15ec481869c7705976ae7013a057f75d6317d56381e030aa568656d197079eb98a9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0xd4, 0x4, "3fc664e1a29b320768695ef0ffc59e8103de9af7215988675b3f5dd564252851cc41aa981642eb75338e63befd96d82fd1948bb421b66dda213d3f44b78ad61bbab6cc30f2dd1005ee4ac7d5a823e633aa964c1dcfff79077756eb3727d1778adf7445f7a8c7a74712cee2118297a2974b657717d9fcaef5ea9452b58dcf9be2a329cd2f5cf24aff579212ea6f0e7aa59ff6224052268bb5e723941c81821c18ffc62c03f5702696ee37e0156b510f25d0a9df285e40f5df716ec90d0e6168a2758274e69e664ec1b3c9a3a4fa063819"}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "8cd6424f4a1dd65ab2acb8e1f6d0542032e23e9f4f3dbe4f6e827f2bbf77711fcdc1db2cf58ed0c5a979607c8bbce5902fce164b72fb889fb1f8d6db5500adc0261e04facc3e6e60f4365cc841788bd0850ce005368e573f2700f383922614a0b2dc10f8688632277fbeb36ba2552318a7d30bdef27e6d13c3c359145ee134fcd56655b7212dde47169d014a781f63b223cbecf4fbb21b6ee0522781a547cac28607934f2dfcbb4059160377155eb388bdb4743b220278ea06aacc86a1ee3fbe3d051ed504b571bc4c57519a"}]}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_WOL_SOPASS={0x80, 0x3, "bb1ca555cfeb60c5c6bd6a2e4e01d9f8d09c3e89d6cf5376ad3ec12fd4e6738d5a5cf087cec34db541d00beab25cdeba3b4ce5190cc2723d42bba3a1cfd054e32f06a9857ba2aac65e27ecd7c25b7e7259c8dfec0358092626cb14c125472dda9c8ae4640931d1f3f8f59912c4df787854c2e8c9a12df2946dd0ba25"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x3f, 0x3, "5ae14bbf3fdce46e871c60322048c4cf49124bafe7a6b7be3149c40a41a36f9cacca55ff90616cc72dc215a8fe4bf3cf3e143a91d4af1dde0dec3b"}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3cf}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xaf, 0x4, "6e032b3a78aea9ecd8fa221b28129f841fc7296612f6275a8c709de3cf2b70eae09d4bf411a353390bd2223983ea04597d62b38df06d9aa03547c05a49c1df071315fa86df0765ef6dea833ee67a36c73a7efa74e541d797f58932001c9a58236ff429cda272845f7167b7fb66b20d2633d73dbbfddf6a4e2550aa6cd34d7b70ef5416179f7a7c52dd265ddcabb66898e278be00ffe6624858141b0c9a9ee9b7a9bb9057808b7fb359024f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044010) 08:21:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) 08:21:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 12) 08:21:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:21:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:21:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 13) [ 493.479366][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:21:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:54 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 493.550160][T13187] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port 08:21:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x2, 0x88, 0x2}, 0x18) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="590a33dd1833d66761945cb65ec7ac2bc220fe82e8e9fcbdd1338898", @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}, 0x1, 0x0, 0x0, 0xfcfaffe531b75703}, 0x8000) 08:21:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r8, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x9, 0x0, 0x100, 0x80}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x448d5}, 0x4000) 08:21:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 493.770803][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:21:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 14) 08:21:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 493.867096][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:21:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x2, 0x88, 0x2}, 0x18) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="590a33dd1833d66761945cb65ec7ac2bc220fe82e8e9fcbdd1338898", @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}, 0x1, 0x0, 0x0, 0xfcfaffe531b75703}, 0x8000) [ 493.917202][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.998800][T13211] wireguard0: entered promiscuous mode [ 494.008006][T13211] wireguard0: entered allmulticast mode [ 494.071315][T13216] FAULT_INJECTION: forcing a failure. [ 494.071315][T13216] name failslab, interval 1, probability 0, space 0, times 0 [ 494.092559][T13216] CPU: 1 PID: 13216 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 494.101690][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 494.111761][T13216] Call Trace: [ 494.115155][T13216] [ 494.118285][T13216] dump_stack_lvl+0x125/0x1b0 [ 494.123127][T13216] should_fail_ex+0x496/0x5b0 [ 494.127848][T13216] should_failslab+0x9/0x20 [ 494.132661][T13216] kmem_cache_alloc_node+0x71/0x330 [ 494.138322][T13216] ? __alloc_skb+0x287/0x330 [ 494.142968][T13216] __alloc_skb+0x287/0x330 [ 494.147593][T13216] ? __napi_build_skb+0x50/0x50 [ 494.152461][T13216] ? mark_held_locks+0x9f/0xe0 [ 494.157243][T13216] ? do_raw_spin_lock+0x12e/0x2b0 [ 494.162270][T13216] ? spin_bug+0x1d0/0x1d0 [ 494.166605][T13216] skb_copy+0x12c/0x2e0 [ 494.170770][T13216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 494.176678][T13216] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 494.183374][T13216] ? hwsim_virtio_rx_work+0x390/0x390 [ 494.188787][T13216] ? irqentry_exit+0x3b/0x80 [ 494.193391][T13216] ? lock_acquire+0x1ae/0x520 [ 494.198163][T13216] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 494.204109][T13216] mac80211_hwsim_tx+0x7a2/0x25d0 [ 494.209343][T13216] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 494.215310][T13216] ieee80211_tx_frags+0x5a0/0x9d0 [ 494.221241][T13216] ? ieee80211_txq_airtime_check+0x4e0/0x4e0 [ 494.227524][T13216] __ieee80211_tx+0x144/0x4f0 [ 494.232334][T13216] ieee80211_tx+0x334/0x420 [ 494.236872][T13216] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 494.242884][T13216] ? ieee80211_skb_resize+0x22a/0x620 [ 494.248531][T13216] ? ieee80211_set_qos_hdr+0xba/0x3e0 [ 494.254173][T13216] ieee80211_xmit+0x30e/0x3e0 [ 494.259646][T13216] __ieee80211_tx_skb_tid_band+0x29b/0x700 [ 494.265711][T13216] ieee80211_tx_skb_tid+0x176/0x4f0 [ 494.271176][T13216] ieee80211_mgmt_tx+0x10ac/0x21b0 [ 494.276577][T13216] cfg80211_mlme_mgmt_tx+0x7c8/0x15f0 [ 494.282874][T13216] nl80211_tx_mgmt+0x956/0xe00 [ 494.288130][T13216] ? nl80211_set_wiphy+0x2ba0/0x2ba0 [ 494.293749][T13216] ? mutex_trylock+0x130/0x130 [ 494.298644][T13216] ? nl80211_pre_doit+0x1b0/0xb10 [ 494.303782][T13216] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 494.309754][T13216] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 494.317533][T13216] ? ns_capable+0xd5/0x110 [ 494.321990][T13216] genl_rcv_msg+0x561/0x800 [ 494.326851][T13216] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 494.333028][T13216] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 494.339125][T13216] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 494.345225][T13216] ? nl80211_set_wiphy+0x2ba0/0x2ba0 [ 494.350781][T13216] ? nl80211_get_power_save+0x480/0x480 [ 494.356518][T13216] netlink_rcv_skb+0x16b/0x440 [ 494.361282][T13216] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 494.367544][T13216] ? netlink_ack+0x1380/0x1380 [ 494.372581][T13216] ? down_read+0xc9/0x330 [ 494.377085][T13216] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 494.382928][T13216] ? netlink_deliver_tap+0x1a0/0xd00 [ 494.388330][T13216] genl_rcv+0x28/0x40 [ 494.392414][T13216] netlink_unicast+0x53b/0x810 [ 494.397363][T13216] ? netlink_attachskb+0x880/0x880 [ 494.402491][T13216] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 494.408487][T13216] ? __phys_addr_symbol+0x30/0x70 [ 494.413541][T13216] ? __check_object_size+0x323/0x730 [ 494.418840][T13216] netlink_sendmsg+0x93c/0xe40 [ 494.424011][T13216] ? netlink_unicast+0x810/0x810 [ 494.429045][T13216] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 494.434715][T13216] ? netlink_unicast+0x810/0x810 [ 494.439661][T13216] __sock_sendmsg+0xd5/0x180 [ 494.444350][T13216] ____sys_sendmsg+0x6ac/0x940 [ 494.449119][T13216] ? kernel_sendmsg+0x50/0x50 [ 494.453801][T13216] ? get_compat_msghdr+0x11b/0x170 [ 494.459197][T13216] ? find_held_lock+0x2d/0x110 [ 494.463970][T13216] ___sys_sendmsg+0x135/0x1d0 [ 494.468656][T13216] ? do_recvmmsg+0x740/0x740 [ 494.473254][T13216] ? find_held_lock+0x2d/0x110 [ 494.478502][T13216] ? __fget_light+0xe6/0x260 [ 494.483307][T13216] __sys_sendmsg+0x117/0x1e0 [ 494.488031][T13216] ? __sys_sendmsg_sock+0x30/0x30 [ 494.493127][T13216] __do_fast_syscall_32+0x62/0xe0 [ 494.498261][T13216] do_fast_syscall_32+0x33/0x70 [ 494.503134][T13216] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 494.509640][T13216] RIP: 0023:0xf7f98579 [ 494.513795][T13216] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 494.534835][T13216] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 494.543294][T13216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 494.551631][T13216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 494.560219][T13216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 494.568211][T13216] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 494.576302][T13216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.584538][T13216] 08:21:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x2, 0x88, 0x2}, 0x18) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="590a33dd1833d66761945cb65ec7ac2bc220fe82e8e9fcbdd1338898", @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}, 0x1, 0x0, 0x0, 0xfcfaffe531b75703}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x2, 0x88, 0x2}, 0x18) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="590a33dd1833d66761945cb65ec7ac2bc220fe82e8e9fcbdd1338898", @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}, 0x1, 0x0, 0x0, 0xfcfaffe531b75703}, 0x8000) (async) 08:21:55 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:21:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x8) 08:21:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 15) 08:21:56 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:56 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180), 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r8, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x9, 0x0, 0x100, 0x80}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x448d5}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r8, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x9, 0x0, 0x100, 0x80}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x448d5}, 0x4000) (async) 08:21:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:21:56 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x8) 08:21:56 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 495.105139][T13242] FAULT_INJECTION: forcing a failure. [ 495.105139][T13242] name failslab, interval 1, probability 0, space 0, times 0 [ 495.118281][T13242] CPU: 0 PID: 13242 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 495.127437][T13242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 495.137635][T13242] Call Trace: [ 495.140938][T13242] [ 495.144051][T13242] dump_stack_lvl+0x125/0x1b0 [ 495.149026][T13242] should_fail_ex+0x496/0x5b0 [ 495.154010][T13242] should_failslab+0x9/0x20 [ 495.158630][T13242] kmem_cache_alloc_node+0x71/0x330 [ 495.163964][T13242] ? __alloc_skb+0x287/0x330 [ 495.168612][T13242] __alloc_skb+0x287/0x330 [ 495.173341][T13242] ? __napi_build_skb+0x50/0x50 [ 495.179306][T13242] ? mark_held_locks+0x9f/0xe0 [ 495.185262][T13242] ? do_raw_spin_lock+0x12e/0x2b0 [ 495.190784][T13242] ? spin_bug+0x1d0/0x1d0 [ 495.195303][T13242] skb_copy+0x12c/0x2e0 [ 495.199699][T13242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.205931][T13242] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb94/0x1300 [ 495.212650][T13242] ? hwsim_virtio_rx_work+0x390/0x390 [ 495.218372][T13242] ? lock_acquire+0x1ae/0x520 [ 495.223364][T13242] ? mac80211_hwsim_monitor_rx+0x1c7/0x850 [ 495.229481][T13242] mac80211_hwsim_tx+0x7a2/0x25d0 [ 495.234643][T13242] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 495.240682][T13242] ieee80211_tx_frags+0x5a0/0x9d0 [ 495.246550][T13242] ? ieee80211_txq_airtime_check+0x4e0/0x4e0 [ 495.252729][T13242] __ieee80211_tx+0x144/0x4f0 [ 495.257626][T13242] ieee80211_tx+0x334/0x420 [ 495.262329][T13242] ? ieee80211_tx_prepare_skb+0x470/0x470 [ 495.268439][T13242] ? ieee80211_skb_resize+0x22a/0x620 [ 495.274265][T13242] ? ieee80211_set_qos_hdr+0xba/0x3e0 [ 495.280166][T13242] ieee80211_xmit+0x30e/0x3e0 [ 495.285148][T13242] __ieee80211_tx_skb_tid_band+0x29b/0x700 [ 495.291308][T13242] ieee80211_tx_skb_tid+0x176/0x4f0 [ 495.296520][T13242] ieee80211_mgmt_tx+0x10ac/0x21b0 [ 495.301716][T13242] cfg80211_mlme_mgmt_tx+0x7c8/0x15f0 [ 495.307143][T13242] nl80211_tx_mgmt+0x956/0xe00 [ 495.311942][T13242] ? nl80211_set_wiphy+0x2ba0/0x2ba0 [ 495.317350][T13242] ? mutex_trylock+0x130/0x130 [ 495.322244][T13242] ? nl80211_pre_doit+0x1b0/0xb10 [ 495.327372][T13242] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 495.332958][T13242] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 495.340439][T13242] ? ns_capable+0xd5/0x110 [ 495.345008][T13242] genl_rcv_msg+0x561/0x800 [ 495.349542][T13242] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 495.355470][T13242] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 495.361860][T13242] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 495.367967][T13242] ? nl80211_set_wiphy+0x2ba0/0x2ba0 [ 495.373357][T13242] ? nl80211_get_power_save+0x480/0x480 [ 495.378934][T13242] netlink_rcv_skb+0x16b/0x440 [ 495.383953][T13242] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 495.390413][T13242] ? netlink_ack+0x1380/0x1380 [ 495.395637][T13242] ? down_read+0xc9/0x330 [ 495.399970][T13242] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 495.405827][T13242] ? netlink_deliver_tap+0x1a0/0xd00 [ 495.411180][T13242] genl_rcv+0x28/0x40 [ 495.415176][T13242] netlink_unicast+0x53b/0x810 [ 495.420074][T13242] ? netlink_attachskb+0x880/0x880 [ 495.425378][T13242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.431471][T13242] ? __phys_addr_symbol+0x30/0x70 [ 495.436505][T13242] ? __check_object_size+0x323/0x730 [ 495.441886][T13242] netlink_sendmsg+0x93c/0xe40 [ 495.446757][T13242] ? netlink_unicast+0x810/0x810 [ 495.451723][T13242] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 495.457055][T13242] ? netlink_unicast+0x810/0x810 [ 495.462223][T13242] __sock_sendmsg+0xd5/0x180 [ 495.466827][T13242] ____sys_sendmsg+0x6ac/0x940 [ 495.471608][T13242] ? kernel_sendmsg+0x50/0x50 [ 495.476290][T13242] ? get_compat_msghdr+0x11b/0x170 [ 495.481593][T13242] ? find_held_lock+0x2d/0x110 [ 495.486370][T13242] ___sys_sendmsg+0x135/0x1d0 [ 495.491080][T13242] ? do_recvmmsg+0x740/0x740 [ 495.495780][T13242] ? find_held_lock+0x2d/0x110 [ 495.500584][T13242] ? __fget_light+0xe6/0x260 [ 495.505375][T13242] __sys_sendmsg+0x117/0x1e0 [ 495.510003][T13242] ? __sys_sendmsg_sock+0x30/0x30 [ 495.515214][T13242] __do_fast_syscall_32+0x62/0xe0 [ 495.520430][T13242] do_fast_syscall_32+0x33/0x70 [ 495.525408][T13242] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 495.531828][T13242] RIP: 0023:0xf7f98579 [ 495.535888][T13242] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 495.556131][T13242] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 495.564919][T13242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 495.573202][T13242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.581483][T13242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.589595][T13242] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 495.597775][T13242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.605772][T13242] 08:21:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x8) 08:21:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 16) 08:21:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 495.756354][T13244] wireguard0: entered promiscuous mode [ 495.769391][T13244] wireguard0: entered allmulticast mode 08:21:57 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 17) 08:21:57 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180), 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 495.858147][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 495.982746][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:21:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r8, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x9, 0x0, 0x100, 0x80}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x448d5}, 0x4000) [ 496.024577][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:21:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:21:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1f0000ca02000000000000f5000002000000000000000064e0a86dbfbf649c82cc5fbc35976a2701253876687c4e", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802793375e17537110000c836e8c83bf90bfd38000709389c5a50597bbcd0e3acdbb8e597915fb5289af300d24478e525eef3ef"], 0x4c}}, 0x0) [ 496.174497][T13272] FAULT_INJECTION: forcing a failure. [ 496.174497][T13272] name failslab, interval 1, probability 0, space 0, times 0 [ 496.192739][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 496.257946][T13272] CPU: 0 PID: 13272 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 496.266975][T13272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 496.277329][T13272] Call Trace: [ 496.280650][T13272] [ 496.283716][T13272] dump_stack_lvl+0x125/0x1b0 [ 496.288554][T13272] should_fail_ex+0x496/0x5b0 [ 496.293408][T13272] should_failslab+0x9/0x20 [ 496.298034][T13272] kmem_cache_alloc+0x69/0x2f0 [ 496.303133][T13272] skb_clone+0x171/0x3c0 [ 496.307627][T13272] netlink_deliver_tap+0xb35/0xd00 [ 496.312787][T13272] netlink_unicast+0x6b4/0x810 [ 496.317691][T13272] ? netlink_attachskb+0x880/0x880 [ 496.322871][T13272] ? nla_put_64bit+0x11a/0x150 [ 496.328040][T13272] nl80211_tx_mgmt+0xc5f/0xe00 [ 496.332967][T13272] ? nl80211_set_wiphy+0x2ba0/0x2ba0 [ 496.338558][T13272] ? mutex_trylock+0x130/0x130 [ 496.343491][T13272] ? nl80211_pre_doit+0x1b0/0xb10 [ 496.348577][T13272] genl_family_rcv_msg_doit+0x1fc/0x2e0 [ 496.354286][T13272] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 496.361731][T13272] ? ns_capable+0xd5/0x110 [ 496.366576][T13272] genl_rcv_msg+0x561/0x800 [ 496.371136][T13272] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 496.377243][T13272] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 496.383425][T13272] ? cfg80211_crit_proto_stopped+0x490/0x490 [ 496.389713][T13272] ? nl80211_set_wiphy+0x2ba0/0x2ba0 [ 496.395050][T13272] ? nl80211_get_power_save+0x480/0x480 [ 496.400666][T13272] netlink_rcv_skb+0x16b/0x440 [ 496.405492][T13272] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 496.411423][T13272] ? netlink_ack+0x1380/0x1380 [ 496.416234][T13272] ? down_read+0xc9/0x330 [ 496.420590][T13272] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 496.426481][T13272] ? netlink_deliver_tap+0x1a0/0xd00 [ 496.431991][T13272] genl_rcv+0x28/0x40 [ 496.435991][T13272] netlink_unicast+0x53b/0x810 [ 496.440813][T13272] ? netlink_attachskb+0x880/0x880 [ 496.445945][T13272] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 496.451865][T13272] ? __phys_addr_symbol+0x30/0x70 [ 496.456945][T13272] ? __check_object_size+0x323/0x730 [ 496.462348][T13272] netlink_sendmsg+0x93c/0xe40 [ 496.467150][T13272] ? netlink_unicast+0x810/0x810 [ 496.472290][T13272] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 496.477795][T13272] ? netlink_unicast+0x810/0x810 [ 496.482844][T13272] __sock_sendmsg+0xd5/0x180 [ 496.487461][T13272] ____sys_sendmsg+0x6ac/0x940 [ 496.492349][T13272] ? kernel_sendmsg+0x50/0x50 [ 496.497063][T13272] ? get_compat_msghdr+0x11b/0x170 [ 496.502235][T13272] ? find_held_lock+0x2d/0x110 [ 496.507208][T13272] ___sys_sendmsg+0x135/0x1d0 [ 496.511919][T13272] ? do_recvmmsg+0x740/0x740 [ 496.516627][T13272] ? find_held_lock+0x2d/0x110 [ 496.521539][T13272] ? __fget_light+0xe6/0x260 [ 496.526356][T13272] __sys_sendmsg+0x117/0x1e0 [ 496.531094][T13272] ? __sys_sendmsg_sock+0x30/0x30 [ 496.536203][T13272] __do_fast_syscall_32+0x62/0xe0 [ 496.541322][T13272] do_fast_syscall_32+0x33/0x70 [ 496.546317][T13272] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 496.552694][T13272] RIP: 0023:0xf7f98579 [ 496.556795][T13272] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 496.576786][T13272] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 496.585318][T13272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 496.593328][T13272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.601510][T13272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 08:21:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x7) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:21:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 496.609724][T13272] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 496.617720][T13272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.625925][T13272] 08:21:57 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180), 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 496.714549][T13284] wireguard0: entered promiscuous mode [ 496.736750][T13284] wireguard0: entered allmulticast mode [ 496.808802][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.825355][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:21:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:21:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 18) 08:21:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (rerun: 64) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x7) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:21:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:58 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:21:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1f0000ca02000000000000f5000002000000000000000064e0a86dbfbf649c82cc5fbc35976a2701253876687c4e", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802793375e17537110000c836e8c83bf90bfd38000709389c5a50597bbcd0e3acdbb8e597915fb5289af300d24478e525eef3ef"], 0x4c}}, 0x0) 08:21:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 497.140298][T13301] FAULT_INJECTION: forcing a failure. [ 497.140298][T13301] name failslab, interval 1, probability 0, space 0, times 0 [ 497.141106][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 497.175469][T13301] CPU: 1 PID: 13301 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 497.184347][T13301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 497.194623][T13301] Call Trace: [ 497.197940][T13301] [ 497.200904][T13301] dump_stack_lvl+0x125/0x1b0 [ 497.205650][T13301] should_fail_ex+0x496/0x5b0 [ 497.210577][T13301] should_failslab+0x9/0x20 [ 497.215262][T13301] kmem_cache_alloc_node+0x71/0x330 [ 497.220527][T13301] ? __alloc_skb+0x287/0x330 [ 497.225358][T13301] __alloc_skb+0x287/0x330 [ 497.230089][T13301] ? __napi_build_skb+0x50/0x50 [ 497.235121][T13301] ? ns_capable+0xd5/0x110 08:21:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (rerun: 32) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x7) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 497.239607][T13301] netlink_ack+0x3bb/0x1380 [ 497.244526][T13301] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 497.250563][T13301] ? netlink_sendmsg+0xe40/0xe40 [ 497.255740][T13301] netlink_rcv_skb+0x345/0x440 [ 497.260661][T13301] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 497.266961][T13301] ? netlink_ack+0x1380/0x1380 [ 497.271792][T13301] ? down_read+0xc9/0x330 [ 497.276253][T13301] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 497.282291][T13301] ? netlink_deliver_tap+0x1a0/0xd00 [ 497.287655][T13301] genl_rcv+0x28/0x40 [ 497.291733][T13301] netlink_unicast+0x53b/0x810 [ 497.296674][T13301] ? netlink_attachskb+0x880/0x880 [ 497.301829][T13301] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.308206][T13301] ? __phys_addr_symbol+0x30/0x70 [ 497.313364][T13301] ? __check_object_size+0x323/0x730 [ 497.318805][T13301] netlink_sendmsg+0x93c/0xe40 [ 497.323634][T13301] ? netlink_unicast+0x810/0x810 [ 497.328723][T13301] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 497.334515][T13301] ? netlink_unicast+0x810/0x810 [ 497.339697][T13301] __sock_sendmsg+0xd5/0x180 [ 497.344450][T13301] ____sys_sendmsg+0x6ac/0x940 [ 497.349636][T13301] ? kernel_sendmsg+0x50/0x50 [ 497.354473][T13301] ? get_compat_msghdr+0x11b/0x170 [ 497.359751][T13301] ? find_held_lock+0x2d/0x110 [ 497.364601][T13301] ___sys_sendmsg+0x135/0x1d0 [ 497.369549][T13301] ? do_recvmmsg+0x740/0x740 [ 497.374290][T13301] ? find_held_lock+0x2d/0x110 [ 497.379250][T13301] ? __fget_light+0xe6/0x260 [ 497.383981][T13301] __sys_sendmsg+0x117/0x1e0 [ 497.388634][T13301] ? __sys_sendmsg_sock+0x30/0x30 [ 497.393875][T13301] __do_fast_syscall_32+0x62/0xe0 [ 497.398968][T13301] do_fast_syscall_32+0x33/0x70 [ 497.403963][T13301] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 497.410437][T13301] RIP: 0023:0xf7f98579 [ 497.414540][T13301] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 08:21:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x290, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x5f, 0x45, "a56e7a105722ebc88d2aa7ba12bde67e7309868427925353fc2474081686dd000d8d1de512df0be0c765d6b83e841cf96cbff3697ab3a1c785363363d6e2c4b8f507a3cc0f0686235c73c0b6feb9c512a8fe848f5b3ce34a72c8fe"}, @NL80211_ATTR_TESTDATA={0x7, 0x45, "82283b"}, @NL80211_ATTR_TESTDATA={0xf7, 0x45, "06bb9baeaebf142202fd7f6ada2525ec212e983e50e5aa1e3a4e15b7e4bfc33c534aab27367a583b16ca7decef674b94fdbb15bb4bb109b170441cde89efbc2042495d2e766b519000b467b1c77f5c8ec44fac7eda40eed830b1099c9972a7e37650fe4eea69ef11ac600fbea18ff6b6cbad17b349f0cbb4e64e088a3500006ba6f27c4ca716bff96acf3dd99d234fea087adc20c36a37a2f6617618cdd92d0bc524b6f95cd1c3e5a4c860425d888a524f268ef739b807394b6cc09134cb41f56c7fbf896a0821b757f17c379f404137c65dee5beb2e653097da4997ffba2cd347696a2579d03f1156436c6869bd340c4a18d2"}, @NL80211_ATTR_TESTDATA={0xbb, 0x45, "8923334ac10e89c2240d76891b741f87cded9fdd3872caa60ce19b6a9eadee52af109378fd1303197bea102f69d8131af970007ca14c4227e4eb182892f4de2373984d1f422ca04904763d5e9deb9fd9b660457af2fbd69ff63ed3e303f9c60b6e0e3964bd2e36312bfa6a92bb80de80140e0b96379937460c4eca59036a156bab9236e5bcb0ce4d43b0160e76750900b7744a91173d6fa04ef50b525395801e840cbbf70f022dbf31e510e3666b6bcfde0800111f8edb"}, @NL80211_ATTR_TESTDATA={0x5f, 0x45, "3c8552b195d9c7a71e55b3a06217745750d911884c71b3b9d5a8f8fb11bf93373cb26a1169c81b0d472dfd998ea7259f7538f5f2700cbb18805eca1d98c3811e3eba21ad665731f6e7dcc65cd6b8c05818ac84de1b778747e68391"}]}, 0x290}, 0x1, 0x0, 0x0, 0x40008}, 0x4040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) [ 497.434548][T13301] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 497.443280][T13301] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 497.451557][T13301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.459750][T13301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.468042][T13301] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 497.476320][T13301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.484619][T13301] 08:21:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 497.534966][T13314] wireguard0: entered promiscuous mode 08:21:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 497.579152][T13314] wireguard0: entered allmulticast mode [ 497.605533][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:21:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1f0000ca02000000000000f5000002000000000000000064e0a86dbfbf649c82cc5fbc35976a2701253876687c4e", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802793375e17537110000c836e8c83bf90bfd38000709389c5a50597bbcd0e3acdbb8e597915fb5289af300d24478e525eef3ef"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1f0000ca02000000000000f5000002000000000000000064e0a86dbfbf649c82cc5fbc35976a2701253876687c4e", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802793375e17537110000c836e8c83bf90bfd38000709389c5a50597bbcd0e3acdbb8e597915fb5289af300d24478e525eef3ef"], 0x4c}}, 0x0) (async) [ 497.665522][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:21:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x290, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x5f, 0x45, "a56e7a105722ebc88d2aa7ba12bde67e7309868427925353fc2474081686dd000d8d1de512df0be0c765d6b83e841cf96cbff3697ab3a1c785363363d6e2c4b8f507a3cc0f0686235c73c0b6feb9c512a8fe848f5b3ce34a72c8fe"}, @NL80211_ATTR_TESTDATA={0x7, 0x45, "82283b"}, @NL80211_ATTR_TESTDATA={0xf7, 0x45, "06bb9baeaebf142202fd7f6ada2525ec212e983e50e5aa1e3a4e15b7e4bfc33c534aab27367a583b16ca7decef674b94fdbb15bb4bb109b170441cde89efbc2042495d2e766b519000b467b1c77f5c8ec44fac7eda40eed830b1099c9972a7e37650fe4eea69ef11ac600fbea18ff6b6cbad17b349f0cbb4e64e088a3500006ba6f27c4ca716bff96acf3dd99d234fea087adc20c36a37a2f6617618cdd92d0bc524b6f95cd1c3e5a4c860425d888a524f268ef739b807394b6cc09134cb41f56c7fbf896a0821b757f17c379f404137c65dee5beb2e653097da4997ffba2cd347696a2579d03f1156436c6869bd340c4a18d2"}, @NL80211_ATTR_TESTDATA={0xbb, 0x45, "8923334ac10e89c2240d76891b741f87cded9fdd3872caa60ce19b6a9eadee52af109378fd1303197bea102f69d8131af970007ca14c4227e4eb182892f4de2373984d1f422ca04904763d5e9deb9fd9b660457af2fbd69ff63ed3e303f9c60b6e0e3964bd2e36312bfa6a92bb80de80140e0b96379937460c4eca59036a156bab9236e5bcb0ce4d43b0160e76750900b7744a91173d6fa04ef50b525395801e840cbbf70f022dbf31e510e3666b6bcfde0800111f8edb"}, @NL80211_ATTR_TESTDATA={0x5f, 0x45, "3c8552b195d9c7a71e55b3a06217745750d911884c71b3b9d5a8f8fb11bf93373cb26a1169c81b0d472dfd998ea7259f7538f5f2700cbb18805eca1d98c3811e3eba21ad665731f6e7dcc65cd6b8c05818ac84de1b778747e68391"}]}, 0x290}, 0x1, 0x0, 0x0, 0x40008}, 0x4040) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) 08:21:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 19) 08:21:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x52c, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:21:59 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 497.951242][T13329] wireguard1: entered promiscuous mode [ 497.967443][T13329] wireguard1: entered allmulticast mode 08:21:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x290, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x5f, 0x45, "a56e7a105722ebc88d2aa7ba12bde67e7309868427925353fc2474081686dd000d8d1de512df0be0c765d6b83e841cf96cbff3697ab3a1c785363363d6e2c4b8f507a3cc0f0686235c73c0b6feb9c512a8fe848f5b3ce34a72c8fe"}, @NL80211_ATTR_TESTDATA={0x7, 0x45, "82283b"}, @NL80211_ATTR_TESTDATA={0xf7, 0x45, "06bb9baeaebf142202fd7f6ada2525ec212e983e50e5aa1e3a4e15b7e4bfc33c534aab27367a583b16ca7decef674b94fdbb15bb4bb109b170441cde89efbc2042495d2e766b519000b467b1c77f5c8ec44fac7eda40eed830b1099c9972a7e37650fe4eea69ef11ac600fbea18ff6b6cbad17b349f0cbb4e64e088a3500006ba6f27c4ca716bff96acf3dd99d234fea087adc20c36a37a2f6617618cdd92d0bc524b6f95cd1c3e5a4c860425d888a524f268ef739b807394b6cc09134cb41f56c7fbf896a0821b757f17c379f404137c65dee5beb2e653097da4997ffba2cd347696a2579d03f1156436c6869bd340c4a18d2"}, @NL80211_ATTR_TESTDATA={0xbb, 0x45, "8923334ac10e89c2240d76891b741f87cded9fdd3872caa60ce19b6a9eadee52af109378fd1303197bea102f69d8131af970007ca14c4227e4eb182892f4de2373984d1f422ca04904763d5e9deb9fd9b660457af2fbd69ff63ed3e303f9c60b6e0e3964bd2e36312bfa6a92bb80de80140e0b96379937460c4eca59036a156bab9236e5bcb0ce4d43b0160e76750900b7744a91173d6fa04ef50b525395801e840cbbf70f022dbf31e510e3666b6bcfde0800111f8edb"}, @NL80211_ATTR_TESTDATA={0x5f, 0x45, "3c8552b195d9c7a71e55b3a06217745750d911884c71b3b9d5a8f8fb11bf93373cb26a1169c81b0d472dfd998ea7259f7538f5f2700cbb18805eca1d98c3811e3eba21ad665731f6e7dcc65cd6b8c05818ac84de1b778747e68391"}]}, 0x290}, 0x1, 0x0, 0x0, 0x40008}, 0x4040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @void, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) [ 498.019377][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:21:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:21:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 20) [ 498.071179][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.120073][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:21:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x8001]}, 0x8) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x138, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa3c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4f6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3927}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="62e802c92b2a0c6d8815c9bbc2aef3890e264ea068e2705f4e91023f1d7fc0a86e5e6ef23629b7a9b413d3fb994cd625eff9f51ac6147e556533e7b66d6ac970af908be8a5fa578af142df67f5f2eeec9d30f06b0a828a538029fbe1937f85f7e83f2e66bcd16cad96b62d4957f9cad4dea71a39057aaedece302f6a57844724d9b2876ddb2eca10ca", @ANYRES16=r5, @ANYBLOB="000829bd7000ffdbdf2505000000050038000000000005002900000000000800320005920000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:21:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x44}}, 0x0) 08:21:59 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 498.325829][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 498.338211][T13351] FAULT_INJECTION: forcing a failure. [ 498.338211][T13351] name failslab, interval 1, probability 0, space 0, times 0 08:21:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 498.402816][T13351] CPU: 0 PID: 13351 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 498.411566][T13351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 498.421785][T13351] Call Trace: [ 498.425120][T13351] [ 498.428185][T13351] dump_stack_lvl+0x125/0x1b0 [ 498.433006][T13351] should_fail_ex+0x496/0x5b0 [ 498.437837][T13351] should_failslab+0x9/0x20 [ 498.442516][T13351] kmem_cache_alloc+0x69/0x2f0 [ 498.447439][T13351] skb_clone+0x171/0x3c0 08:21:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x44}}, 0x0) (async) [ 498.452010][T13351] netlink_deliver_tap+0xb35/0xd00 [ 498.457283][T13351] netlink_unicast+0x6b4/0x810 [ 498.462198][T13351] ? netlink_attachskb+0x880/0x880 [ 498.467452][T13351] ? ns_capable+0xd5/0x110 [ 498.471951][T13351] netlink_ack+0x870/0x1380 [ 498.476518][T13351] ? netlink_sendmsg+0xe40/0xe40 [ 498.481615][T13351] netlink_rcv_skb+0x345/0x440 [ 498.486434][T13351] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 498.492409][T13351] ? netlink_ack+0x1380/0x1380 [ 498.497344][T13351] ? down_read+0xc9/0x330 [ 498.501854][T13351] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 498.507814][T13351] ? netlink_deliver_tap+0x1a0/0xd00 [ 498.513263][T13351] genl_rcv+0x28/0x40 [ 498.517388][T13351] netlink_unicast+0x53b/0x810 [ 498.522219][T13351] ? netlink_attachskb+0x880/0x880 [ 498.527382][T13351] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 498.533367][T13351] ? __phys_addr_symbol+0x30/0x70 [ 498.538482][T13351] ? __check_object_size+0x323/0x730 [ 498.543841][T13351] netlink_sendmsg+0x93c/0xe40 08:21:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x44}}, 0x0) (rerun: 64) [ 498.548674][T13351] ? netlink_unicast+0x810/0x810 [ 498.553842][T13351] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 498.559183][T13351] ? netlink_unicast+0x810/0x810 [ 498.564175][T13351] __sock_sendmsg+0xd5/0x180 [ 498.568826][T13351] ____sys_sendmsg+0x6ac/0x940 [ 498.573926][T13351] ? kernel_sendmsg+0x50/0x50 [ 498.578675][T13351] ? get_compat_msghdr+0x11b/0x170 [ 498.584024][T13351] ? find_held_lock+0x2d/0x110 [ 498.588888][T13351] ___sys_sendmsg+0x135/0x1d0 [ 498.593647][T13351] ? do_recvmmsg+0x740/0x740 [ 498.598391][T13351] ? find_held_lock+0x2d/0x110 [ 