enat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) (async, rerun: 64) ioctl$TCSBRK(r1, 0x5409, 0x1000) (rerun: 64) 00:03:22 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf254900000008000100580000000c0099000800000020000000cbd972e17d97791e9a6287383382c3fde6ee1403663d2a4158930b2e60e755751b1cec169e5a4b18917468bcbd9a289924380483aaaf45a83d1019a729d3e2bb431193c0df7a4acc8dc305bbce269be868"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) 00:03:22 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_MASTER={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000010}, 0x20002084) 00:03:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) 00:03:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async, rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 64) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x400a21, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000002c0), &(0x7f00000019c0)=0x4) (async, rerun: 32) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0xc1) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$VT_ACTIVATE(r2, 0x5606, 0x80003) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="68160000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="24000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784324000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e080005000100000008000700010000000800050001000000"], 0x1668}, 0x1, 0x0, 0x0, 0x48040}, 0x48000) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) 00:03:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80804}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x7}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x8c, 0x4}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x4, 0x800}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x78}, 0x1, 0x0, 0x0, 0xc800}, 0x801) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/w1', 0x0, 0x124) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) (async) ioctl$TCSBRK(r1, 0x5409, 0x1000) 00:03:22 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x810) 00:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x5609, &(0x7f0000000000)) 00:03:22 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf254900000008000100580000000c0099000800000020000000cbd972e17d97791e9a6287383382c3fde6ee1403663d2a4158930b2e60e755751b1cec169e5a4b18917468bcbd9a289924380483aaaf45a83d1019a729d3e2bb431193c0df7a4acc8dc305bbce269be868"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) 00:03:22 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x810) 00:03:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) 00:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x560a, &(0x7f0000000000)) 00:03:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73797a746e6c80000000bac51fda32000000000000000000", @ANYRES32=0x0, @ANYBLOB="001000080000000600000001450e00540068000002299078ffffffff64010100863f00000003070e16b7f352f3de1f95de9fe9080712f3fecaa459aae8262034ff612bdc46cf010ffe38e2f2e5cc4c9c36280ec10e000a04683e3464772ebb00"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffcbed}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x64717ec45f346dcb) 00:03:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73797a746e6c80000000bac51fda32000000000000000000", @ANYRES32=0x0, @ANYBLOB="001000080000000600000001450e00540068000002299078ffffffff64010100863f00000003070e16b7f352f3de1f95de9fe9080712f3fecaa459aae8262034ff612bdc46cf010ffe38e2f2e5cc4c9c36280ec10e000a04683e3464772ebb00"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffcbed}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x64717ec45f346dcb) 00:03:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x10001, 0x1, 0x31df8493, 0x4, "711fe76d891d0bb9ef77b4cedebf9c5673f8d1", 0xfffffff7, 0x1}) 00:03:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73797a746e6c80000000bac51fda32000000000000000000", @ANYRES32=0x0, @ANYBLOB="001000080000000600000001450e00540068000002299078ffffffff64010100863f00000003070e16b7f352f3de1f95de9fe9080712f3fecaa459aae8262034ff612bdc46cf010ffe38e2f2e5cc4c9c36280ec10e000a04683e3464772ebb00"]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffcbed}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x64717ec45f346dcb) 00:03:22 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x810) 00:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x560b, &(0x7f0000000000)) 00:03:22 executing program 2: sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x9, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x80000010}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004005) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000200)=0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x8400) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x8, 0x4, 0x1}}, 0x14) 00:03:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x560c, &(0x7f0000000000)) 00:03:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x31df8493, 0x4, "711fe76d891d0bb9ef77b4cedebf9c5673f8d1", 0xfffffff7, 0x1}) 00:03:22 executing program 2: sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x9, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x80000010}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004005) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000200)=0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x8400) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x8, 0x4, 0x1}}, 0x14) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x9, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x80000010}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004005) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000200)=0x1) (async) syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x8400) (async) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x8, 0x4, 0x1}}, 0x14) (async) 00:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x560d, &(0x7f0000000000)) 00:03:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x31df8493, 0x4, "711fe76d891d0bb9ef77b4cedebf9c5673f8d1", 0xfffffff7, 0x1}) 00:03:22 executing program 5: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000100", @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf251100004800018008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRESHEX=r0, @ANYBLOB="0800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="140002006873723000"/20], 0x5c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x8000, 0x1, 0x800, 0x4, {{0x17, 0x4, 0x0, 0x3a, 0x5c, 0x68, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@lsrr={0x83, 0xb, 0x95, [@private=0xa010102, @remote]}, @timestamp={0x44, 0x2c, 0x28, 0x0, 0x4, [0x6, 0x100, 0x6b, 0xfb7, 0x5, 0x82bc, 0x200, 0x8, 0x5, 0x1]}, @timestamp={0x44, 0x10, 0x37, 0x0, 0x2, [0x8, 0x0, 0x1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x130, r5, 0x600, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4c880}, 0x40000c1) syz_open_dev$tty1(0xc, 0x4, 0x4) write$P9_ROPEN(r3, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x10, 0x1, 0x4}, 0x2ab}}, 0x18) 00:03:22 executing program 2: sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x9, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x80000010}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004005) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000200)=0x1) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x8400) write$P9_RATTACH(r1, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x8, 0x4, 0x1}}, 0x14) 00:03:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, "711fe76d891d0bb9ef77b4cedebf9c5673f8d1", 0xfffffff7, 0x1}) 00:03:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) ioctl$VT_RELDISP(r1, 0x5605) r2 = syz_open_pts(r0, 0x48a780) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000080)=""/6) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) write$P9_ROPEN(r4, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x80, 0x4, 0x1}, 0x6}}, 0x18) ioctl$TIOCCONS(r2, 0x541d) 00:03:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, "711fe76d891d0bb9ef77b4cedebf9c5673f8d1", 0xfffffff7, 0x1}) [ 489.227913][ T24] audit: type=1400 audit(1643414602.385:153): avc: denied { ioctl } for pid=8048 comm="syz-executor.5" path="/sys/kernel/tracing" dev="tracefs" ino=1 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 00:03:22 executing program 5: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000100", @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf251100004800018008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRESHEX=r0, @ANYBLOB="0800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="140002006873723000"/20], 0x5c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x8000, 0x1, 0x800, 0x4, {{0x17, 0x4, 0x0, 0x3a, 0x5c, 0x68, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@lsrr={0x83, 0xb, 0x95, [@private=0xa010102, @remote]}, @timestamp={0x44, 0x2c, 0x28, 0x0, 0x4, [0x6, 0x100, 0x6b, 0xfb7, 0x5, 0x82bc, 0x200, 0x8, 0x5, 0x1]}, @timestamp={0x44, 0x10, 0x37, 0x0, 0x2, [0x8, 0x0, 0x1]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x130, r5, 0x600, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4c880}, 0x40000c1) syz_open_dev$tty1(0xc, 0x4, 0x4) write$P9_ROPEN(r3, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x10, 0x1, 0x4}, 0x2ab}}, 0x18) 00:03:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) ioctl$VT_RELDISP(r1, 0x5605) r2 = syz_open_pts(r0, 0x48a780) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000080)=""/6) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) write$P9_ROPEN(r4, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x80, 0x4, 0x1}, 0x6}}, 0x18) ioctl$TIOCCONS(r2, 0x541d) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x2) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) (async) ioctl$VT_RELDISP(r1, 0x5605) (async) syz_open_pts(r0, 0x48a780) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000080)=""/6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) write$P9_ROPEN(r4, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x80, 0x4, 0x1}, 0x6}}, 0x18) (async) ioctl$TIOCCONS(r2, 0x541d) (async) 00:03:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, "711fe76d891d0bb9ef77b4cedebf9c5673f8d1", 0xfffffff7, 0x1}) 00:03:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x560e, &(0x7f0000000000)) 