498.603258][T13351] ? __fget_light+0xe6/0x260 [ 498.608356][T13351] __sys_sendmsg+0x117/0x1e0 [ 498.613100][T13351] ? __sys_sendmsg_sock+0x30/0x30 [ 498.618315][T13351] __do_fast_syscall_32+0x62/0xe0 [ 498.623407][T13351] do_fast_syscall_32+0x33/0x70 [ 498.628410][T13351] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 498.634973][T13351] RIP: 0023:0xf7f98579 [ 498.639084][T13351] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 498.658981][T13351] RSP: 002b:00000000f7f935ac EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 498.667720][T13351] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 498.675748][T13351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.684037][T13351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.692502][T13351] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 498.700521][T13351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.708558][T13351] 08:21:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:21:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:21:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x8001]}, 0x8) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x138, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa3c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4f6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3927}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="62e802c92b2a0c6d8815c9bbc2aef3890e264ea068e2705f4e91023f1d7fc0a86e5e6ef23629b7a9b413d3fb994cd625eff9f51ac6147e556533e7b66d6ac970af908be8a5fa578af142df67f5f2eeec9d30f06b0a828a538029fbe1937f85f7e83f2e66bcd16cad96b62d4957f9cad4dea71a39057aaedece302f6a57844724d9b2876ddb2eca10ca", @ANYRES16=r5, @ANYBLOB="000829bd7000ffdbdf2505000000050038000000000005002900000000000800320005920000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:21:59 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 498.775253][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:22:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) (fail_nth: 21) [ 498.830991][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800002bfa67bad6f136807a490000003b", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050505050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) 08:22:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x8001]}, 0x8) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) (async) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x138, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa3c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4f6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3927}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="62e802c92b2a0c6d8815c9bbc2aef3890e264ea068e2705f4e91023f1d7fc0a86e5e6ef23629b7a9b413d3fb994cd625eff9f51ac6147e556533e7b66d6ac970af908be8a5fa578af142df67f5f2eeec9d30f06b0a828a538029fbe1937f85f7e83f2e66bcd16cad96b62d4957f9cad4dea71a39057aaedece302f6a57844724d9b2876ddb2eca10ca", @ANYRES16=r5, @ANYBLOB="000829bd7000ffdbdf2505000000050038000000000005002900000000000800320005920000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 499.133826][T13387] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 499.173127][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe00, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 499.183586][T13382] FAULT_INJECTION: forcing a failure. [ 499.183586][T13382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.209141][T13382] CPU: 0 PID: 13382 Comm: syz-executor.5 Not tainted 6.7.0-rc7-syzkaller #0 [ 499.217991][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 499.228522][T13382] Call Trace: 08:22:00 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 499.231843][T13382] [ 499.235078][T13382] dump_stack_lvl+0x125/0x1b0 [ 499.239821][T13382] should_fail_ex+0x496/0x5b0 [ 499.244667][T13382] _copy_to_user+0x30/0xb0 [ 499.249236][T13382] simple_read_from_buffer+0xd0/0x160 [ 499.254709][T13382] proc_fail_nth_read+0x1b0/0x280 [ 499.260159][T13382] ? proc_fault_inject_read+0x280/0x280 [ 499.266069][T13382] ? security_file_permission+0xdc/0x100 [ 499.271942][T13382] ? proc_fault_inject_read+0x280/0x280 [ 499.277741][T13382] vfs_read+0x1ce/0x8f0 08:22:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYRES8=r2], 0x4c}}, 0x0) [ 499.282060][T13382] ? __fdget_pos+0xe7/0x170 [ 499.286705][T13382] ? kernel_read+0x1b0/0x1b0 [ 499.291344][T13382] ? mutex_trylock+0x130/0x130 [ 499.296158][T13382] ? __fget_files+0x1c6/0x340 [ 499.301072][T13382] ksys_read+0x12f/0x250 [ 499.305489][T13382] ? vfs_write+0xdf0/0xdf0 [ 499.309984][T13382] __do_fast_syscall_32+0x62/0xe0 [ 499.315158][T13382] do_fast_syscall_32+0x33/0x70 [ 499.320069][T13382] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 499.326552][T13382] RIP: 0023:0xf7f98579 [ 499.330752][T13382] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 499.350714][T13382] RSP: 002b:00000000f7f935e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 499.359351][T13382] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f7f93670 [ 499.367457][T13382] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 499.375504][T13382] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 499.383515][T13382] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 499.391594][T13382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.399947][T13382] 08:22:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2c05, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800002bfa67bad6f136807a490000003b", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050505050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) 08:22:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 499.568290][T13398] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 08:22:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5865, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYRES8=r2], 0x4c}}, 0x0) [ 499.628756][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.647849][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:00 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:22:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 499.743909][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 499.798199][T13407] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. 08:22:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 499.855995][T13412] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 08:22:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800002bfa67bad6f136807a490000003b", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050505050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) [ 499.896299][T10497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:22:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYRES8=r2], 0x4c}}, 0x0) [ 499.978090][T10497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6558, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 500.102775][T13424] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 500.139843][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:01 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140), 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 500.154669][T13428] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 08:22:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 500.245507][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:22:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000002780)=""/4104, 0x1008) epoll_wait(r3, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x9ac, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x25}}}}, [@NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0xfc, 0x3f, 0xffe0, 0x0, 0x0, 0x20]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x12adaab11b9eb403, 0x6c, 0xc, 0xc, 0x9, 0x18, 0xc, 0x6, 0x60, 0x1b, 0x2, 0x3, 0xc, 0x4, 0x12, 0x16, 0x16, 0x6, 0x5, 0x2, 0x12]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x60, 0x60, 0x60, 0xc, 0x6c, 0x16, 0x18, 0x1, 0x3, 0x4, 0x1, 0x60, 0x12, 0x6, 0xc, 0x6c, 0x1, 0xb, 0x18, 0x24, 0xc, 0x12, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x1, 0x1, 0x100, 0x37, 0x3, 0x3, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x97a0, 0x3, 0x1, 0x3, 0x9, 0x6, 0x77, 0x7]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0x5}, {0x5, 0x8}, {0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0x1f}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x7, 0x2}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x6, 0x3}, {0x6}, {0x2, 0x7}, {0x6, 0x5}, {0x7, 0x6}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x2}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x7, 0x4}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x18, 0x4, 0xc, 0x16, 0x48, 0x1b, 0xb, 0x60, 0x3, 0x6, 0x6, 0x60, 0xb, 0x48, 0x36, 0x2, 0x1, 0x12, 0x9, 0x9, 0x16, 0x16, 0x1, 0x5, 0x16, 0x36]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2cf, 0x6, 0x200, 0x6, 0x3, 0x7ff, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x7f, 0x3f, 0x2, 0xffff, 0x4, 0x0, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x8, 0x100, 0x5, 0x4, 0x8001, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfdf, 0x9e16, 0x4, 0x800, 0x1000, 0x100, 0x8, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x3, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x4, 0x9}, {0x6, 0x4}, {0x4, 0x6}, {0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x5, 0x2}, {0x6, 0x7}, {0x1, 0x4}, {0x6, 0x9}, {0x3, 0x8}, {0x4, 0x2}, {0x7, 0x3}, {0x7, 0x8}, {0x2}, {0x4, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x0, 0x3, 0x1, 0x3, 0x0, 0x100]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x60, 0x1, 0x6c, 0x9, 0x16, 0x2, 0x30, 0x1, 0x9, 0x36, 0x9, 0x1b, 0xc, 0x30, 0x6, 0x4, 0xb, 0x2, 0x9, 0x3, 0x1, 0x48, 0x60, 0x1b, 0x30, 0xc, 0x6, 0x9, 0x0, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x8, 0x0, 0x1f, 0x81, 0x3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x1ff, 0x0, 0x240, 0x7ff, 0x3, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x25, 0x1b, 0xc, 0x30, 0x36, 0x1, 0x24, 0x60, 0x62, 0xc, 0x4, 0x12, 0x36, 0x24, 0x6, 0x30, 0x4, 0xc, 0x4, 0x1b, 0x48, 0x36, 0x16, 0x5, 0xc, 0x16, 0x30, 0x3, 0xc, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x200, 0x40, 0x2, 0x7, 0x81, 0x1, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x6}, {0x7, 0x4}, {0x5}, {}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x3, 0x8}, {0x0, 0x8}, {0x6}, {0x4, 0x4}, {0x1, 0x2}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x1000, 0x8, 0x100, 0x24, 0x5, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0xca4c, 0x3f, 0xd0a, 0xbd4c, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1, 0x1f, 0x5, 0x1, 0x5, 0x1, 0xc1ee]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x1, 0x2, 0xc, 0x5, 0xb, 0x22, 0x36, 0x36, 0x60, 0x18, 0x30, 0x24, 0x60, 0x30, 0x30, 0x6c, 0xc, 0x24, 0x1, 0xc, 0x6b, 0x30, 0x0, 0x3, 0x48, 0x1, 0x5]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x20, 0x0, 0x2, 0xe5, 0x9, 0x29c1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xad, 0x40, 0x56, 0x2, 0x401, 0x6, 0xff01]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x6, 0xb, 0x2b, 0x9, 0x16]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x45, 0x5, 0x3, 0xea, 0x6, 0xaf1, 0xfe01]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x3, 0x5, 0xb, 0x5, 0xb, 0x6c, 0x12, 0x30, 0x16, 0x5, 0x2, 0x30, 0x60, 0x18, 0x30, 0x16, 0x9, 0x1, 0x36, 0x4, 0x36, 0x24, 0x1, 0x71]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x7, 0x100, 0x400, 0x6, 0x101, 0x7]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x4, 0x200, 0x8001, 0x0, 0x3, 0xf088]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x208, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6c, 0x2, 0x1b96, 0x8, 0x0, 0xffff, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x55, 0x1000, 0x4, 0x7ff, 0xfffa, 0xa2b8, 0x9a31, 0xcea]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7f, 0xedf, 0x7f, 0xfff8, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x2, 0x12, 0x74, 0x60]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x3, 0x8, 0x1, 0x24a4, 0x9, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x30, 0x2, 0x30, 0x36, 0x48, 0x18, 0x12, 0x48, 0x18, 0x12, 0x24, 0x60, 0x1b, 0x6, 0x4, 0xc, 0x16, 0x4, 0x36, 0x0, 0x6c, 0x5, 0x4, 0x6c, 0x18]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x6c, 0x24, 0x36, 0x18, 0x72, 0x18, 0x6c, 0x30, 0x12, 0x48, 0x16, 0x12, 0x12, 0x18, 0x24, 0x36, 0x1, 0x6, 0x0, 0x16, 0x48, 0x16, 0x6, 0xb, 0x60, 0x4, 0x18, 0x1, 0x18, 0x12, 0x1]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x5}, {0x4, 0x4}, {0x6, 0x2}, {0x0, 0x8}, {0x4, 0x2}, {0x3, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x1}, {0x0, 0x4}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x7}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x1}, {0x4, 0x8}, {0x2, 0x3}, {0x7, 0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x3, 0x8}, {0x5, 0x8}, {0x3, 0xa}, {0x2, 0xa}, {0x2, 0x1}, {0x5, 0x7}, {0x5, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x4, 0x7}, {0x5, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0x8}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x1}, {0x4, 0x3}, {0x6, 0x5}, {0x4, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x9}, {0x7, 0x2}, {0x4, 0x9}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xffff, 0x1f, 0x8, 0x6, 0x8, 0x6, 0x1000]}}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0xa}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x4}, {0x5}, {0x0, 0x2}, {}, {0x5, 0xa}, {0x7}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0x1}, {0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0x5}, {0x3, 0x9}, {0x3, 0x5}, {0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x1, 0x2}, {0x4}, {0x2, 0x4}, {0x6, 0x5}, {0x3}, {0x2, 0x6}, {0x2, 0x4}, {}, {0x5}, {0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x6}, {0x0, 0x3}, {0x7, 0xa}, {0x5, 0x7}, {0x7, 0x3}, {0x6, 0x9}, {0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x4, 0x2, 0x3, 0x0, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x1, 0x8, 0x7fff, 0x539, 0x5, 0x80]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x9}, {0x3, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x8}, {0x5, 0xa}, {0x1, 0x9}, {0x1}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x1b}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x5, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x5}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x1}, {0x4, 0x5}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0xa}, {0x7, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {}, {0x2}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0xa}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x7}, {0x6, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x4, 0x9}, {0x3, 0x9}, {0x1, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x238, 0x800, 0x1, 0x6, 0xffff, 0x4986]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0x7}, {0x7, 0x8}, {}, {0x7, 0x1}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x2}, {}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x5}, {0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x6}, {0x2, 0x3}, {0x4, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0x3}, {0x1}, {0x3, 0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x2}, {0x6, 0x2}, {0x6, 0x8}, {0x1, 0x2}, {0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0x3}, {0x1}, {0x7, 0x4}, {}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x2}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x516, 0x3, 0x7f, 0x40, 0x0, 0x1, 0x7, 0x1000]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x1}, {0x1}, {0x5, 0x7}, {0x4, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0xbc5b, 0x9de, 0xff59, 0xfe00, 0x5, 0x3f]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x12, 0x0, 0x3, 0x48, 0x12, 0x9, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x51c7, 0x7, 0x1f, 0x8, 0x100, 0x4, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x5, 0x3f, 0x1, 0x7b31, 0x7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x12, 0x1b, 0x1, 0x60, 0x4, 0x0, 0xc, 0x24, 0x6, 0x31, 0x6c, 0xd6792384ac30c27b, 0x30, 0x9, 0x36, 0x2f, 0x30, 0x12, 0x9, 0xb, 0x4, 0x30, 0x24, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6c52, 0x7, 0x2, 0xfe00, 0x2, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x9}, {0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x17}, {0x5}, {0x3, 0x1}, {0x2}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x1}, {0x5, 0x3}, {0x1}, {0x2, 0x8}, {0x0, 0x5}, {0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x2}, {0x4, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x3, 0x1}, {0x5, 0x7}, {0x7, 0x3}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x7}, {0x4, 0x1}, {0x7, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x9, 0x7fff, 0x0, 0x7f, 0x8000, 0x1]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x17, 0x12, 0x6, 0x4, 0x60, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x1}, {0x1}, {0x3, 0x3}, {0x1, 0x3}, {0x2, 0x3}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x6, 0x1}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x8}, {0x3, 0xa}, {0x4, 0x3}, {0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x5}, {0x6, 0x2}, {0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {}, {0x0, 0xa}, {0x5, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x1}, {0x5}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0x2}, {0x5}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x7, 0x8, 0xb8c5, 0x6, 0x2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x400, 0x401, 0x4, 0x6, 0x5, 0xff, 0x88ea]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x1, 0xacc, 0x4, 0x20, 0x7, 0x0, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x9, 0xb, 0x4, 0x36, 0x12, 0x24, 0x2, 0x6]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x8, 0x7ff, 0x97, 0x9205, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x0, 0xfffb, 0x8001, 0x1000, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x3}, {0x4, 0x2}, {0x7}, {0x5}, {0x3, 0x7}, {0x7, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x7}, {0x6, 0x3}, {0x4, 0x5}, {0x5}, {0x7, 0x8}, {0x6, 0x9}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x7, 0x6}, {0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x5, 0x9}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0x4}, {0x6, 0x1}, {0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x3, 0x3f, 0x8, 0x2, 0x81, 0x2e5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x0, 0x12, 0xb, 0x0, 0x4, 0xc, 0x60, 0x6c, 0x1, 0x1, 0x1b, 0x24, 0x9, 0x12, 0x6c, 0x6, 0x1, 0x1b, 0x24, 0x16, 0x12, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x9}, {0x7, 0xa}, {0x6, 0x2}, {0x1}, {0x2, 0x8}, {0x7, 0x4}, {0x4, 0x9}, {0x4}, {0x5, 0x1}, {0x2, 0x6}, {}, {0x6, 0x7}, {0x5, 0x9}, {0x0, 0x3}, {0x7}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0x3}, {0x2, 0x7}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x6, 0xa}, {0x4, 0x8}, {0x2, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x2, 0x4}, {0x4, 0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0x9}, {0x3, 0x8}, {0x7, 0x3}, {0x5}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0xa}, {0x5, 0x2}, {0x3, 0x6}, {0x7, 0x6}, {0x6, 0x1}, {0x0, 0x9}, {0x5, 0xa}, {0x5, 0x5}]}]}]}]}, 0x9ac}, 0x1, 0x0, 0x0, 0x8881}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7e6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}]]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x1) [ 500.309206][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8100, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 500.480953][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000002780)=""/4104, 0x1008) (async) getdents64(r3, &(0x7f0000002780)=""/4104, 0x1008) epoll_wait(r3, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x0) (async) epoll_wait(r3, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x9ac, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x25}}}}, [@NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0xfc, 0x3f, 0xffe0, 0x0, 0x0, 0x20]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x12adaab11b9eb403, 0x6c, 0xc, 0xc, 0x9, 0x18, 0xc, 0x6, 0x60, 0x1b, 0x2, 0x3, 0xc, 0x4, 0x12, 0x16, 0x16, 0x6, 0x5, 0x2, 0x12]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x60, 0x60, 0x60, 0xc, 0x6c, 0x16, 0x18, 0x1, 0x3, 0x4, 0x1, 0x60, 0x12, 0x6, 0xc, 0x6c, 0x1, 0xb, 0x18, 0x24, 0xc, 0x12, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x1, 0x1, 0x100, 0x37, 0x3, 0x3, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x97a0, 0x3, 0x1, 0x3, 0x9, 0x6, 0x77, 0x7]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0x5}, {0x5, 0x8}, {0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0x1f}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x7, 0x2}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x6, 0x3}, {0x6}, {0x2, 0x7}, {0x6, 0x5}, {0x7, 0x6}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x2}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x7, 0x4}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x18, 0x4, 0xc, 0x16, 0x48, 0x1b, 0xb, 0x60, 0x3, 0x6, 0x6, 0x60, 0xb, 0x48, 0x36, 0x2, 0x1, 0x12, 0x9, 0x9, 0x16, 0x16, 0x1, 0x5, 0x16, 0x36]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2cf, 0x6, 0x200, 0x6, 0x3, 0x7ff, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x7f, 0x3f, 0x2, 0xffff, 0x4, 0x0, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x8, 0x100, 0x5, 0x4, 0x8001, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfdf, 0x9e16, 0x4, 0x800, 0x1000, 0x100, 0x8, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x3, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x4, 0x9}, {0x6, 0x4}, {0x4, 0x6}, {0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x5, 0x2}, {0x6, 0x7}, {0x1, 0x4}, {0x6, 0x9}, {0x3, 0x8}, {0x4, 0x2}, {0x7, 0x3}, {0x7, 0x8}, {0x2}, {0x4, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x0, 0x3, 0x1, 0x3, 0x0, 0x100]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x60, 0x1, 0x6c, 0x9, 0x16, 0x2, 0x30, 0x1, 0x9, 0x36, 0x9, 0x1b, 0xc, 0x30, 0x6, 0x4, 0xb, 0x2, 0x9, 0x3, 0x1, 0x48, 0x60, 0x1b, 0x30, 0xc, 0x6, 0x9, 0x0, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x8, 0x0, 0x1f, 0x81, 0x3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x1ff, 0x0, 0x240, 0x7ff, 0x3, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x25, 0x1b, 0xc, 0x30, 0x36, 0x1, 0x24, 0x60, 0x62, 0xc, 0x4, 0x12, 0x36, 0x24, 0x6, 0x30, 0x4, 0xc, 0x4, 0x1b, 0x48, 0x36, 0x16, 0x5, 0xc, 0x16, 0x30, 0x3, 0xc, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x200, 0x40, 0x2, 0x7, 0x81, 0x1, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x6}, {0x7, 0x4}, {0x5}, {}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x3, 0x8}, {0x0, 0x8}, {0x6}, {0x4, 0x4}, {0x1, 0x2}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x1000, 0x8, 0x100, 0x24, 0x5, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0xca4c, 0x3f, 0xd0a, 0xbd4c, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1, 0x1f, 0x5, 0x1, 0x5, 0x1, 0xc1ee]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x1, 0x2, 0xc, 0x5, 0xb, 0x22, 0x36, 0x36, 0x60, 0x18, 0x30, 0x24, 0x60, 0x30, 0x30, 0x6c, 0xc, 0x24, 0x1, 0xc, 0x6b, 0x30, 0x0, 0x3, 0x48, 0x1, 0x5]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x20, 0x0, 0x2, 0xe5, 0x9, 0x29c1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xad, 0x40, 0x56, 0x2, 0x401, 0x6, 0xff01]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x6, 0xb, 0x2b, 0x9, 0x16]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x45, 0x5, 0x3, 0xea, 0x6, 0xaf1, 0xfe01]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x3, 0x5, 0xb, 0x5, 0xb, 0x6c, 0x12, 0x30, 0x16, 0x5, 0x2, 0x30, 0x60, 0x18, 0x30, 0x16, 0x9, 0x1, 0x36, 0x4, 0x36, 0x24, 0x1, 0x71]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x7, 0x100, 0x400, 0x6, 0x101, 0x7]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x4, 0x200, 0x8001, 0x0, 0x3, 0xf088]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x208, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6c, 0x2, 0x1b96, 0x8, 0x0, 0xffff, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x55, 0x1000, 0x4, 0x7ff, 0xfffa, 0xa2b8, 0x9a31, 0xcea]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7f, 0xedf, 0x7f, 0xfff8, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x2, 0x12, 0x74, 0x60]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x3, 0x8, 0x1, 0x24a4, 0x9, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x30, 0x2, 0x30, 0x36, 0x48, 0x18, 0x12, 0x48, 0x18, 0x12, 0x24, 0x60, 0x1b, 0x6, 0x4, 0xc, 0x16, 0x4, 0x36, 0x0, 0x6c, 0x5, 0x4, 0x6c, 0x18]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x6c, 0x24, 0x36, 0x18, 0x72, 0x18, 0x6c, 0x30, 0x12, 0x48, 0x16, 0x12, 0x12, 0x18, 0x24, 0x36, 0x1, 0x6, 0x0, 0x16, 0x48, 0x16, 0x6, 0xb, 0x60, 0x4, 0x18, 0x1, 0x18, 0x12, 0x1]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x5}, {0x4, 0x4}, {0x6, 0x2}, {0x0, 0x8}, {0x4, 0x2}, {0x3, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x1}, {0x0, 0x4}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x7}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x1}, {0x4, 0x8}, {0x2, 0x3}, {0x7, 0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x3, 0x8}, {0x5, 0x8}, {0x3, 0xa}, {0x2, 0xa}, {0x2, 0x1}, {0x5, 0x7}, {0x5, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x4, 0x7}, {0x5, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0x8}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x1}, {0x4, 0x3}, {0x6, 0x5}, {0x4, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x9}, {0x7, 0x2}, {0x4, 0x9}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xffff, 0x1f, 0x8, 0x6, 0x8, 0x6, 0x1000]}}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0xa}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x4}, {0x5}, {0x0, 0x2}, {}, {0x5, 0xa}, {0x7}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0x1}, {0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0x5}, {0x3, 0x9}, {0x3, 0x5}, {0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x1, 0x2}, {0x4}, {0x2, 0x4}, {0x6, 0x5}, {0x3}, {0x2, 0x6}, {0x2, 0x4}, {}, {0x5}, {0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x6}, {0x0, 0x3}, {0x7, 0xa}, {0x5, 0x7}, {0x7, 0x3}, {0x6, 0x9}, {0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x4, 0x2, 0x3, 0x0, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x1, 0x8, 0x7fff, 0x539, 0x5, 0x80]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x9}, {0x3, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x8}, {0x5, 0xa}, {0x1, 0x9}, {0x1}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x1b}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x5, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x5}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x1}, {0x4, 0x5}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0xa}, {0x7, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {}, {0x2}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0xa}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x7}, {0x6, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x4, 0x9}, {0x3, 0x9}, {0x1, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x238, 0x800, 0x1, 0x6, 0xffff, 0x4986]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0x7}, {0x7, 0x8}, {}, {0x7, 0x1}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x2}, {}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x5}, {0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x6}, {0x2, 0x3}, {0x4, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0x3}, {0x1}, {0x3, 0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x2}, {0x6, 0x2}, {0x6, 0x8}, {0x1, 0x2}, {0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0x3}, {0x1}, {0x7, 0x4}, {}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x2}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x516, 0x3, 0x7f, 0x40, 0x0, 0x1, 0x7, 0x1000]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x1}, {0x1}, {0x5, 0x7}, {0x4, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0xbc5b, 0x9de, 0xff59, 0xfe00, 0x5, 0x3f]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x12, 0x0, 0x3, 0x48, 0x12, 0x9, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x51c7, 0x7, 0x1f, 0x8, 0x100, 0x4, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x5, 0x3f, 0x1, 0x7b31, 0x7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x12, 0x1b, 0x1, 0x60, 0x4, 0x0, 0xc, 0x24, 0x6, 0x31, 0x6c, 0xd6792384ac30c27b, 0x30, 0x9, 0x36, 0x2f, 0x30, 0x12, 0x9, 0xb, 0x4, 0x30, 0x24, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6c52, 0x7, 0x2, 0xfe00, 0x2, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x9}, {0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x17}, {0x5}, {0x3, 0x1}, {0x2}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x1}, {0x5, 0x3}, {0x1}, {0x2, 0x8}, {0x0, 0x5}, {0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x2}, {0x4, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x3, 0x1}, {0x5, 0x7}, {0x7, 0x3}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x7}, {0x4, 0x1}, {0x7, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x9, 0x7fff, 0x0, 0x7f, 0x8000, 0x1]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x17, 0x12, 0x6, 0x4, 0x60, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x1}, {0x1}, {0x3, 0x3}, {0x1, 0x3}, {0x2, 0x3}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x6, 0x1}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x8}, {0x3, 0xa}, {0x4, 0x3}, {0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x5}, {0x6, 0x2}, {0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {}, {0x0, 0xa}, {0x5, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x1}, {0x5}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0x2}, {0x5}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x7, 0x8, 0xb8c5, 0x6, 0x2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x400, 0x401, 0x4, 0x6, 0x5, 0xff, 0x88ea]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x1, 0xacc, 0x4, 0x20, 0x7, 0x0, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x9, 0xb, 0x4, 0x36, 0x12, 0x24, 0x2, 0x6]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x8, 0x7ff, 0x97, 0x9205, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x0, 0xfffb, 0x8001, 0x1000, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x3}, {0x4, 0x2}, {0x7}, {0x5}, {0x3, 0x7}, {0x7, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x7}, {0x6, 0x3}, {0x4, 0x5}, {0x5}, {0x7, 0x8}, {0x6, 0x9}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x7, 0x6}, {0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x5, 0x9}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0x4}, {0x6, 0x1}, {0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x3, 0x3f, 0x8, 0x2, 0x81, 0x2e5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x0, 0x12, 0xb, 0x0, 0x4, 0xc, 0x60, 0x6c, 0x1, 0x1, 0x1b, 0x24, 0x9, 0x12, 0x6c, 0x6, 0x1, 0x1b, 0x24, 0x16, 0x12, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x9}, {0x7, 0xa}, {0x6, 0x2}, {0x1}, {0x2, 0x8}, {0x7, 0x4}, {0x4, 0x9}, {0x4}, {0x5, 0x1}, {0x2, 0x6}, {}, {0x6, 0x7}, {0x5, 0x9}, {0x0, 0x3}, {0x7}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0x3}, {0x2, 0x7}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x6, 0xa}, {0x4, 0x8}, {0x2, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x2, 0x4}, {0x4, 0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0x9}, {0x3, 0x8}, {0x7, 0x3}, {0x5}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0xa}, {0x5, 0x2}, {0x3, 0x6}, {0x7, 0x6}, {0x6, 0x1}, {0x0, 0x9}, {0x5, 0xa}, {0x5, 0x5}]}]}]}]}, 0x9ac}, 0x1, 0x0, 0x0, 0x8881}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7e6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}]]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x1) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7e6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}]]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x1) 08:22:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x95}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x810) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:01 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140), 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 500.572141][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.597307][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000002780)=""/4104, 0x1008) epoll_wait(r3, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x9ac, r6, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x25}}}}, [@NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0xfc, 0x3f, 0xffe0, 0x0, 0x0, 0x20]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x12adaab11b9eb403, 0x6c, 0xc, 0xc, 0x9, 0x18, 0xc, 0x6, 0x60, 0x1b, 0x2, 0x3, 0xc, 0x4, 0x12, 0x16, 0x16, 0x6, 0x5, 0x2, 0x12]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x60, 0x60, 0x60, 0xc, 0x6c, 0x16, 0x18, 0x1, 0x3, 0x4, 0x1, 0x60, 0x12, 0x6, 0xc, 0x6c, 0x1, 0xb, 0x18, 0x24, 0xc, 0x12, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x1, 0x1, 0x100, 0x37, 0x3, 0x3, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x97a0, 0x3, 0x1, 0x3, 0x9, 0x6, 0x77, 0x7]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0x5}, {0x5, 0x8}, {0x6}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0x4}, {0x6, 0x9}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0x1f}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x7, 0x2}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x6, 0x3}, {0x6}, {0x2, 0x7}, {0x6, 0x5}, {0x7, 0x6}, {0x2, 0xa}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x2}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x7, 0x4}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x18, 0x4, 0xc, 0x16, 0x48, 0x1b, 0xb, 0x60, 0x3, 0x6, 0x6, 0x60, 0xb, 0x48, 0x36, 0x2, 0x1, 0x12, 0x9, 0x9, 0x16, 0x16, 0x1, 0x5, 0x16, 0x36]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2cf, 0x6, 0x200, 0x6, 0x3, 0x7ff, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x7f, 0x3f, 0x2, 0xffff, 0x4, 0x0, 0x7fff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x8, 0x100, 0x5, 0x4, 0x8001, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x10c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfdf, 0x9e16, 0x4, 0x800, 0x1000, 0x100, 0x8, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0x3}, {0x4, 0x4}, {0x4, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x3}, {0x5, 0xa}, {0x3, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x4, 0x9}, {0x6, 0x4}, {0x4, 0x6}, {0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x5, 0x2}, {0x6, 0x7}, {0x1, 0x4}, {0x6, 0x9}, {0x3, 0x8}, {0x4, 0x2}, {0x7, 0x3}, {0x7, 0x8}, {0x2}, {0x4, 0x6}, {0x4, 0x6}, {0x5, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x0, 0x3, 0x1, 0x3, 0x0, 0x100]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x60, 0x1, 0x6c, 0x9, 0x16, 0x2, 0x30, 0x1, 0x9, 0x36, 0x9, 0x1b, 0xc, 0x30, 0x6, 0x4, 0xb, 0x2, 0x9, 0x3, 0x1, 0x48, 0x60, 0x1b, 0x30, 0xc, 0x6, 0x9, 0x0, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x8, 0x0, 0x1f, 0x81, 0x3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x1ff, 0x0, 0x240, 0x7ff, 0x3, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x25, 0x1b, 0xc, 0x30, 0x36, 0x1, 0x24, 0x60, 0x62, 0xc, 0x4, 0x12, 0x36, 0x24, 0x6, 0x30, 0x4, 0xc, 0x4, 0x1b, 0x48, 0x36, 0x16, 