00:03:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x7ff, 0x2, 0xafdc}) 00:03:22 executing program 5: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000100", @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf251100004800018008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRESHEX=r0, @ANYBLOB="0800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="140002006873723000"/20], 0x5c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x8000, 0x1, 0x800, 0x4, {{0x17, 0x4, 0x0, 0x3a, 0x5c, 0x68, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, {[@lsrr={0x83, 0xb, 0x95, [@private=0xa010102, @remote]}, @timestamp={0x44, 0x2c, 0x28, 0x0, 0x4, [0x6, 0x100, 0x6b, 0xfb7, 0x5, 0x82bc, 0x200, 0x8, 0x5, 0x1]}, @timestamp={0x44, 0x10, 0x37, 0x0, 0x2, [0x8, 0x0, 0x1]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x130, r5, 0x600, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4c880}, 0x40000c1) syz_open_dev$tty1(0xc, 0x4, 0x4) write$P9_ROPEN(r3, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x10, 0x1, 0x4}, 0x2ab}}, 0x18) 00:03:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x7ff, 0x2, 0xafdc}) 00:03:22 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x18000) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'ip_vti0\x00', r3, 0x20, 0x40, 0x0, 0xbd, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x66, 0x0, 0x4, 0x29, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x1f, 0xa0, [@empty, @rand_addr=0x64010100, @loopback, @private=0xa010100, @loopback, @local, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080020}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x4044040) ioctl$VT_RELDISP(r2, 0x5605) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) 00:03:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) (async, rerun: 32) ioctl$VT_RELDISP(r1, 0x5605) (async, rerun: 32) r2 = syz_open_pts(r0, 0x48a780) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000080)=""/6) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) write$P9_ROPEN(r4, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x80, 0x4, 0x1}, 0x6}}, 0x18) ioctl$TIOCCONS(r2, 0x541d) 00:03:22 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x18000) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'ip_vti0\x00', r3, 0x20, 0x40, 0x0, 0xbd, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x66, 0x0, 0x4, 0x29, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x1f, 0xa0, [@empty, @rand_addr=0x64010100, @loopback, @private=0xa010100, @loopback, @local, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080020}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x4044040) (async) ioctl$VT_RELDISP(r2, 0x5605) (async) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) 00:03:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x31df8493, 0x0, "711fe76d891d0bb9ef77b4cedebf9c5673f8d1", 0xfffffff7, 0x1}) 00:03:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x7ff, 0x2, 0xafdc}) 00:03:22 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/libertas_tf', 0x416800, 0x5) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x25}}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x400c098) 00:03:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x400100) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0xfffffffe) 00:03:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x31df8493, 0x0, "711fe76d891d0bb9ef77b4cedebf9c5673f8d1", 0x0, 0x1}) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x560f, &(0x7f0000000000)) 00:03:23 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x18000) ioctl$TIOCCBRK(r0, 0x5428) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'ip_vti0\x00', r3, 0x20, 0x40, 0x0, 0xbd, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x66, 0x0, 0x4, 0x29, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x1f, 0xa0, [@empty, @rand_addr=0x64010100, @loopback, @private=0xa010100, @loopback, @local, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080020}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x4044040) ioctl$VT_RELDISP(r2, 0x5605) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) syz_open_pts(0xffffffffffffffff, 0x18000) (async) ioctl$TIOCCBRK(r0, 0x5428) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'ip_vti0\x00', r3, 0x20, 0x40, 0x0, 0xbd, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x66, 0x0, 0x4, 0x29, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x1f, 0xa0, [@empty, @rand_addr=0x64010100, @loopback, @private=0xa010100, @loopback, @local, @loopback]}]}}}}}) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080020}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x4044040) (async) ioctl$VT_RELDISP(r2, 0x5605) (async) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) (async) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x31df8493, 0x0, "711fe76d891d0bb9ef77b4cedebf9c5673f8d1"}) 00:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2380, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xfffffffffffffff7) 00:03:23 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/libertas_tf', 0x416800, 0x5) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x25}}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x400c098) 00:03:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x400100) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0xfffffffe) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x400100) (async) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0xfffffffe) (async) 00:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2380, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xfffffffffffffff7) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2380, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x4) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) (async) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xfffffffffffffff7) (async) 00:03:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) r1 = syz_open_pts(r0, 0x400100) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0xfffffffe) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2380, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xfffffffffffffff7) 00:03:23 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/libertas_tf', 0x416800, 0x5) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x25}}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x400c098) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x40049409, &(0x7f0000000000)) 00:03:23 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/mem', 0xb0000, 0x20) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x5, 0x2, 0xe07, 0x7, 0x8, "6e6b4c12b05ef68adab0ef37a23e4089a9f533", 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2380, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xfffffffffffffff7) 00:03:23 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/mem', 0xb0000, 0x20) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x5, 0x2, 0xe07, 0x7, 0x8, "6e6b4c12b05ef68adab0ef37a23e4089a9f533", 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/mem', 0xb0000, 0x20) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x5, 0x2, 0xe07, 0x7, 0x8, "6e6b4c12b05ef68adab0ef37a23e4089a9f533", 0x2}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) 00:03:23 executing program 4: sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b7c2332196ad7f3b19c58723af698333"}, @NL80211_ATTR_PMK={0x14, 0xfe, "236f2090e0e9360d15d4d589d20b9657"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "c0c6f2eed8719583e1cf924ec391d7da"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "02dcc1d998061b4a97e9bbdf4b4dd53d"}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc14}, 0x41) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:23 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x40086602, &(0x7f0000000000)) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2380, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xfffffffffffffff7) 00:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2380, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x4) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) (async) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xfffffffffffffff7) 00:03:23 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/mem', 0xb0000, 0x20) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x5, 0x2, 0xe07, 0x7, 0x8, "6e6b4c12b05ef68adab0ef37a23e4089a9f533", 0x2}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2380, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) 00:03:23 executing program 4: sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b7c2332196ad7f3b19c58723af698333"}, @NL80211_ATTR_PMK={0x14, 0xfe, "236f2090e0e9360d15d4d589d20b9657"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "c0c6f2eed8719583e1cf924ec391d7da"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "02dcc1d998061b4a97e9bbdf4b4dd53d"}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc14}, 0x41) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b7c2332196ad7f3b19c58723af698333"}, @NL80211_ATTR_PMK={0x14, 0xfe, "236f2090e0e9360d15d4d589d20b9657"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "c0c6f2eed8719583e1cf924ec391d7da"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "02dcc1d998061b4a97e9bbdf4b4dd53d"}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc14}, 0x41) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:23 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) (async) 00:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x40087602, &(0x7f0000000000)) 00:03:23 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/regulator', 0x200000, 0x129) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4802) r3 = syz_open_pts(r0, 0x6249b02b02f27bc5) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000340)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/processor', 0x2400, 0x40) r5 = socket$l2tp6(0xa, 0x2, 0x73) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@fscache}, {@version_9p2000}, {@aname={'aname', 0x3d, './\xf4*\x11{\\\'\'%&!&**.