0x5, 0xc, 0x16, 0x30, 0x3, 0xc, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x200, 0x40, 0x2, 0x7, 0x81, 0x1, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x6}, {0x7, 0x4}, {0x5}, {}, {0x2, 0x3}, {0x5, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x3, 0x8}, {0x0, 0x8}, {0x6}, {0x4, 0x4}, {0x1, 0x2}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x1000, 0x8, 0x100, 0x24, 0x5, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0xca4c, 0x3f, 0xd0a, 0xbd4c, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1, 0x1f, 0x5, 0x1, 0x5, 0x1, 0xc1ee]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x1, 0x2, 0xc, 0x5, 0xb, 0x22, 0x36, 0x36, 0x60, 0x18, 0x30, 0x24, 0x60, 0x30, 0x30, 0x6c, 0xc, 0x24, 0x1, 0xc, 0x6b, 0x30, 0x0, 0x3, 0x48, 0x1, 0x5]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x20, 0x0, 0x2, 0xe5, 0x9, 0x29c1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xad, 0x40, 0x56, 0x2, 0x401, 0x6, 0xff01]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x12, 0x6, 0xb, 0x2b, 0x9, 0x16]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x45, 0x5, 0x3, 0xea, 0x6, 0xaf1, 0xfe01]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x3, 0x5, 0xb, 0x5, 0xb, 0x6c, 0x12, 0x30, 0x16, 0x5, 0x2, 0x30, 0x60, 0x18, 0x30, 0x16, 0x9, 0x1, 0x36, 0x4, 0x36, 0x24, 0x1, 0x71]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x7, 0x100, 0x400, 0x6, 0x101, 0x7]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x4, 0x200, 0x8001, 0x0, 0x3, 0xf088]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x208, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6c, 0x2, 0x1b96, 0x8, 0x0, 0xffff, 0x4, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x55, 0x1000, 0x4, 0x7ff, 0xfffa, 0xa2b8, 0x9a31, 0xcea]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7f, 0xedf, 0x7f, 0xfff8, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x2, 0x12, 0x74, 0x60]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x3, 0x8, 0x1, 0x24a4, 0x9, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x30, 0x2, 0x30, 0x36, 0x48, 0x18, 0x12, 0x48, 0x18, 0x12, 0x24, 0x60, 0x1b, 0x6, 0x4, 0xc, 0x16, 0x4, 0x36, 0x0, 0x6c, 0x5, 0x4, 0x6c, 0x18]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x6c, 0x24, 0x36, 0x18, 0x72, 0x18, 0x6c, 0x30, 0x12, 0x48, 0x16, 0x12, 0x12, 0x18, 0x24, 0x36, 0x1, 0x6, 0x0, 0x16, 0x48, 0x16, 0x6, 0xb, 0x60, 0x4, 0x18, 0x1, 0x18, 0x12, 0x1]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0x5}, {0x4, 0x4}, {0x6, 0x2}, {0x0, 0x8}, {0x4, 0x2}, {0x3, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x1}, {0x0, 0x4}, {0x3, 0x6}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x7}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x1}, {0x4, 0x8}, {0x2, 0x3}, {0x7, 0x7}, {0x1, 0xa}, {0x3, 0x6}, {0x3, 0x8}, {0x5, 0x8}, {0x3, 0xa}, {0x2, 0xa}, {0x2, 0x1}, {0x5, 0x7}, {0x5, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x4, 0x7}, {0x5, 0x7}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0x8}, {0x4, 0x1}, {0x1, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x1}, {0x4, 0x3}, {0x6, 0x5}, {0x4, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x1, 0x6}, {0x7, 0x9}, {0x7, 0x2}, {0x4, 0x9}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xffff, 0x1f, 0x8, 0x6, 0x8, 0x6, 0x1000]}}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0xa}, {0x2, 0x3}, {0x0, 0x8}, {0x7, 0x2}, {0x4, 0x4}, {0x5}, {0x0, 0x2}, {}, {0x5, 0xa}, {0x7}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0x1}, {0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0x4}, {0x2, 0x5}, {0x3, 0x9}, {0x3, 0x5}, {0x1}, {0x3, 0x4}, {0x2, 0x8}, {0x1, 0x2}, {0x4}, {0x2, 0x4}, {0x6, 0x5}, {0x3}, {0x2, 0x6}, {0x2, 0x4}, {}, {0x5}, {0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x6, 0x6}, {0x0, 0x3}, {0x7, 0xa}, {0x5, 0x7}, {0x7, 0x3}, {0x6, 0x9}, {0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x4, 0x2, 0x3, 0x0, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x1, 0x8, 0x7fff, 0x539, 0x5, 0x80]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0x9}, {0x3, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x5, 0x3}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x8}, {0x5, 0xa}, {0x1, 0x9}, {0x1}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x1b}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0x1}, {0x0, 0x4}, {0x5, 0x2}, {0x2, 0xa}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x5}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x1}, {0x4, 0x5}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0xa}, {0x7, 0x7}, {0x1, 0x2}, {0x0, 0x6}, {}, {0x2}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0xa}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x7}, {0x6, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x4, 0x9}, {0x3, 0x9}, {0x1, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x238, 0x800, 0x1, 0x6, 0xffff, 0x4986]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5}, {0x0, 0x6}, {0x5, 0x5}, {0x7, 0x7}, {0x7, 0x8}, {}, {0x7, 0x1}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x6}, {0x1, 0x6}, {0x1, 0x8}, {0x6, 0x2}, {}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x5}, {0x4}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x6}, {0x2, 0x3}, {0x4, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0x3}, {0x1}, {0x3, 0x1}, {0x6, 0xa}, {0x5, 0xa}, {0x2}, {0x6, 0x2}, {0x6, 0x8}, {0x1, 0x2}, {0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0x3}, {0x1}, {0x7, 0x4}, {}, {0x3, 0xa}, {0x0, 0x2}, {0x7, 0xa}, {0x1, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x2}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x516, 0x3, 0x7f, 0x40, 0x0, 0x1, 0x7, 0x1000]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x1}, {0x1}, {0x5, 0x7}, {0x4, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0xbc5b, 0x9de, 0xff59, 0xfe00, 0x5, 0x3f]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x12, 0x0, 0x3, 0x48, 0x12, 0x9, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x51c7, 0x7, 0x1f, 0x8, 0x100, 0x4, 0xfff]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x5, 0x3f, 0x1, 0x7b31, 0x7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x12, 0x1b, 0x1, 0x60, 0x4, 0x0, 0xc, 0x24, 0x6, 0x31, 0x6c, 0xd6792384ac30c27b, 0x30, 0x9, 0x36, 0x2f, 0x30, 0x12, 0x9, 0xb, 0x4, 0x30, 0x24, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6c52, 0x7, 0x2, 0xfe00, 0x2, 0x2, 0x5]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0x9}, {0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x17}, {0x5}, {0x3, 0x1}, {0x2}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x1}, {0x5, 0x3}, {0x1}, {0x2, 0x8}, {0x0, 0x5}, {0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0x4}, {0x5, 0x2}, {0x4, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x5}, {0x3, 0x1}, {0x5, 0x7}, {0x7, 0x3}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x7}, {0x4, 0x1}, {0x7, 0x2}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x9, 0x7fff, 0x0, 0x7f, 0x8000, 0x1]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x17, 0x12, 0x6, 0x4, 0x60, 0x16, 0x6c]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x1}, {0x1}, {0x3, 0x3}, {0x1, 0x3}, {0x2, 0x3}, {0x7, 0x7}, {0x5, 0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x7, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x6, 0x1}, {0x4, 0x8}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0x3}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x8}, {0x3, 0xa}, {0x4, 0x3}, {0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x5}, {0x6, 0x2}, {0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0x1}, {}, {0x0, 0xa}, {0x5, 0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x9}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x1}, {0x5}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0x2}, {0x5}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x7, 0x8, 0xb8c5, 0x6, 0x2, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x400, 0x401, 0x4, 0x6, 0x5, 0xff, 0x88ea]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x1, 0xacc, 0x4, 0x20, 0x7, 0x0, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x9, 0xb, 0x4, 0x36, 0x12, 0x24, 0x2, 0x6]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x8, 0x7ff, 0x97, 0x9205, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x0, 0xfffb, 0x8001, 0x1000, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x3}, {0x4, 0x2}, {0x7}, {0x5}, {0x3, 0x7}, {0x7, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x7}, {0x6, 0x3}, {0x4, 0x5}, {0x5}, {0x7, 0x8}, {0x6, 0x9}, {0x6, 0x7}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x7, 0x6}, {0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x5, 0x9}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0x4}, {0x6, 0x1}, {0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x4, 0x3, 0x3f, 0x8, 0x2, 0x81, 0x2e5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x0, 0x12, 0xb, 0x0, 0x4, 0xc, 0x60, 0x6c, 0x1, 0x1, 0x1b, 0x24, 0x9, 0x12, 0x6c, 0x6, 0x1, 0x1b, 0x24, 0x16, 0x12, 0x5, 0x9, 0x5]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x7}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x9}, {0x7, 0xa}, {0x6, 0x2}, {0x1}, {0x2, 0x8}, {0x7, 0x4}, {0x4, 0x9}, {0x4}, {0x5, 0x1}, {0x2, 0x6}, {}, {0x6, 0x7}, {0x5, 0x9}, {0x0, 0x3}, {0x7}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0x3}, {0x2, 0x7}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x6, 0xa}, {0x4, 0x8}, {0x2, 0x8}, {0x5, 0x2}, {0x0, 0x4}, {0x3, 0x2}, {0x4, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x2, 0x4}, {0x4, 0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0x9}, {0x3, 0x8}, {0x7, 0x3}, {0x5}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0xa}, {0x5, 0x2}, {0x3, 0x6}, {0x7, 0x6}, {0x6, 0x1}, {0x0, 0x9}, {0x5, 0xa}, {0x5, 0x5}]}]}]}]}, 0x9ac}, 0x1, 0x0, 0x0, 0x8881}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7e6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}]]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x1) [ 500.782850][T10497] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x95}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x810) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x34000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 500.899044][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.907236][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:02 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140), 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:22:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050050050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) 08:22:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x400300, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x95}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x810) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 501.133235][ T48] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 501.207612][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.246370][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050050050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050050050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) (async) 08:22:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c6714e0", @ANYRES16=r1, @ANYBLOB="1fe800000007000000003b00000008100300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:02 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 501.477741][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x6, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 501.525893][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:22:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050050050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050050050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) (async) 08:22:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 501.570211][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:02 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c6714e0", @ANYRES16=r1, @ANYBLOB="1fe800000007000000003b00000008100300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 501.725686][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 501.815504][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.829898][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.829978][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 08:22:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="93dffd8453c44aeb1b1684b2bc1181eb3f64988f923589bf46871a803c5cf687dec3a6ed3ee48b1fd4f04912a4", @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf2508000000080039000800000005002e000000000008000300", @ANYRES32=0x0, @ANYBLOB="08003400040000000a000900aaaaaaaaaa410000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c6714e0", @ANYRES16=r1, @ANYBLOB="1fe800000007000000003b00000008100300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c6714e0", @ANYRES16=r1, @ANYBLOB="1fe800000007000000003b00000008100300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) 08:22:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 501.938607][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:03 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 502.110020][T13518] wireguard0: entered promiscuous mode [ 502.115567][T13518] wireguard0: entered allmulticast mode 08:22:03 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:22:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r3, @ANYRES64=r3], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x80, 0x80, 0x7, 0x2, {{0x20, 0x4, 0x3, 0x23, 0x80, 0x68, 0x0, 0xff, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x38}, {[@ssrr={0x89, 0xb, 0x66, [@empty, @local]}, @timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0x6, [{@multicast1, 0x8001}, {@rand_addr=0x64010100, 0x3}, {@empty, 0xe7f}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffff000}, {@rand_addr=0x64010102}]}, @timestamp_addr={0x44, 0x34, 0xae, 0x1, 0xf, [{@multicast1}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0xd4d1}, {@rand_addr=0x64010102, 0x2}, {@multicast1, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)={0x144, r8, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x77b6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x850) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000110}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8, 0x700, 0x2, 0xf9b8, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x66, 0x0, 0x7, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x4}, {@private=0xa010101, 0x7ff}]}, @timestamp_prespec={0x44, 0x34, 0x61, 0x3, 0x4, [{@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x80000001}, {@loopback, 0x8001}, {@loopback, 0x1ff}, {@multicast1, 0x5}, {@loopback, 0x20223fd8}]}, @lsrr={0x83, 0x13, 0xff, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @lsrr={0x83, 0x23, 0x87, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @local, @broadcast, @empty, @local, @empty]}, @generic={0x82, 0x11, "24090de691ce8304cd996802df867d"}, @rr={0x7, 0x23, 0xfe, [@local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, @empty, @loopback, @loopback, @broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x9, 0x4, 0x18, @local, @loopback, 0x40, 0x80, 0xa35, 0x4f7bd51f}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x6, 0x4, {{0x28, 0x4, 0x2, 0x3f, 0xa0, 0x65, 0x0, 0x9, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x1b, 0x44, [@multicast1, @multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2]}, @cipso={0x86, 0x4c, 0x2, [{0x5, 0xe, "8a4004b29aae2d211f8f55de"}, {0x6, 0x6, "aee5809e"}, {0x5, 0x7, "fd99b05c45"}, {0x0, 0x2}, {0x1, 0xf, "7894a4bd9997bf3b34bc2eccdc"}, {0x2, 0xf, "8271349f3b086bfd761df3ee16"}, {0x6, 0x8, "654cd7a7ab46"}, {0x2, 0x3, "9d"}]}, @ssrr={0x89, 0x7, 0x40, [@multicast1]}, @rr={0x7, 0x1b, 0xc7, [@broadcast, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0100802}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1b4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4015}, 0x8000) [ 502.478639][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 502.527023][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.578060][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 502.619314][T13540] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 08:22:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="93dffd8453c44aeb1b1684b2bc1181eb3f64988f923589bf46871a803c5cf687dec3a6ed3ee48b1fd4f04912a4", @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf2508000000080039000800000005002e000000000008000300", @ANYRES32=0x0, @ANYBLOB="08003400040000000a000900aaaaaaaaaa410000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 502.697977][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.707517][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 502.731831][T13540] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port 08:22:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:04 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 502.777754][T13540] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port 08:22:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) shutdown(0xffffffffffffffff, 0x1) (async) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r3, @ANYRES64=r3], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x80, 0x80, 0x7, 0x2, {{0x20, 0x4, 0x3, 0x23, 0x80, 0x68, 0x0, 0xff, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x38}, {[@ssrr={0x89, 0xb, 0x66, [@empty, @local]}, @timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0x6, [{@multicast1, 0x8001}, {@rand_addr=0x64010100, 0x3}, {@empty, 0xe7f}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffff000}, {@rand_addr=0x64010102}]}, @timestamp_addr={0x44, 0x34, 0xae, 0x1, 0xf, [{@multicast1}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0xd4d1}, {@rand_addr=0x64010102, 0x2}, {@multicast1, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)={0x144, r8, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x77b6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x850) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000110}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8, 0x700, 0x2, 0xf9b8, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x66, 0x0, 0x7, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x4}, {@private=0xa010101, 0x7ff}]}, @timestamp_prespec={0x44, 0x34, 0x61, 0x3, 0x4, [{@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x80000001}, {@loopback, 0x8001}, {@loopback, 0x1ff}, {@multicast1, 0x5}, {@loopback, 0x20223fd8}]}, @lsrr={0x83, 0x13, 0xff, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @lsrr={0x83, 0x23, 0x87, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @local, @broadcast, @empty, @local, @empty]}, @generic={0x82, 0x11, "24090de691ce8304cd996802df867d"}, @rr={0x7, 0x23, 0xfe, [@local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, @empty, @loopback, @loopback, @broadcast]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x9, 0x4, 0x18, @local, @loopback, 0x40, 0x80, 0xa35, 0x4f7bd51f}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x6, 0x4, {{0x28, 0x4, 0x2, 0x3f, 0xa0, 0x65, 0x0, 0x9, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x1b, 0x44, [@multicast1, @multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2]}, @cipso={0x86, 0x4c, 0x2, [{0x5, 0xe, "8a4004b29aae2d211f8f55de"}, {0x6, 0x6, "aee5809e"}, {0x5, 0x7, "fd99b05c45"}, {0x0, 0x2}, {0x1, 0xf, "7894a4bd9997bf3b34bc2eccdc"}, {0x2, 0xf, "8271349f3b086bfd761df3ee16"}, {0x6, 0x8, "654cd7a7ab46"}, {0x2, 0x3, "9d"}]}, @ssrr={0x89, 0x7, 0x40, [@multicast1]}, @rr={0x7, 0x1b, 0xc7, [@broadcast, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0100802}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1b4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4015}, 0x8000) [ 502.909583][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.917715][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:04 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 503.058057][T13555] wireguard0: entered promiscuous mode [ 503.085555][T13555] wireguard0: entered allmulticast mode 08:22:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800000024000b0f000000000000000060000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00040048000200000000008600020000000000000100000000ffffffff"], 0x78}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) (async) shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) (async) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r3, @ANYRES64=r3], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) (async) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x80, 0x80, 0x7, 0x2, {{0x20, 0x4, 0x3, 0x23, 0x80, 0x68, 0x0, 0xff, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x38}, {[@ssrr={0x89, 0xb, 0x66, [@empty, @local]}, @timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0x6, [{@multicast1, 0x8001}, {@rand_addr=0x64010100, 0x3}, {@empty, 0xe7f}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xfffff000}, {@rand_addr=0x64010102}]}, @timestamp_addr={0x44, 0x34, 0xae, 0x1, 0xf, [{@multicast1}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0xd4d1}, {@rand_addr=0x64010102, 0x2}, {@multicast1, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)={0x144, r8, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x77b6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x850) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1c8, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000110}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8, 0x700, 0x2, 0xf9b8, {{0x32, 0x4, 0x2, 0x3d, 0xc8, 0x66, 0x0, 0x7, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x4}, {@private=0xa010101, 0x7ff}]}, @timestamp_prespec={0x44, 0x34, 0x61, 0x3, 0x4, [{@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x80000001}, {@loopback, 0x8001}, {@loopback, 0x1ff}, {@multicast1, 0x5}, {@loopback, 0x20223fd8}]}, @lsrr={0x83, 0x13, 0xff, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @lsrr={0x83, 0x23, 0x87, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @local, @broadcast, @empty, @local, @empty]}, @generic={0x82, 0x11, "24090de691ce8304cd996802df867d"}, @rr={0x7, 0x23, 0xfe, [@local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, @empty, @loopback, @loopback, @broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x9, 0x4, 0x18, @local, @loopback, 0x40, 0x80, 0xa35, 0x4f7bd51f}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x9, 0x4, 0x18, @local, @loopback, 0x40, 0x80, 0xa35, 0x4f7bd51f}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x6, 0x4, {{0x28, 0x4, 0x2, 0x3f, 0xa0, 0x65, 0x0, 0x9, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x1b, 0x44, [@multicast1, @multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2]}, @cipso={0x86, 0x4c, 0x2, [{0x5, 0xe, "8a4004b29aae2d211f8f55de"}, {0x6, 0x6, "aee5809e"}, {0x5, 0x7, "fd99b05c45"}, {0x0, 0x2}, {0x1, 0xf, "7894a4bd9997bf3b34bc2eccdc"}, {0x2, 0xf, "8271349f3b086bfd761df3ee16"}, {0x6, 0x8, "654cd7a7ab46"}, {0x2, 0x3, "9d"}]}, @ssrr={0x89, 0x7, 0x40, [@multicast1]}, @rr={0x7, 0x1b, 0xc7, [@broadcast, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x6, 0x4, {{0x28, 0x4, 0x2, 0x3f, 0xa0, 0x65, 0x0, 0x9, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x10}, {[@lsrr={0x83, 0x1b, 0x44, [@multicast1, @multicast1, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2]}, @cipso={0x86, 0x4c, 0x2, [{0x5, 0xe, "8a4004b29aae2d211f8f55de"}, {0x6, 0x6, "aee5809e"}, {0x5, 0x7, "fd99b05c45"}, {0x0, 0x2}, {0x1, 0xf, "7894a4bd9997bf3b34bc2eccdc"}, {0x2, 0xf, "8271349f3b086bfd761df3ee16"}, {0x6, 0x8, "654cd7a7ab46"}, {0x2, 0x3, "9d"}]}, @ssrr={0x89, 0x7, 0x40, [@multicast1]}, @rr={0x7, 0x1b, 0xc7, [@broadcast, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r17}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0100802}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1b4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4015}, 0x8000) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0100802}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x1b4, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4015}, 0x8000) [ 503.215256][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 503.320723][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.378400][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:04 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:22:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="93dffd8453c44aeb1b1684b2bc1181eb3f64988f923589bf46871a803c5cf687dec3a6ed3ee48b1fd4f04912a4", @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf2508000000080039000800000005002e000000000008000300", @ANYRES32=0x0, @ANYBLOB="08003400040000000a000900aaaaaaaaaa410000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 503.528284][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 503.531241][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 503.637435][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.641347][T13585] wireguard0: entered promiscuous mode [ 503.651870][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.675144][T13585] wireguard0: entered allmulticast mode [ 503.755450][T13584] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 503.785931][T13578] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port 08:22:05 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:22:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 503.846785][ T48] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r0, @ANYRES32=r2, @ANYRES64=r4], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000140)=0x80) [ 504.024972][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.061338][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000000000000000000000000000000000000000000dd61df07dacd412d7522722d461e8103729a"], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x800) r8 = syz_clone(0x80004880, &(0x7f0000000500)='/W', 0x2, &(0x7f0000000540), &(0x7f00000005c0), &(0x7f0000000640)="1b3fda338bd84c49706a3bb0e36df8a0160ac6b5c1a9c1b7c7febe888c3904b18ecdecfee69125433881906c1016d293835e0368c24c464f8c7c77979736ac8961d2ba83f686bc9062ae626658d2fd1b5600eb71fbd1462ae702") sendmsg$AUDIT_SET(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x3e9, 0x623, 0x70bd2c, 0x25dfdbfc, {0x30, 0x0, 0x2, r8, 0x0, 0x82, 0x101, 0x7, 0x0, 0x3d2486fc, 0x7ff}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c041) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e800100a04d07008d14cb758140fd8fa8776972650a5a6172640000000400028008000a00", @ANYRES32=r6, @ANYBLOB="1670dc9d66a140c7088e0a742e8c6ba09fb733655974e394afb2dc0fb6a48fc7708b9c8bf1bad8f14ea078460520c23654aec00958d12040a76071f250c485e7aa8f667c86668ac503d64382c7bb36022db832c2a6900e02253a186b6ab90d295bfdbb1283fbbeceb0783a1bb83ccc6afa32677d5d6d9ed8a710c783381fa8baf866f7098cf0ef3423f5c45fc9f8e890bf8f9d7dd1065396c38cb4b83ae4cfac0f12171079fd9d728ab8cd5f658941eedbbb02287afc68959ca6f8bae847b44c71a7fc4ef5c741d088c7a91aa4bf2c02561468a389bf4cb5964dbd01412ab8046ba65544a3e29f78bd8f42ffdc1b50b1b9"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', r6, 0x29, 0x1, 0x3f, 0x3, 0xc, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x1ff, 0xacc0}}) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@RTM_DELMDB={0x38, 0x55, 0x200, 0x70bd2c, 0x25dfdbfc, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x2, 0x4, {@in6_addr=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040080}, 0x4090) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44884}, 0x80) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}}, 0x0) sendfile(r12, r4, &(0x7f00000007c0)=0x4, 0x98) 08:22:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 504.191038][T13611] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 504.258839][T13611] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port 08:22:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r0, @ANYRES32=r2, @ANYRES64=r4], 0x4c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000140)=0x80) 08:22:05 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 504.302429][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 504.332931][T13613] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 08:22:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 504.393478][ T48] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 504.483669][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.495093][T13613] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 504.527915][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.539134][T13625] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port 08:22:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x24, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 504.569821][T13626] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 504.592902][T13613] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 504.608025][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x10000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000000000000000000000000000000000000000000dd61df07dacd412d7522722d461e8103729a"], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x800) (async) r8 = syz_clone(0x80004880, &(0x7f0000000500)='/W', 0x2, &(0x7f0000000540), &(0x7f00000005c0), &(0x7f0000000640)="1b3fda338bd84c49706a3bb0e36df8a0160ac6b5c1a9c1b7c7febe888c3904b18ecdecfee69125433881906c1016d293835e0368c24c464f8c7c77979736ac8961d2ba83f686bc9062ae626658d2fd1b5600eb71fbd1462ae702") sendmsg$AUDIT_SET(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x3e9, 0x623, 0x70bd2c, 0x25dfdbfc, {0x30, 0x0, 0x2, r8, 0x0, 0x82, 0x101, 0x7, 0x0, 0x3d2486fc, 0x7ff}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c041) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e800100a04d07008d14cb758140fd8fa8776972650a5a6172640000000400028008000a00", @ANYRES32=r6, @ANYBLOB="1670dc9d66a140c7088e0a742e8c6ba09fb733655974e394afb2dc0fb6a48fc7708b9c8bf1bad8f14ea078460520c23654aec00958d12040a76071f250c485e7aa8f667c86668ac503d64382c7bb36022db832c2a6900e02253a186b6ab90d295bfdbb1283fbbeceb0783a1bb83ccc6afa32677d5d6d9ed8a710c783381fa8baf866f7098cf0ef3423f5c45fc9f8e890bf8f9d7dd1065396c38cb4b83ae4cfac0f12171079fd9d728ab8cd5f658941eedbbb02287afc68959ca6f8bae847b44c71a7fc4ef5c741d088c7a91aa4bf2c02561468a389bf4cb5964dbd01412ab8046ba65544a3e29f78bd8f42ffdc1b50b1b9"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', r6, 0x29, 0x1, 0x3f, 0x3, 0xc, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x1ff, 0xacc0}}) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@RTM_DELMDB={0x38, 0x55, 0x200, 0x70bd2c, 0x25dfdbfc, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x2, 0x4, {@in6_addr=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040080}, 0x4090) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44884}, 0x80) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}}, 0x0) sendfile(r12, r4, &(0x7f00000007c0)=0x4, 0x98) 08:22:05 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:22:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r0, @ANYRES32=r2, @ANYRES64=r4], 0x4c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) (async) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000140)=0x80) [ 504.706746][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.726532][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 504.854762][ T48] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2c050000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 504.947951][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.949121][T13650] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 504.961690][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 505.012867][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 505.033490][T13644] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 505.063746][T13647] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 505.078401][T13646] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port 08:22:06 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 505.127737][ T48] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000000000000000000000000000000000000000000dd61df07dacd412d7522722d461e8103729a"], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x800) (async) r8 = syz_clone(0x80004880, &(0x7f0000000500)='/W', 0x2, &(0x7f0000000540), &(0x7f00000005c0), &(0x7f0000000640)="1b3fda338bd84c49706a3bb0e36df8a0160ac6b5c1a9c1b7c7febe888c3904b18ecdecfee69125433881906c1016d293835e0368c24c464f8c7c77979736ac8961d2ba83f686bc9062ae626658d2fd1b5600eb71fbd1462ae702") sendmsg$AUDIT_SET(r7, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x3e9, 0x623, 0x70bd2c, 0x25dfdbfc, {0x30, 0x0, 0x2, r8, 0x0, 0x82, 0x101, 0x7, 0x0, 0x3d2486fc, 0x7ff}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c041) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e800100a04d07008d14cb758140fd8fa8776972650a5a6172640000000400028008000a00", @ANYRES32=r6, @ANYBLOB="1670dc9d66a140c7088e0a742e8c6ba09fb733655974e394afb2dc0fb6a48fc7708b9c8bf1bad8f14ea078460520c23654aec00958d12040a76071f250c485e7aa8f667c86668ac503d64382c7bb36022db832c2a6900e02253a186b6ab90d295bfdbb1283fbbeceb0783a1bb83ccc6afa32677d5d6d9ed8a710c783381fa8baf866f7098cf0ef3423f5c45fc9f8e890bf8f9d7dd1065396c38cb4b83ae4cfac0f12171079fd9d728ab8cd5f658941eedbbb02287afc68959ca6f8bae847b44c71a7fc4ef5c741d088c7a91aa4bf2c02561468a389bf4cb5964dbd01412ab8046ba65544a3e29f78bd8f42ffdc1b50b1b9"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', r6, 0x29, 0x1, 0x3f, 0x3, 0xc, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x1ff, 0xacc0}}) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@RTM_DELMDB={0x38, 0x55, 0x200, 0x70bd2c, 0x25dfdbfc, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x2, 0x4, {@in6_addr=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040080}, 0x4090) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44884}, 0x80) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}}, 0x0) sendfile(r12, r4, &(0x7f00000007c0)=0x4, 0x98) 08:22:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 505.230615][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:22:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1e0, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x1d}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8d0}, @NL80211_ATTR_FRAME={0x192, 0x33, @assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7fc0}, @broadcast, @device_a, @random="ce34ab13a052", {0x0, 0x227}}, 0x0, 0x63, @random=0x42, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x7, 0x0, {0x77, 0x7, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x4, 0xd4}}, [{0xdd, 0x72, "7a49715c2aede40e7fed417f040f19f473bb5aa39a92a305c9a70fd2df5967a8ece6df067dd867b6e8d3cbb5bac0cf23c3bb89bca600af57a2e2f263f7c550c9bd53241e93b4ca203d2b17f7d0043fade672609e5f9078ba1f30f30be866a188076339a52eeb69c5686c40a42e62776b38e9"}, {0xdd, 0x3f, "8a4ef5f74212be68047a0ed55d7baf11b9ed345a4d27ef6251211226e1b5e53ec4961715d483928d9dbd4ab170d1341ea46c42a5f3bdc07138e94e8a626194"}, {0xdd, 0x9d, "b8b3a60486773fd073e5f05f7af9e4debe8eb3a7659a038a304f82a07fdcb72dbe727c5ba27b4802f019df2876b7cf63ecc4c7cc11efc693519243c50571c00a53d7fad208334cb3d03a339a20f76a8a46befafb2c76669c795c72a402871ae7725a9dc9146037a757e6822ab46ba98b176dfa85e791d2db142e501968b34291531b05ce6838e17b9a1724358e05dbc80f0f7f32352bed233038f20774"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) [ 