\\^-'}}, {@cache_mmap}, {@cache_fscache}, {@privport}, {@fscache}], [{@fowner_lt={'fowner<', 0xee00}}, {@obj_role}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) 00:03:23 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) (async) 00:03:23 executing program 4: sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b7c2332196ad7f3b19c58723af698333"}, @NL80211_ATTR_PMK={0x14, 0xfe, "236f2090e0e9360d15d4d589d20b9657"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "c0c6f2eed8719583e1cf924ec391d7da"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "02dcc1d998061b4a97e9bbdf4b4dd53d"}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc14}, 0x41) (async, rerun: 32) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) 00:03:23 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/regulator', 0x200000, 0x129) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4802) r3 = syz_open_pts(r0, 0x6249b02b02f27bc5) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000340)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/processor', 0x2400, 0x40) r5 = socket$l2tp6(0xa, 0x2, 0x73) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@fscache}, {@version_9p2000}, {@aname={'aname', 0x3d, './\xf4*\x11{\\\'\'%&!&**.\\^-'}}, {@cache_mmap}, {@cache_fscache}, {@privport}, {@fscache}], [{@fowner_lt={'fowner<', 0xee00}}, {@obj_role}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/regulator', 0x200000, 0x129) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4802) (async) syz_open_pts(r0, 0x6249b02b02f27bc5) (async) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000340)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/processor', 0x2400, 0x40) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@fscache}, {@version_9p2000}, {@aname={'aname', 0x3d, './\xf4*\x11{\\\'\'%&!&**.\\^-'}}, {@cache_mmap}, {@cache_fscache}, {@privport}, {@fscache}], [{@fowner_lt={'fowner<', 0xee00}}, {@obj_role}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) (async) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2380, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x401c5820, &(0x7f0000000000)) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2380, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4020940d, &(0x7f0000000000)) 00:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x8000) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async) 00:03:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000580), 0x101, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c4, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x8, 0xc1, 0x9}, {0x1000, 0x1, 0x4, 0x5e}, {0x1000, 0x8, 0x4, 0x1}, {0x1, 0x4, 0x0, 0xab10}, {0x8, 0x40, 0x3, 0x1}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x48010}, 0x4008840) 00:03:23 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/hwmon', 0x0, 0x0) 00:03:23 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/regulator', 0x200000, 0x129) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4802) (async) r3 = syz_open_pts(r0, 0x6249b02b02f27bc5) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000340)) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/processor', 0x2400, 0x40) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@fscache}, {@version_9p2000}, {@aname={'aname', 0x3d, './\xf4*\x11{\\\'\'%&!&**.\\^-'}}, {@cache_mmap}, {@cache_fscache}, {@privport}, {@fscache}], [{@fowner_lt={'fowner<', 0xee00}}, {@obj_role}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) 00:03:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000580), 0x101, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c4, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x8, 0xc1, 0x9}, {0x1000, 0x1, 0x4, 0x5e}, {0x1000, 0x8, 0x4, 0x1}, {0x1, 0x4, 0x0, 0xab10}, {0x8, 0x40, 0x3, 0x1}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x48010}, 0x4008840) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2380, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 00:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 00:03:23 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/hwmon', 0x0, 0x0) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x80045432, &(0x7f0000000000)) 00:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x22000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x461) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) syz_open_pts(r0, 0xe0000) 00:03:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000580), 0x101, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c4, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x8, 0xc1, 0x9}, {0x1000, 0x1, 0x4, 0x5e}, {0x1000, 0x8, 0x4, 0x1}, {0x1, 0x4, 0x0, 0xab10}, {0x8, 0x40, 0x3, 0x1}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x48010}, 0x4008840) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) syz_open_dev$vcsa(&(0x7f0000000580), 0x101, 0x10000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c4, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0x158, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x8, 0xc1, 0x9}, {0x1000, 0x1, 0x4, 0x5e}, {0x1000, 0x8, 0x4, 0x1}, {0x1, 0x4, 0x0, 0xab10}, {0x8, 0x40, 0x3, 0x1}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x48010}, 0x4008840) (async) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 00:03:23 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/hwmon', 0x0, 0x0) 00:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x80045440, &(0x7f0000000000)) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 00:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 00:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x22000, 0x0) (rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TCSBRK(r1, 0x5409, 0x461) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) syz_open_pts(r0, 0xe0000) 00:03:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/6) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x2, 0x7, 0xfff7}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8001) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x80086601, &(0x7f0000000000)) 00:03:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000002c0)=""/4096) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4c044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4e6d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/33) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 00:03:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/6) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x2, 0x7, 0xfff7}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8001) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/6) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x2, 0x7, 0xfff7}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8001) (async) 00:03:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000002c0)=""/4096) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4c044) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4e6d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) 00:03:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x22000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x461) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) syz_open_pts(r0, 0xe0000) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x22000, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TCSBRK(r1, 0x5409, 0x461) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) syz_open_pts(r0, 0xe0000) (async) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x80087601, &(0x7f0000000000)) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 00:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) 00:03:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/6) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x2, 0x7, 0xfff7}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8001) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/6) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x2, 0x7, 0xfff7}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8001) (async) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x801c581f, &(0x7f0000000000)) 00:03:23 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000001c0)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x3b9542, 0x0) r3 = syz_open_pts(r1, 0x8000) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000480)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x101}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004000}, 0x4004011) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x602000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000040)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042bbd7000fedbdf25110000000c000600020000bacb7950e800d4000200120008000000ee22b9f94da553147d16178e798746a4b49abf29da5d9149abec405272dbdcc291371dac41464cb5f070b5d000"/97], 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x20048814) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000004c0)) 00:03:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x48}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044002}, 0xc040) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_pts(0xffffffffffffffff, 0xc000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) ioctl$VT_ACTIVATE(r1, 0x5606, 0x800) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000040)) 00:03:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 00:03:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000002c0)=""/4096) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4c044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4e6d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000002c0)=""/4096) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4c044) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4e6d}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0xc0045878, &(0x7f0000000000)) 00:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) 00:03:23 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000001c0)) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x3b9542, 0x0) (async) r3 = syz_open_pts(r1, 0x8000) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000480)) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x101}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004000}, 0x4004011) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x602000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000040)) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042bbd7000fedbdf25110000000c000600020000bacb7950e800d4000200120008000000ee22b9f94da553147d16178e798746a4b49abf29da5d9149abec405272dbdcc291371dac41464cb5f070b5d000"/97], 