505.273561][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x65580000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 505.399521][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 08:22:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 505.442402][T13664] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 505.471966][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 505.526362][T13669] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 505.536719][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.555131][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1e0, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x1d}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8d0}, @NL80211_ATTR_FRAME={0x192, 0x33, @assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7fc0}, @broadcast, @device_a, @random="ce34ab13a052", {0x0, 0x227}}, 0x0, 0x63, @random=0x42, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x7, 0x0, {0x77, 0x7, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x4, 0xd4}}, [{0xdd, 0x72, "7a49715c2aede40e7fed417f040f19f473bb5aa39a92a305c9a70fd2df5967a8ece6df067dd867b6e8d3cbb5bac0cf23c3bb89bca600af57a2e2f263f7c550c9bd53241e93b4ca203d2b17f7d0043fade672609e5f9078ba1f30f30be866a188076339a52eeb69c5686c40a42e62776b38e9"}, {0xdd, 0x3f, "8a4ef5f74212be68047a0ed55d7baf11b9ed345a4d27ef6251211226e1b5e53ec4961715d483928d9dbd4ab170d1341ea46c42a5f3bdc07138e94e8a626194"}, {0xdd, 0x9d, "b8b3a60486773fd073e5f05f7af9e4debe8eb3a7659a038a304f82a07fdcb72dbe727c5ba27b4802f019df2876b7cf63ecc4c7cc11efc693519243c50571c00a53d7fad208334cb3d03a339a20f76a8a46befafb2c76669c795c72a402871ae7725a9dc9146037a757e6822ab46ba98b176dfa85e791d2db142e501968b34291531b05ce6838e17b9a1724358e05dbc80f0f7f32352bed233038f20774"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) 08:22:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7955f9f7, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="40b6ee7e7300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050505050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) 08:22:06 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:22:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x81000000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 505.752053][ T48] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:07 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1e0, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x1d}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8d0}, @NL80211_ATTR_FRAME={0x192, 0x33, @assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7fc0}, @broadcast, @device_a, @random="ce34ab13a052", {0x0, 0x227}}, 0x0, 0x63, @random=0x42, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x7, 0x0, {0x77, 0x7, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x4, 0xd4}}, [{0xdd, 0x72, "7a49715c2aede40e7fed417f040f19f473bb5aa39a92a305c9a70fd2df5967a8ece6df067dd867b6e8d3cbb5bac0cf23c3bb89bca600af57a2e2f263f7c550c9bd53241e93b4ca203d2b17f7d0043fade672609e5f9078ba1f30f30be866a188076339a52eeb69c5686c40a42e62776b38e9"}, {0xdd, 0x3f, "8a4ef5f74212be68047a0ed55d7baf11b9ed345a4d27ef6251211226e1b5e53ec4961715d483928d9dbd4ab170d1341ea46c42a5f3bdc07138e94e8a626194"}, {0xdd, 0x9d, "b8b3a60486773fd073e5f05f7af9e4debe8eb3a7659a038a304f82a07fdcb72dbe727c5ba27b4802f019df2876b7cf63ecc4c7cc11efc693519243c50571c00a53d7fad208334cb3d03a339a20f76a8a46befafb2c76669c795c72a402871ae7725a9dc9146037a757e6822ab46ba98b176dfa85e791d2db142e501968b34291531b05ce6838e17b9a1724358e05dbc80f0f7f32352bed233038f20774"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1e0, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x1d}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8d0}, @NL80211_ATTR_FRAME={0x192, 0x33, @assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7fc0}, @broadcast, @device_a, @random="ce34ab13a052", {0x0, 0x227}}, 0x0, 0x63, @random=0x42, @void, @val={0x2d, 0x1a, {0x4000, 0x2, 0x7, 0x0, {0x77, 0x7, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x4, 0xd4}}, [{0xdd, 0x72, "7a49715c2aede40e7fed417f040f19f473bb5aa39a92a305c9a70fd2df5967a8ece6df067dd867b6e8d3cbb5bac0cf23c3bb89bca600af57a2e2f263f7c550c9bd53241e93b4ca203d2b17f7d0043fade672609e5f9078ba1f30f30be866a188076339a52eeb69c5686c40a42e62776b38e9"}, {0xdd, 0x3f, "8a4ef5f74212be68047a0ed55d7baf11b9ed345a4d27ef6251211226e1b5e53ec4961715d483928d9dbd4ab170d1341ea46c42a5f3bdc07138e94e8a626194"}, {0xdd, 0x9d, "b8b3a60486773fd073e5f05f7af9e4debe8eb3a7659a038a304f82a07fdcb72dbe727c5ba27b4802f019df2876b7cf63ecc4c7cc11efc693519243c50571c00a53d7fad208334cb3d03a339a20f76a8a46befafb2c76669c795c72a402871ae7725a9dc9146037a757e6822ab46ba98b176dfa85e791d2db142e501968b34291531b05ce6838e17b9a1724358e05dbc80f0f7f32352bed233038f20774"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) [ 505.850314][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.881293][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="40b6ee7e7300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050505050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) 08:22:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x4fe, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:07 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:22:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x88a8ffff, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x404c009) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 506.228176][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x404c009) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 506.315344][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.341586][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 506.559559][ T1038] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:07 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 506.662881][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.718194][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="40b6ee7e7300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050505050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) 08:22:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf7f95579, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x404c009) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffa888, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 506.921815][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="50800400", @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b0000000c00990000200000420000002e003300d0000000ffffffffffff0802110000000802110000000000000425030074803e010076060000040000000000"], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60a84c0037ce84", @ANYRES16=r1, @ANYBLOB="20002dbd7000ffdbdf2502000000080026006c090000080026006c09000008006100fb000000080026007b0900001400020063616966300000000000000000000000080026006c09000008000c010000000008000a0105000000"], 0x60}}, 0x20004090) 08:22:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fa800003a52000000003b15000008001000", @ANYRES32=r4, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xc044000}, 0x4000000) [ 507.030270][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:22:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) [ 507.072086][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 507.158325][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffff000, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 507.219879][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.267473][T13747] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 507.270266][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="50800400", @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b0000000c00990000200000420000002e003300d0000000ffffffffffff0802110000000802110000000000000425030074803e010076060000040000000000"], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60a84c0037ce84", @ANYRES16=r1, @ANYBLOB="20002dbd7000ffdbdf2502000000080026006c090000080026006c09000008006100fb000000080026007b0900001400020063616966300000000000000000000000080026006c09000008000c010000000008000a0105000000"], 0x60}}, 0x20004090) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60a84c0037ce84", @ANYRES16=r1, @ANYBLOB="20002dbd7000ffdbdf2502000000080026006c090000080026006c09000008006100fb000000080026007b0900001400020063616966300000000000000000000000080026006c09000008000c010000000008000a0105000000"], 0x60}}, 0x20004090) 08:22:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fa800003a52000000003b15000008001000", @ANYRES32=r4, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xc044000}, 0x4000000) 08:22:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xb00, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="50800400", @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b0000000c00990000200000420000002e003300d0000000ffffffffffff0802110000000802110000000000000425030074803e010076060000040000000000"], 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="50800400", @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b0000000c00990000200000420000002e003300d0000000ffffffffffff0802110000000802110000000000000425030074803e010076060000040000000000"], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60a84c0037ce84", @ANYRES16=r1, @ANYBLOB="20002dbd7000ffdbdf2502000000080026006c090000080026006c09000008006100fb000000080026007b0900001400020063616966300000000000000000000000080026006c09000008000c010000000008000a0105000000"], 0x60}}, 0x20004090) 08:22:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 08:22:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fa800003a52000000003b15000008001000", @ANYRES32=r4, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xc044000}, 0x4000000) [ 507.618101][ T1038] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0xc83, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc8100002, {0x9, 0x2, 0x6, 0x3f0}}}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8b4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8, {0x6, 0x81, 0x3, 0x275}}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x94}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004041}, 0xc4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 507.684013][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.725994][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xd00, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 08:22:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0xc83, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc8100002, {0x9, 0x2, 0x6, 0x3f0}}}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8b4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8, {0x6, 0x81, 0x3, 0x275}}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x94}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004041}, 0xc4) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0), 0x0, 0x0, 0x0) 08:22:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 08:22:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) [ 508.081798][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xe00, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 508.138635][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.166209][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0xc83, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc8100002, {0x9, 0x2, 0x6, 0x3f0}}}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8b4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x8, {0x6, 0x81, 0x3, 0x275}}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x94}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004041}, 0xc4) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r2, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 508.360777][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0xf, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) [ 508.432359][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.469931][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20012000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44884}, 0x4000090) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 08:22:09 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0), 0x0, 0x0, 0x0) 08:22:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x1400, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 508.603581][ T48] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x10, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 508.679767][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.687658][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20012000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44884}, 0x4000090) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x140, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:10 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f00000057c0), 0x0, 0x0, 0x0) [ 508.953311][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x1600, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 08:22:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(r0, &(0x7f0000000140)={[0xb9a, 0x3f]}, 0x8, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000003df54e54ef0766f6e69671b53bbbfbed026a164aed7053ce842a46f5663b5f5e3355a3cf4742c4d12dbd90acfe03224258e887a22003c33df32a4e8f17dc3a95b88b4ce5096c5fc0acfd8f87463af85740951b6e8a3c2cafa7405c31434131038bfda2c9aa576d2808a2ba78f49db2f108b48245063bb57cde770fb2a200d2dc1383b99dfb80f152246f05b202042f4ec59ae1dc8223339afd6e93fcb49cb3b1eed4034d25aed8b0368853d53503d14364ad4620aef2d160642090595db8f216ee91ac2c5ecd7ec8a63329c461a7c94b27cba5f2d"], 0x4c}}, 0x0) 08:22:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0xec0, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 509.081511][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.110200][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:10 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20012000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44884}, 0x4000090) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(r0, &(0x7f0000000140)={[0xb9a, 0x3f]}, 0x8, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000003df54e54ef0766f6e69671b53bbbfbed026a164aed7053ce842a46f5663b5f5e3355a3cf4742c4d12dbd90acfe03224258e887a22003c33df32a4e8f17dc3a95b88b4ce5096c5fc0acfd8f87463af85740951b6e8a3c2cafa7405c31434131038bfda2c9aa576d2808a2ba78f49db2f108b48245063bb57cde770fb2a200d2dc1383b99dfb80f152246f05b202042f4ec59ae1dc8223339afd6e93fcb49cb3b1eed4034d25aed8b0368853d53503d14364ad4620aef2d160642090595db8f216ee91ac2c5ecd7ec8a63329c461a7c94b27cba5f2d"], 0x4c}}, 0x0) 08:22:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x1f00, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 509.302721][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1fe8000000000082f3dc72e4884e2354178451d701f6150000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050505050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) 08:22:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x33fe0, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 509.401665][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:22:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 509.450021][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x2000, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0xfffffdef, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 509.561661][ T48] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 509.650315][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.668791][T13856] wireguard0: entered promiscuous mode [ 509.674323][T13856] wireguard0: entered allmulticast mode [ 509.697969][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0xf, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 509.850046][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 509.862580][ T48] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x2400, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 509.942857][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.963529][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.986011][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x7b, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) [ 510.018032][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:11 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(r0, &(0x7f0000000140)={[0xb9a, 0x3f]}, 0x8, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000003df54e54ef0766f6e69671b53bbbfbed026a164aed7053ce842a46f5663b5f5e3355a3cf4742c4d12dbd90acfe03224258e887a22003c33df32a4e8f17dc3a95b88b4ce5096c5fc0acfd8f87463af85740951b6e8a3c2cafa7405c31434131038bfda2c9aa576d2808a2ba78f49db2f108b48245063bb57cde770fb2a200d2dc1383b99dfb80f152246f05b202042f4ec59ae1dc8223339afd6e93fcb49cb3b1eed4034d25aed8b0368853d53503d14364ad4620aef2d160642090595db8f216ee91ac2c5ecd7ec8a63329c461a7c94b27cba5f2d"], 0x4c}}, 0x0) 08:22:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1fe8000000000082f3dc72e4884e2354178451d701f6150000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050505050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) 08:22:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x2400, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 510.422147][ T1038] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x4c00, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x2, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004a801}, 0x5) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 510.571268][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.595260][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 510.619061][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:11 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 510.668827][T13891] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 510.735655][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.753480][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004a801}, 0x5) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x3d036, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1fe8000000000082f3dc72e4884e2354178451d701f6150000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2e003300d0000000ffffffffffff0802110000015050505050500000000425030000003e010076060000000000000000"], 0x4c}}, 0x0) 08:22:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x4, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 510.783287][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 510.870285][ T2443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.901094][ T2443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004a801}, 0x5) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x7f00, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 511.034583][ T59] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 511.063675][T13912] wireguard0: entered promiscuous mode [ 511.088504][T13912] wireguard0: entered allmulticast mode [ 511.115483][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 08:22:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x6, 0x0, {0x7}}, 0x1c}}, 0x0) [ 511.159564][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x50000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x7, 0x401, {{0x2b, 0x4, 0x1, 0x2a, 0xac, 0x66, 0x0, 0x4, 0x2f, 0x0, @remote, @local, {[@cipso={0x86, 0x54, 0xffffffffffffffff, [{0x0, 0x9, "eb68fb93dfbbdb"}, {0x0, 0x10, "8af10f6143e66b3f0f7161482c43"}, {0x5, 0xc, "417e095bb878d7218d0d"}, {0x1, 0xc, "67d629f929d8f31b56ef"}, {0x2, 0x12, "f1a2528688c7d35970467adaa7b0abce"}, {0x0, 0xb, "7bf42f81b9b146da1b"}]}, @timestamp_prespec={0x44, 0x1c, 0x81, 0x3, 0x0, [{@multicast2}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x65}]}, @generic={0x82, 0x2}, @noop, @noop, @noop, @lsrr={0x83, 0x1f, 0x9b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @local]}, @noop]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_getaddr={0x68, 0x16, 0x800, 0x70bd29, 0x25dfdbfb, {0x2, 0x1, 0x2, 0xc8, r4}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'wlan0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1004}, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 511.375679][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x7, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xfe04, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 511.459783][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.490061][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.510215][ T2443] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x50000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x7, 0x401, {{0x2b, 0x4, 0x1, 0x2a, 0xac, 0x66, 0x0, 0x4, 0x2f, 0x0, @remote, @local, {[@cipso={0x86, 0x54, 0xffffffffffffffff, [{0x0, 0x9, "eb68fb93dfbbdb"}, {0x0, 0x10, "8af10f6143e66b3f0f7161482c43"}, {0x5, 0xc, "417e095bb878d7218d0d"}, {0x1, 0xc, "67d629f929d8f31b56ef"}, {0x2, 0x12, "f1a2528688c7d35970467adaa7b0abce"}, {0x0, 0xb, "7bf42f81b9b146da1b"}]}, @timestamp_prespec={0x44, 0x1c, 0x81, 0x3, 0x0, [{@multicast2}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x65}]}, @generic={0x82, 0x2}, @noop, @noop, @noop, @lsrr={0x83, 0x1f, 0x9b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @local]}, @noop]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_getaddr={0x68, 0x16, 0x800, 0x70bd29, 0x25dfdbfb, {0x2, 0x1, 0x2, 0xc8, r4}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'wlan0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1004}, 0x10) (async) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x7) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 511.608145][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.645658][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x8, 0x0, {0x7}}, 0x1c}}, 0x0) [ 511.685053][ T48] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xff03, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x50000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x7, 0x401, {{0x2b, 0x4, 0x1, 0x2a, 0xac, 0x66, 0x0, 0x4, 0x2f, 0x0, @remote, @local, {[@cipso={0x86, 0x54, 0xffffffffffffffff, [{0x0, 0x9, "eb68fb93dfbbdb"}, {0x0, 0x10, "8af10f6143e66b3f0f7161482c43"}, {0x5, 0xc, "417e095bb878d7218d0d"}, {0x1, 0xc, "67d629f929d8f31b56ef"}, {0x2, 0x12, "f1a2528688c7d35970467adaa7b0abce"}, {0x0, 0xb, "7bf42f81b9b146da1b"}]}, @timestamp_prespec={0x44, 0x1c, 0x81, 0x3, 0x0, [{@multicast2}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x65}]}, @generic={0x82, 0x2}, @noop, @noop, @noop, @lsrr={0x83, 0x1f, 0x9b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @local]}, @noop]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_getaddr={0x68, 0x16, 0x800, 0x70bd29, 0x25dfdbfb, {0x2, 0x1, 0x2, 0xc8, r4}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LABEL={0x14, 0x3, 'wlan0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1004}, 0x10) (async) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 511.780937][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.812102][ T1038] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 511.826812][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x60}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 511.953453][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.965014][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x880) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80220000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0xa, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x30000, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 511.997458][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) [ 512.095436][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.132553][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0xc, 0x0, {0x7}}, 0x1c}}, 0x0) [ 512.271144][ T11] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x880) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80220000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x880) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80220000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) 08:22:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x34000, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xa9}, @device_a, @device_a, @from_mac, {0x4, 0x1f}}, @ver_80211n={0x0, 0x5, 0x0, 0x3, 0x0, 0x3, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1, 0x4}, @val={0x76, 0x6}}}}}]}, 0x50}}, 0x0) [ 512.378648][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.386714][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:22:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0xe, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x880) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80220000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x880) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80220000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) 08:22:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002"], 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r8, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x51, 0xbe, "62895c8d6f123ffd892c4874eca292eb9a29f3a5d651d2bd418e85af01557f633a54e033d3394e545bccf9c0aba77767f267f36f2381324424fe2b208ccc3bf5944140b4d579cfa32230311bbf"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1f, 0x9}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000890}, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24040050) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) 08:22:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x400300, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) [ 512.650706][ T1038] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xa9}, @device_a, @device_a, @from_mac, {0x4, 0x1f}}, @ver_80211n={0x0, 0x5, 0x0, 0x3, 0x0, 0x3, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1, 0x4}, @val={0x76, 0x6}}}}}]}, 0x50}}, 0x0) 08:22:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}, 0xfdef) 08:22:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0xf, 0x0, {0x7}}, 0x1c}}, 0x0) 08:22:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002780)=""/4104, 0x1008) epoll_wait(r0, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="13c8ef89dc629c3fa9aac2de8a2ab735e3e9fe10c58bcd79c4f2c388577586dffd3095835835e4345418d74fe9571b3ba8cd06962cdf67ea3291b35f322e7250876da5b6370f4b0ac43787cab704152ce0062529ff6c4d503df264d447aca9c4500a9b277ebbc5e690140681ee4444a3303fdb3c1c7e1376f8c477dd43f6a009ab157fcef6293ce3ad83c8a3f23be03dc64a64e4ab066f03e10a35a10e9056aa6026a968b4d23a2a46788b539cec0b7faf0b65f450b65759d79457bc", @ANYRESHEX=r2, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRESOCT=r3, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 512.829264][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.837402][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.982826][T10497] wlan0: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting 08:22:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={@wo_ht={{}, {}, @broadcast, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 08:22:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xa9}, @device_a, @device_a, @from_mac, {0x4, 0x1f}}, @ver_80211n={0x0, 0x5, 0x0, 0x3, 0x0, 0x3, 0x1}}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1, 0x4}, @val={0x76, 0x6}}}}}]}, 0x50}}, 0x0) 08:22:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x10, 0x0, {0x7}}, 0x1c}}, 0x0) [ 513.099445][ T48] ------------[ cut here ]------------ [ 513.105457][ T48] WARNING: CPU: 1 PID: 48 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x4b4/0x550 [ 513.116045][ T48] Modules linked in: [ 513.120264][ T48] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted 6.7.0-rc7-syzkaller #0 [ 513.128778][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 513.138923][ T48] Workqueue: cfg80211 cfg80211_event_work 08:22:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002780)=""/4104, 0x1008) (async) getdents64(r0, &(0x7f0000002780)=""/4104, 0x1008) epoll_wait(r0, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="13c8ef89dc629c3fa9aac2de8a2ab735e3e9fe10c58bcd79c4f2c388577586dffd3095835835e4345418d74fe9571b3ba8cd06962cdf67ea3291b35f322e7250876da5b6370f4b0ac43787cab704152ce0062529ff6c4d503df264d447aca9c4500a9b277ebbc5e690140681ee4444a3303fdb3c1c7e1376f8c477dd43f6a009ab157fcef6293ce3ad83c8a3f23be03dc64a64e4ab066f03e10a35a10e9056aa6026a968b4d23a2a46788b539cec0b7faf0b65f450b65759d79457bc", @ANYRESHEX=r2, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRESOCT=r3, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="13c8ef89dc629c3fa9aac2de8a2ab735e3e9fe10c58bcd79c4f2c388577586dffd3095835835e4345418d74fe9571b3ba8cd06962cdf67ea3291b35f322e7250876da5b6370f4b0ac43787cab704152ce0062529ff6c4d503df264d447aca9c4500a9b277ebbc5e690140681ee4444a3303fdb3c1c7e1376f8c477dd43f6a009ab157fcef6293ce3ad83c8a3f23be03dc64a64e4ab066f03e10a35a10e9056aa6026a968b4d23a2a46788b539cec0b7faf0b65f450b65759d79457bc", @ANYRESHEX=r2, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRESOCT=r3, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 513.144777][ T48] RIP: 0010:__cfg80211_ibss_joined+0x4b4/0x550 [ 513.151243][ T48] Code: ff ff e8 bf c3 a5 f7 90 0f 0b 90 e9 66 fe ff ff e8 d1 6d fc f7 e9 44 fc ff ff e8 87 6d fc f7 e9 88 fc ff ff e8 9d c3 a5 f7 90 <0f> 0b 90 e9 91 fc ff ff e8 8f c3 a5 f7 90 0f 0b e8 c7 6d fc f7 e9 [ 513.171334][ T48] RSP: 0018:ffffc90000b8fb70 EFLAGS: 00010293 [ 513.178206][ T48] RAX: 0000000000000000 RBX: ffff888067194c90 RCX: 1ffffffff23e8ece [ 513.187333][ T48] RDX: ffff8880166e3b80 RSI: ffffffff89e1ae33 RDI: ffffffff8b2efba0 08:22:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002"], 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r8, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x49}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x51, 0xbe, "62895c8d6f123ffd892c4874eca292eb9a29f3a5d651d2bd418e85af01557f633a54e033d3394e545bccf9c0aba77767f267f36f2381324424fe2b208ccc3bf5944140b4d579cfa32230311bbf"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1f, 0x9}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000890}, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24040050) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe800000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="2e003300d0000000ffffffffffff08021100000150505050505000000007"], 0x4c}}, 0x0) [ 513.195614][ T48] RBP: ffffc90000b8fc20 R08: 0000000000000001 R09: fffffbfff23e37dd [ 513.203880][ T48] R10: ffffffff91f1beef R11: 0000000000000003 R12: ffff888067194000 [ 513.212044][ T48] R13: 1ffff92000171f72 R14: 0000000000000000 R15: ffffc90000b8fbb0 [ 513.220113][ T48] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 513.229270][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.235900][ T48] CR2: 00000000f7378020 CR3: 0000000041e88000 CR4: 00000000003506f0 [ 513.244035][ T48] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 513.252115][ T48] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 513.260565][ T48] Call Trace: [ 513.263892][ T48] [ 513.266850][ T48] ? show_regs+0x8f/0xa0 [ 513.271446][ T48] ? __warn+0xe6/0x390 [ 513.275565][ T48] ? __cfg80211_ibss_joined+0x4b4/0x550 [ 513.281252][ T48] ? report_bug+0x3bc/0x580 [ 513.287117][ T48] ? handle_bug+0x3d/0x70 [ 513.292876][ T48] ? exc_invalid_op+0x17/0x40 [ 513.297701][ T48] ? asm_exc_invalid_op+0x1a/0x20 [ 513.302950][ T48] ? __cfg80211_ibss_joined+0x4b3/0x550 [ 513.308602][ T48] ? __cfg80211_ibss_joined+0x4b4/0x550 [ 513.314201][ T48] ? cfg80211_ibss_joined+0x590/0x590 [ 513.319709][ T48] ? mark_held_locks+0x9f/0xe0 [ 513.324533][ T48] ? cfg80211_process_wdev_events+0x3e6/0x5d0 [ 513.330769][ T48] cfg80211_process_wdev_events+0x3e6/0x5d0 [ 513.337160][ T48] cfg80211_process_rdev_events+0x9f/0x130 [ 513.343166][ T48] cfg80211_event_work+0x2b/0x40 [ 513.348237][ T48] process_one_work+0x886/0x15d0 [ 513.353319][ T48] ? cfg80211_sched_dfs_chan_update+0x60/0x60 [ 513.359557][ T48] ? workqueue_congested+0x300/0x300 [ 513.364963][ T48] ? assign_work+0x1a0/0x250 [ 513.369679][ T48] worker_thread+0x8b9/0x1290 [ 513.374463][ T48] ? __kthread_parkme+0x14b/0x220 [ 513.379645][ T48] ? process_one_work+0x15d0/0x15d0 [ 513.384909][ T48] kthread+0x2c6/0x3a0 [ 513.390205][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.395546][ T48] ? kthread_complete_and_exit+0x40/0x40 [ 513.401428][ T48] ret_from_fork+0x45/0x80 [ 513.405930][ T48] ? kthread_complete_and_exit+0x40/0x40 [ 513.411778][ T48] ret_from_fork_asm+0x11/0x20 [ 513.416814][ T48] [ 513.420073][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 513.427465][ T48] CPU: 1 PID: 48 Comm: kworker/u4:3 Not tainted 6.7.0-rc7-syzkaller #0 [ 513.436006][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 513.446179][ T48] Workqueue: cfg80211 cfg80211_event_work [ 513.451960][ T48] Call Trace: [ 513.455267][ T48] [ 513.458398][ T48] dump_stack_lvl+0xd9/0x1b0 [ 513.463038][ T48] panic+0x6dc/0x790 [ 513.466975][ T48] ? panic_smp_self_stop+0xa0/0xa0 [ 513.472650][ T48] ? show_trace_log_lvl+0x363/0x4f0 [ 513.478009][ T48] ? check_panic_on_warn+0x1f/0xb0 [ 513.483429][ T48] ? __cfg80211_ibss_joined+0x4b4/0x550 [ 513.489034][ T48] check_panic_on_warn+0xab/0xb0 [ 513.494048][ T48] __warn+0xf2/0x390 [ 513.497988][ T48] ? __cfg80211_ibss_joined+0x4b4/0x550 [ 513.503671][ T48] report_bug+0x3bc/0x580 [ 513.508127][ T48] handle_bug+0x3d/0x70 [ 513.512325][ T48] exc_invalid_op+0x17/0x40 [ 513.516956][ T48] asm_exc_invalid_op+0x1a/0x20 [ 513.521961][ T48] RIP: 0010:__cfg80211_ibss_joined+0x4b4/0x550 [ 513.528180][ T48] Code: ff ff e8 bf c3 a5 f7 90 0f 0b 90 e9 66 fe ff ff e8 d1 6d fc f7 e9 44 fc ff ff e8 87 6d fc f7 e9 88 fc ff ff e8 9d c3 a5 f7 90 <0f> 0b 90 e9 91 fc ff ff e8 8f c3 a5 f7 90 0f 0b e8 c7 6d fc f7 e9 [ 513.548725][ T48] RSP: 0018:ffffc90000b8fb70 EFLAGS: 00010293 [ 513.555156][ T48] RAX: 0000000000000000 RBX: ffff888067194c90 RCX: 1ffffffff23e8ece [ 513.563236][ T48] RDX: ffff8880166e3b80 RSI: ffffffff89e1ae33 RDI: ffffffff8b2efba0 [ 513.571405][ T48] RBP: ffffc90000b8fc20 R08: 0000000000000001 R09: fffffbfff23e37dd [ 513.579397][ T48] R10: ffffffff91f1beef R11: 0000000000000003 R12: ffff888067194000 [ 513.587572][ T48] R13: 1ffff92000171f72 R14: 0000000000000000 R15: ffffc90000b8fbb0 [ 513.595742][ T48] ? __cfg80211_ibss_joined+0x4b3/0x550 [ 513.601318][ T48] ? cfg80211_ibss_joined+0x590/0x590 [ 513.606800][ T48] ? mark_held_locks+0x9f/0xe0 [ 513.611764][ T48] ? cfg80211_process_wdev_events+0x3e6/0x5d0 [ 513.617953][ T48] cfg80211_process_wdev_events+0x3e6/0x5d0 [ 513.623970][ T48] cfg80211_process_rdev_events+0x9f/0x130 [ 513.629882][ T48] cfg80211_event_work+0x2b/0x40 [ 513.634864][ T48] process_one_work+0x886/0x15d0 [ 513.640094][ T48] ? cfg80211_sched_dfs_chan_update+0x60/0x60 [ 513.646202][ T48] ? workqueue_congested+0x300/0x300 [ 513.651535][ T48] ? assign_work+0x1a0/0x250 [ 513.656155][ T48] worker_thread+0x8b9/0x1290 [ 513.660872][ T48] ? __kthread_parkme+0x14b/0x220 [ 513.666171][ T48] ? process_one_work+0x15d0/0x15d0 [ 513.671381][ T48] kthread+0x2c6/0x3a0 [ 513.675493][ T48] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.680817][ T48] ? kthread_complete_and_exit+0x40/0x40 [ 513.686481][ T48] ret_from_fork+0x45/0x80 [ 513.690918][ T48] ? kthread_complete_and_exit+0x40/0x40 [ 513.696845][ T48] ret_from_fork_asm+0x11/0x20 [ 513.701924][ T48] [ 513.705152][ T48] Kernel Offset: disabled [ 513.709994][ T48] Rebooting in 86400 seconds..