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x20048814) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000004c0)) 00:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x303080, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4a, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) 00:03:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x48}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044002}, 0xc040) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_pts(0xffffffffffffffff, 0xc000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) ioctl$VT_ACTIVATE(r1, 0x5606, 0x800) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000040)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x48}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044002}, 0xc040) (async) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000080)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_pts(0xffffffffffffffff, 0xc000) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) (async) ioctl$VT_ACTIVATE(r1, 0x5606, 0x800) (async) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000040)) (async) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0xc0045878, &(0x7f0000000000)) 00:03:23 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000001c0)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x3b9542, 0x0) r3 = syz_open_pts(r1, 0x8000) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000480)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x101}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004000}, 0x4004011) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x602000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000040)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042bbd7000fedbdf25110000000c000600020000bacb7950e800d4000200120008000000ee22b9f94da553147d16178e798746a4b49abf29da5d9149abec405272dbdcc291371dac41464cb5f070b5d000"/97], 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x20048814) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000001c0)) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x3b9542, 0x0) (async) syz_open_pts(r1, 0x8000) (async) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000480)) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x101}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004000}, 0x4004011) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x602000) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000040)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042bbd7000fedbdf25110000000c000600020000bacb7950e800d4000200120008000000ee22b9f94da553147d16178e798746a4b49abf29da5d9149abec405272dbdcc291371dac41464cb5f070b5d000"/97], 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x20048814) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) (async) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000004c0)) (async) 00:03:23 executing program 3: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) 00:03:23 executing program 3: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) 00:03:23 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x80000001) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 00:03:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0xc0189436, &(0x7f0000000000)) 00:03:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x303080, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4a, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) 00:03:23 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x48}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044002}, 0xc040) (async, rerun: 32) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000080)) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_pts(0xffffffffffffffff, 0xc000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) (async) ioctl$VT_ACTIVATE(r1, 0x5606, 0x800) (async) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000040)) 00:03:23 executing program 3: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) 00:03:24 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x80000001) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 00:03:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 00:03:24 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0xc020660b, &(0x7f0000000000)) 00:03:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x303080, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4a, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x303080, 0x0) (async) ioctl$TIOCL_PASTESEL(r2, 0x4b4a, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) (async) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) 00:03:24 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) (async) 00:03:24 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x80000001) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) 00:03:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) 00:03:24 executing program 1: r0 = gettid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0xfffffffffffff42a}, &(0x7f0000000040)) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) 00:03:24 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) (async, rerun: 64) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000100)=""/4096) io_uring_setup(0x67ac, &(0x7f0000000040)={0x0, 0xb04c, 0x10, 0x0, 0x100164}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) 00:03:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) 00:03:24 executing program 1: r0 = gettid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0xfffffffffffff42a}, &(0x7f0000000040)) (async, rerun: 64) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) (rerun: 64) 00:03:24 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x101002, 0x12) socketpair(0xb, 0xa, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000080cf0000f40100"/20], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x10) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000084}, 0x80) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) write$P9_ROPEN(r2, &(0x7f0000000240)={0x18, 0x71, 0x2, {{0x8, 0x0, 0x6}, 0x5}}, 0x18) syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x2c8042) 00:03:24 executing program 0: sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000100}, 0x20008040) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20850}, 0x0) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/hdpvr', 0x8040, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd0, 0x21}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1e9a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x44850) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000100)=""/4096) io_uring_setup(0x67ac, &(0x7f0000000040)={0x0, 0xb04c, 0x10, 0x0, 0x100164}) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r0, 0x5428) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x3, 0x43, 0x7ff}) 00:03:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x8) 00:03:24 executing program 1: r0 = gettid() (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0xfffffffffffff42a}, &(0x7f0000000040)) (async) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) 00:03:24 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x101002, 0x12) socketpair(0xb, 0xa, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000080cf0000f40100"/20], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x10) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000084}, 0x80) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) write$P9_ROPEN(r2, &(0x7f0000000240)={0x18, 0x71, 0x2, {{0x8, 0x0, 0x6}, 0x5}}, 0x18) syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x2c8042) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r0, 0x5428) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x3, 0x43, 0x7ff}) 00:03:24 executing program 0: sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000100}, 0x20008040) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20850}, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/hdpvr', 0x8040, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd0, 0x21}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1e9a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x44850) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000100)=""/4096) (async) io_uring_setup(0x67ac, &(0x7f0000000040)={0x0, 0xb04c, 0x10, 0x0, 0x100164}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) 00:03:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) 00:03:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x88b00, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fscache,access=', @ANYRESDEC=0x0, @ANYBLOB=',posixacl,version=9p2000.u,access=', @ANYRESDEC, @ANYBLOB=',nodevmap,cachetag=/dev/nvram\x00=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0xee01, @ANYBLOB=',msize=0x0000000000000004,seclabel,appraise,func=MODULE_CHECK,defcontext=unconfined_u,\x00']) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/240}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) 00:03:24 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x101002, 0x12) socketpair(0xb, 0xa, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000080cf0000f40100"/20], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x10) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000084}, 0x80) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) write$P9_ROPEN(r2, &(0x7f0000000240)={0x18, 0x71, 0x2, {{0x8, 0x0, 0x6}, 0x5}}, 0x18) syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x2c8042) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x101002, 0x12) (async) socketpair(0xb, 0xa, 0x3, &(0x7f00000000c0)) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000080cf0000f40100"/20], 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x10) (async) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000084}, 0x80) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) (async) write$P9_ROPEN(r2, &(0x7f0000000240)={0x18, 0x71, 0x2, {{0x8, 0x0, 0x6}, 0x5}}, 0x18) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x2c8042) (async) 00:03:24 executing program 0: sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000100}, 0x20008040) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20850}, 0x0) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/hdpvr', 0x8040, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd0, 0x21}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1e9a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x44850) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000100}, 0x20008040) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20850}, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/hdpvr', 0x8040, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd0, 0x21}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1e9a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x44850) (async) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r0, 0x5428) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x3, 0x43, 0x7ff}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCCBRK(r0, 0x5428) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x3, 0x43, 0x7ff}) (async) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/107) 00:03:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) 00:03:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x88b00, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fscache,access=', @ANYRESDEC=0x0, @ANYBLOB=',posixacl,version=9p2000.u,access=', @ANYRESDEC, @ANYBLOB=',nodevmap,cachetag=/dev/nvram\x00=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0xee01, @ANYBLOB=',msize=0x0000000000000004,seclabel,appraise,func=MODULE_CHECK,defcontext=unconfined_u,\x00']) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/240}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/107) 00:03:24 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4bfa, &(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000040)=""/42, 0x2a, 0x0, &(0x7f0000000080)=""/126, 0x7e}}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000080)=""/79) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4bfa, &(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000040)=""/42, 0x2a, 0x0, &(0x7f0000000080)=""/126, 0x7e}}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4bfa, &(0x7f0000000000)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000040)=""/42, 0x2a, 0x0, &(0x7f0000000080)=""/126, 0x7e}}, 0x10) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) (async) 00:03:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) 00:03:24 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 00:03:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x88b00, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',fscache,access=', @ANYRESDEC=0x0, @ANYBLOB=',posixacl,version=9p2000.u,access=', @ANYRESDEC, @ANYBLOB=',nodevmap,cachetag=/dev/nvram\x00=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0xee01, @ANYBLOB=',msize=0x0000000000000004,seclabel,appraise,func=MODULE_CHECK,defcontext=unconfined_u,\x00']) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/240}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) 00:03:24 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x48}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044002}, 0xc040) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_pts(0xffffffffffffffff, 0xc000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_ACTIVATE(r3, 0x5606, 0x6) ioctl$VT_ACTIVATE(r1, 0x5606, 0x800) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000040)) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000080)=""/79) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/107) 00:03:24 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4bfa, &(0x7f0000000000)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000040)=""/42, 0x2a, 0x0, &(0x7f0000000080)=""/126, 0x7e}}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) 00:03:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000080)=""/79) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000080)=""/79) (async) 00:03:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) write$P9_RGETLOCK(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="240000003701000008000000000000000400000000000000", @ANYRES32=r2, @ANYBLOB="33602d462ec9516710af77cacaeb0ead2d6f7ae2f1af5ca464995220860f77f48d83388679bd7447877dc1fcf357c377c6754679a9317dce501ab79d239e2f4a0ff44951c3c5a0c2cf1c6f8a3477a9967659d12104bfde3d5ea4bb5ebce52f882e27874a6edde8f03e6b54ad657ee8d7beff73da7946dec2d249f9b05095de970a610fc34c67b7a4d8396a43fa72a95a1fdccaeca7a89212d1f98e1b423a1a835290d09dd716ec57de5ca873b81a949666a30e6158b5b46dba74702207a55eeaf1b48e6142c1f259fce63e"], 0x24) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000100)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x4) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000180), 0xe24, 0x10000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec, 0x56}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x60}, 0x1, 0x0, 0x0, 0x850}, 0x10) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x438d43, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:24 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1d, 0x6, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) 00:03:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) 00:03:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x541b, &(0x7f0000000000)) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0xe4cb6e0f409befb5) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) 00:03:24 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1d, 0x6, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) syz_open_dev$vcsn(&(0x7f0000000180), 0xe24, 0x10000) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec, 0x56}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x60}, 0x1, 0x0, 0x0, 0x850}, 0x10) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x438d43, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x438d43, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) 00:03:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) 00:03:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x541b, &(0x7f0000000000)) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0xe4cb6e0f409befb5) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) 00:03:24 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1d, 0x6, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) syz_open_dev$vcsn(&(0x7f0000000180), 0xe24, 0x10000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5ec, 0x56}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x60}, 0x1, 0x0, 0x0, 0x850}, 0x10) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x438d43, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x438d43, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) 00:03:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) 00:03:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x541b, &(0x7f0000000000)) 00:03:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x28000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0xe4cb6e0f409befb5) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) 00:03:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:24 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040000) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:24 executing program 3: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 00:03:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x28000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x801) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000005) ioctl$VT_RELDISP(r0, 0x5605) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) 00:03:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x801) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000040)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000005) (async) ioctl$VT_RELDISP(r0, 0x5605) 00:03:24 executing program 3: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 00:03:24 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x28000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:24 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040000) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040000) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) 00:03:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8001, 0x5, 0x80000001, 0x5}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20040041) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) 00:03:24 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000040)) 00:03:24 executing program 3: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x801) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000040)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000005) ioctl$VT_RELDISP(r0, 0x5605) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:24 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040000) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:24 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) (async) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000040)) 00:03:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x541b, &(0x7f0000000000)) 00:03:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8001, 0x5, 0x80000001, 0x5}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20040041) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8001, 0x5, 0x80000001, 0x5}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20040041) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) (async) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000040)) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:24 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) (async) 00:03:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 00:03:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8001, 0x5, 0x80000001, 0x5}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20040041) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8001, 0x5, 0x80000001, 0x5}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20040041) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_PASTESEL(r1, 0x4b4a, 0x0) (async) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x701000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="f015cd94754d1087c9bfda0e95bb6ca11a467544449498df64c51b6021f96bfd84f31b17f13de6d7b9406920171226b8cf3a4a78a4", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf25090000000c00990002000000450000000a000a0093113c53026d000011000700cd514ee042c29a5d886b6768c5000000080037000000000013000a00f3de9bfbaf90ac7571447fc7c60cd300"], 0x5c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000004) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=@gettaction={0x100, 0x32, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf84}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb9}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffc6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x100}, 0x1, 0x0, 0x0, 0xd0}, 0x400c000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x402000, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f00000000c0)) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:24 executing program 2: sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240440c0}, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000140)={0x4, 0x3, 0xffff}) 00:03:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x701000, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="f015cd94754d1087c9bfda0e95bb6ca11a467544449498df64c51b6021f96bfd84f31b17f13de6d7b9406920171226b8cf3a4a78a4", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf25090000000c00990002000000450000000a000a0093113c53026d000011000700cd514ee042c29a5d886b6768c5000000080037000000000013000a00f3de9bfbaf90ac7571447fc7c60cd300"], 0x5c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000004) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=@gettaction={0x100, 0x32, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf84}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb9}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffc6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x100}, 0x1, 0x0, 0x0, 0xd0}, 0x400c000) (async, rerun: 32) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x402000, 0x0) (rerun: 32) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f00000000c0)) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:24 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x44000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) 00:03:24 executing program 2: sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240440c0}, 0x4) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000140)={0x4, 0x3, 0xffff}) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x701000, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="f015cd94754d1087c9bfda0e95bb6ca11a467544449498df64c51b6021f96bfd84f31b17f13de6d7b9406920171226b8cf3a4a78a4", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf25090000000c00990002000000450000000a000a0093113c53026d000011000700cd514ee042c29a5d886b6768c5000000080037000000000013000a00f3de9bfbaf90ac7571447fc7c60cd300"], 0x5c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000004) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=@gettaction={0x100, 0x32, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf84}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb9}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffc6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x100}, 0x1, 0x0, 0x0, 0xd0}, 0x400c000) (rerun: 64) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x402000, 0x0) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f00000000c0)) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 00:03:24 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x44000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x44000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) 00:03:24 executing program 2: sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240440c0}, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000140)={0x4, 0x3, 0xffff}) 00:03:24 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x44000) (async, rerun: 32) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) 00:03:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x12c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x52480000}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44010) 00:03:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/uvcvideo', 0x6000, 0x81) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x8, 0x7, 0xfffd}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) 00:03:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x12c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x52480000}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44010) (rerun: 64) 00:03:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x541b, 0x0) 00:03:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x3c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x8}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c0a7c4a3e47d01a045250d4020"}]}, 0x3c}}, 0xc0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/249}) 00:03:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x180) ioctl$KDENABIO(r1, 0x4b36) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x3ff, 0x6, 0x7f}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x5e, 0x7cbb}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x50) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x40800) 00:03:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x541b, 0x0) 00:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async, rerun: 64) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/uvcvideo', 0x6000, 0x81) (rerun: 64) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x8, 0x7, 0xfffd}) (async, rerun: 64) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) (rerun: 64) 00:03:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x3ff, 0x6, 0x7f}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x5e, 0x7cbb}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x50) (async, rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x40800) (rerun: 32) 00:03:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x12c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x52480000}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44010) 00:03:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x541b, 0x0) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x180) ioctl$KDENABIO(r1, 0x4b36) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/uvcvideo', 0x6000, 0x81) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x8, 0x7, 0xfffd}) (async, rerun: 32) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) (rerun: 32) 00:03:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x3c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x8}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c0a7c4a3e47d01a045250d4020"}]}, 0x3c}}, 0xc0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/249}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x3c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x8}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c0a7c4a3e47d01a045250d4020"}]}, 0x3c}}, 0xc0) (async) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/249}) (async) 00:03:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x3ff, 0x6, 0x7f}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x5e, 0x7cbb}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x50) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x40800) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x3ff, 0x6, 0x7f}) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x5e, 0x7cbb}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x50) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x40800) (async) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x180) ioctl$KDENABIO(r1, 0x4b36) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x4000, 0x160) 00:03:25 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) 00:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x12900, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r2, 0x40) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_open_pts(r1, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x9) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 00:03:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x3c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x8}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c0a7c4a3e47d01a045250d4020"}]}, 0x3c}}, 0xc0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/249}) 00:03:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/160}) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x12500, 0x0) syz_open_pts(r2, 0x60200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffffea99}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xfffffffb}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xe6}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4815) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000180)) 00:03:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x4000, 0x160) 00:03:25 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) (async) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:25 executing program 0: sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x890) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x12900, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r2, 0x40) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_open_pts(r1, 0x2) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x9) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TCSBRK(r1, 0x5409, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x4000, 0x160) 00:03:25 executing program 0: sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x890) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:25 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) (async) 00:03:25 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x4000, 0x160) 00:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x12900, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_pts(r2, 0x40) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) syz_open_pts(r1, 0x2) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x9) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 00:03:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/160}) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x12500, 0x0) syz_open_pts(r2, 0x60200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffffea99}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xfffffffb}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xe6}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4815) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000180)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/160}) (async) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x12500, 0x0) (async) syz_open_pts(r2, 0x60200) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffffea99}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xfffffffb}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xe6}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4815) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000180)) (async) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TCSBRK(r1, 0x5409, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:25 executing program 0: sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x890) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x8) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x470b40, 0xc2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) write$P9_RLERRORu(r1, &(0x7f0000000080)={0x13, 0x7, 0x2, {{0x6, 'wlan1\x00'}, 0xde0}}, 0x13) 00:03:25 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x4000, 0x160) 00:03:25 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@loose}, {@mmap}], [{@hash}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}}) ioctl$TIOCCBRK(r1, 0x5428) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) syz_open_pts(r0, 0x400) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x100000001, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 00:03:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/160}) ioctl$TIOCL_PASTESEL(r0, 0x4b4a, 0x0) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x12500, 0x0) syz_open_pts(r2, 0x60200) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffffea99}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xfffffffb}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xe6}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4815) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000180)) 00:03:25 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xb0300, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004084) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000280)={0x16671443}, 0x4) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) 00:03:25 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@loose}, {@mmap}], [{@hash}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}}) (async) ioctl$TIOCCBRK(r1, 0x5428) 00:03:25 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x4000, 0x160) 00:03:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x8) (async) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x470b40, 0xc2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) write$P9_RLERRORu(r1, &(0x7f0000000080)={0x13, 0x7, 0x2, {{0x6, 'wlan1\x00'}, 0xde0}}, 0x13) 00:03:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x5412, &(0x7f0000000000)) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCCBRK(r1, 0x5428) (async) syz_open_pts(r0, 0x400) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 64) syz_open_dev$vcsa(&(0x7f0000000000), 0x100000001, 0x0) (rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 00:03:25 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xb0300, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004084) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000280)={0x16671443}, 0x4) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) 00:03:25 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@loose}, {@mmap}], [{@hash}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}}) ioctl$TIOCCBRK(r1, 0x5428) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}, {@loose}, {@mmap}], [{@hash}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}}) (async) ioctl$TIOCCBRK(r1, 0x5428) (async) 00:03:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x8) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x470b40, 0xc2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) write$P9_RLERRORu(r1, &(0x7f0000000080)={0x13, 0x7, 0x2, {{0x6, 'wlan1\x00'}, 0xde0}}, 0x13) 00:03:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x160) 00:03:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24cf17287f000000000000000001000008050003003ae1c5b2dc5ab2d540"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x2002c011) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0xf, 0x4, 0x9, &(0x7f0000000280)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbf8, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x44}, 0x1, 0x0, 0x0, 0x48005}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000d3000000090000ee777795002b000900000008003a0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x40) 00:03:25 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xb0300, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c010000150a050000000000000000000a000003580008009a74bc8b0d53a889968446c8531e6f5c5556eeffa5f76c33930672fcd3770cc1943e7d29a89d51ffb8a123a0e19b931466d2a5c9b386ace4b7285a1d282f0458a1afce31304b8a91f49dcdd3d1b01ab224497824c100080013db6c7bdd20b88bf90c8db946aa6f545dabd5cefab54de6a800355a6edfd76de1b4094f2c4299017a24ba19e256ceadc858efa33e30c6c50272b85da13350c8cfb97cb56335647a42a9352b2f3f1f2a88642ad85b86679e7ce226f3b3508a744cd3a85c688097e6296cfd21a341500c0070a8258da49c966b2658d6d5ab91c5d9f1cc131cd3cd3328b22c6fe8a642887cf86337ffeeea53ea75ab58f1f5938f377b4c35a1fa149547743d950a2b53495be2019a288f3c234d98289e1d0000000900020073797a3000000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004084) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000280)={0x16671443}, 0x4) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) syz_open_pts(r0, 0x400) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x100000001, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCCBRK(r1, 0x5428) (async) syz_open_pts(r0, 0x400) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x100000001, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) (async) 00:03:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b62, &(0x7f0000000000)) 00:03:25 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x10040, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\"', @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf253d0000000c009900ff0700003c00000008005d000100000008005d000100000008005d000100000008005d0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/caif_serial', 0x1, 0xa) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xea}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x11) 00:03:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x160) 00:03:25 executing program 4: sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdb9f256a0000000c00990069f2e9dd3aa43d307a40ffff720000000300d20003c404000000d2000500d20009000006000000000f000000"], 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x20040000) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000b1b01c89f89155d52dd86ad3d9f4ae28359acae4130d1a95c27d807e7e4e847c64c502b3947e6f3011170be34d9e8d943ed353b8c87db18660e0dccaa712d1a8a0b2d17a9eaaf6555a0cb98be4063273a9f3b399d69e272984fb724a27eb6f29722de17abc0293f8fc0aaaf5011782ee4d78c018dac89c5cc1d1b8c24f6388a030f58dbcf0c61ce48f3660fb2b0dc2d5284d0c937302325a647c273600abef56f3486d077472d1581cdd96992ed3ff52f281d9e6a4c3c9452eb89e2fc0b67e093cac5b98bd4dcc8ac81d4897959442647f4fc04f9ddbf9ea0da0d2c2e68b63615936dee2a1cb03bcb6e5c5ea3329a5fb", @ANYRES16=r0, @ANYBLOB="08002dbd7000fedbdf25010000000000000007410000001400180000000569623a6e6574706369300000"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x2004c050) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x200, 0xffc0000, {{0x42, 0x4, 0x3, 0x4, 0x108, 0x65, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@rr={0x7, 0xf, 0xc4, [@remote, @local, @empty]}, @timestamp_prespec={0x44, 0x44, 0x3d, 0x3, 0x8, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0xfffffe00}, {@empty, 0x6}, {@multicast2, 0x4e}, {@local, 0x1ff}, {@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64010102, 0x3}]}, @generic={0x7, 0x12, "a33b17a139959676d1ca225c0ed03ea3"}, @timestamp_addr={0x44, 0x24, 0x1a, 0x1, 0x0, [{@loopback, 0x80000000}, {@local, 0xfffffe01}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x6}]}, @timestamp={0x44, 0x24, 0xfa, 0x0, 0x7, [0x800, 0x4, 0x1ff, 0x1d, 0x7fff, 0xa4, 0x0, 0x3]}, @ssrr={0x89, 0x13, 0xd2, [@multicast2, @multicast1, @private=0xa010100, @loopback]}, @lsrr={0x83, 0xb, 0x4, [@multicast1, @remote]}, @ssrr={0x89, 0x7, 0x22, [@multicast2]}, @ssrr={0x89, 0x1f, 0x79, [@multicast2, @broadcast, @loopback, @loopback, @rand_addr=0x64010102, @empty, @private=0xa010100]}]}}}}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2024a}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080329bd7000e0dbdf25080000001e25e079a400f5520663", @ANYRES32=r2, @ANYBLOB="050033000100000008003c00000100000a000900aaaaaaaaaa430000"], 0x38}, 0x1, 0x0, 0x0, 0xc001}, 0x0) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) 00:03:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b46, &(0x7f0000000000)) 00:03:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x160) 00:03:25 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x10040, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\"', @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf253d0000000c009900ff0700003c00000008005d000100000008005d000100000008005d000100000008005d0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/caif_serial', 0x1, 0xa) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xea}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x11) 00:03:25 executing program 4: sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdb9f256a0000000c00990069f2e9dd3aa43d307a40ffff720000000300d20003c404000000d2000500d20009000006000000000f000000"], 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x20040000) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000b1b01c89f89155d52dd86ad3d9f4ae28359acae4130d1a95c27d807e7e4e847c64c502b3947e6f3011170be34d9e8d943ed353b8c87db18660e0dccaa712d1a8a0b2d17a9eaaf6555a0cb98be4063273a9f3b399d69e272984fb724a27eb6f29722de17abc0293f8fc0aaaf5011782ee4d78c018dac89c5cc1d1b8c24f6388a030f58dbcf0c61ce48f3660fb2b0dc2d5284d0c937302325a647c273600abef56f3486d077472d1581cdd96992ed3ff52f281d9e6a4c3c9452eb89e2fc0b67e093cac5b98bd4dcc8ac81d4897959442647f4fc04f9ddbf9ea0da0d2c2e68b63615936dee2a1cb03bcb6e5c5ea3329a5fb", @ANYRES16=r0, @ANYBLOB="08002dbd7000fedbdf25010000000000000007410000001400180000000569623a6e6574706369300000"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x2004c050) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x200, 0xffc0000, {{0x42, 0x4, 0x3, 0x4, 0x108, 0x65, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@rr={0x7, 0xf, 0xc4, [@remote, @local, @empty]}, @timestamp_prespec={0x44, 0x44, 0x3d, 0x3, 0x8, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0xfffffe00}, {@empty, 0x6}, {@multicast2, 0x4e}, {@local, 0x1ff}, {@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64010102, 0x3}]}, @generic={0x7, 0x12, "a33b17a139959676d1ca225c0ed03ea3"}, @timestamp_addr={0x44, 0x24, 0x1a, 0x1, 0x0, [{@loopback, 0x80000000}, {@local, 0xfffffe01}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x6}]}, @timestamp={0x44, 0x24, 0xfa, 0x0, 0x7, [0x800, 0x4, 0x1ff, 0x1d, 0x7fff, 0xa4, 0x0, 0x3]}, @ssrr={0x89, 0x13, 0xd2, [@multicast2, @multicast1, @private=0xa010100, @loopback]}, @lsrr={0x83, 0xb, 0x4, [@multicast1, @remote]}, @ssrr={0x89, 0x7, 0x22, [@multicast2]}, @ssrr={0x89, 0x1f, 0x79, [@multicast2, @broadcast, @loopback, @loopback, @rand_addr=0x64010102, @empty, @private=0xa010100]}]}}}}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2024a}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080329bd7000e0dbdf25080000001e25e079a400f5520663", @ANYRES32=r2, @ANYBLOB="050033000100000008003c00000100000a000900aaaaaaaaaa430000"], 0x38}, 0x1, 0x0, 0x0, 0xc001}, 0x0) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdb9f256a0000000c00990069f2e9dd3aa43d307a40ffff720000000300d20003c404000000d2000500d20009000006000000000f000000"], 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x20040000) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000b1b01c89f89155d52dd86ad3d9f4ae28359acae4130d1a95c27d807e7e4e847c64c502b3947e6f3011170be34d9e8d943ed353b8c87db18660e0dccaa712d1a8a0b2d17a9eaaf6555a0cb98be4063273a9f3b399d69e272984fb724a27eb6f29722de17abc0293f8fc0aaaf5011782ee4d78c018dac89c5cc1d1b8c24f6388a030f58dbcf0c61ce48f3660fb2b0dc2d5284d0c937302325a647c273600abef56f3486d077472d1581cdd96992ed3ff52f281d9e6a4c3c9452eb89e2fc0b67e093cac5b98bd4dcc8ac81d4897959442647f4fc04f9ddbf9ea0da0d2c2e68b63615936dee2a1cb03bcb6e5c5ea3329a5fb", @ANYRES16=r0, @ANYBLOB="08002dbd7000fedbdf25010000000000000007410000001400180000000569623a6e6574706369300000"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x2004c050) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x200, 0xffc0000, {{0x42, 0x4, 0x3, 0x4, 0x108, 0x65, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@rr={0x7, 0xf, 0xc4, [@remote, @local, @empty]}, @timestamp_prespec={0x44, 0x44, 0x3d, 0x3, 0x8, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0xfffffe00}, {@empty, 0x6}, {@multicast2, 0x4e}, {@local, 0x1ff}, {@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64010102, 0x3}]}, @generic={0x7, 0x12, "a33b17a139959676d1ca225c0ed03ea3"}, @timestamp_addr={0x44, 0x24, 0x1a, 0x1, 0x0, [{@loopback, 0x80000000}, {@local, 0xfffffe01}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x6}]}, @timestamp={0x44, 0x24, 0xfa, 0x0, 0x7, [0x800, 0x4, 0x1ff, 0x1d, 0x7fff, 0xa4, 0x0, 0x3]}, @ssrr={0x89, 0x13, 0xd2, [@multicast2, @multicast1, @private=0xa010100, @loopback]}, @lsrr={0x83, 0xb, 0x4, [@multicast1, @remote]}, @ssrr={0x89, 0x7, 0x22, [@multicast2]}, @ssrr={0x89, 0x1f, 0x79, [@multicast2, @broadcast, @loopback, @loopback, @rand_addr=0x64010102, @empty, @private=0xa010100]}]}}}}}) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2024a}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080329bd7000e0dbdf25080000001e25e079a400f5520663", @ANYRES32=r2, @ANYBLOB="050033000100000008003c00000100000a000900aaaaaaaaaa430000"], 0x38}, 0x1, 0x0, 0x0, 0xc001}, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) (async) 00:03:25 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x4000, 0x0) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040)) 00:03:25 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x10040, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\"', @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf253d0000000c009900ff0700003c00000008005d000100000008005d000100000008005d000100000008005d0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/caif_serial', 0x1, 0xa) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xea}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x11) 00:03:25 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0xebffffff, 0x0) 00:03:25 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x200, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x5, 0xfffffff8, 0x9, 0x1000, 0x7ff}) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040)) 00:03:25 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0xebffffff, 0x0) 00:03:25 executing program 4: sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fcdb9f256a0000000c00990069f2e9dd3aa43d307a40ffff720000000300d20003c404000000d2000500d20009000006000000000f000000"], 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x20040000) (async) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000b1b01c89f89155d52dd86ad3d9f4ae28359acae4130d1a95c27d807e7e4e847c64c502b3947e6f3011170be34d9e8d943ed353b8c87db18660e0dccaa712d1a8a0b2d17a9eaaf6555a0cb98be4063273a9f3b399d69e272984fb724a27eb6f29722de17abc0293f8fc0aaaf5011782ee4d78c018dac89c5cc1d1b8c24f6388a030f58dbcf0c61ce48f3660fb2b0dc2d5284d0c937302325a647c273600abef56f3486d077472d1581cdd96992ed3ff52f281d9e6a4c3c9452eb89e2fc0b67e093cac5b98bd4dcc8ac81d4897959442647f4fc04f9ddbf9ea0da0d2c2e68b63615936dee2a1cb03bcb6e5c5ea3329a5fb", @ANYRES16=r0, @ANYBLOB="08002dbd7000fedbdf25010000000000000007410000001400180000000569623a6e6574706369300000"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x2004c050) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x200, 0xffc0000, {{0x42, 0x4, 0x3, 0x4, 0x108, 0x65, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@rr={0x7, 0xf, 0xc4, [@remote, @local, @empty]}, @timestamp_prespec={0x44, 0x44, 0x3d, 0x3, 0x8, [{@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0xfffffe00}, {@empty, 0x6}, {@multicast2, 0x4e}, {@local, 0x1ff}, {@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64010102, 0x3}]}, @generic={0x7, 0x12, "a33b17a139959676d1ca225c0ed03ea3"}, @timestamp_addr={0x44, 0x24, 0x1a, 0x1, 0x0, [{@loopback, 0x80000000}, {@local, 0xfffffe01}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x6}]}, @timestamp={0x44, 0x24, 0xfa, 0x0, 0x7, [0x800, 0x4, 0x1ff, 0x1d, 0x7fff, 0xa4, 0x0, 0x3]}, @ssrr={0x89, 0x13, 0xd2, [@multicast2, @multicast1, @private=0xa010100, @loopback]}, @lsrr={0x83, 0xb, 0x4, [@multicast1, @remote]}, @ssrr={0x89, 0x7, 0x22, [@multicast2]}, @ssrr={0x89, 0x1f, 0x79, [@multicast2, @broadcast, @loopback, @loopback, @rand_addr=0x64010102, @empty, @private=0xa010100]}]}}}}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2024a}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080329bd7000e0dbdf25080000001e25e079a400f5520663", @ANYRES32=r2, @ANYBLOB="050033000100000008003c00000100000a000900aaaaaaaaaa430000"], 0x38}, 0x1, 0x0, 0x0, 0xc001}, 0x0) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) 00:03:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x80, 0x10, 0xa, 0x4, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x67, 0x0, 0x80, 0x14, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@end]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x43}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0xc885) syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x5d9e81) 00:03:25 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x200, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) (async) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x5, 0xfffffff8, 0x9, 0x1000, 0x7ff}) 00:03:25 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0xebffffff, 0x0) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040)) 00:03:25 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x200, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x5, 0xfffffff8, 0x9, 0x1000, 0x7ff}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x200, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) (async) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x5, 0xfffffff8, 0x9, 0x1000, 0x7ff}) (async) 00:03:25 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000040)) 00:03:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x80, 0x10, 0xa, 0x4, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x67, 0x0, 0x80, 0x14, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@end]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x43}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0xc885) syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x5d9e81) 00:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) 00:03:25 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/cpufreq', 0x4000, 0x30) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00ff0f000000fbdb02250a00000008000300", @ANYRES32=r0, @ANYBLOB="08003100264bf37e8d755ef9bb8cfb19b90800000005003700010000"], 0x38}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x20006) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xfffffffffffffec6, &(0x7f0000000140)={&(0x7f00000003c0)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY]}, 0x58}, 0x1, 0x0, 0x0, 0x44041}, 0x20008004) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0xbebb, 0x40000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8390cc519140ce32}, 0x4080) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xac, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48080}, 0x8010) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r9, 0x4b31, &(0x7f0000000000)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48885) 00:03:25 executing program 1: openat$sysfs(0xffffffffffffff9c, 0x0, 0xebffffff, 0x0) 00:03:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x80, 0x10, 0xa, 0x4, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x67, 0x0, 0x80, 0x14, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@end]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x43}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0xc885) syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x5d9e81) 00:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) 00:03:25 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 00:03:25 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000040)) 00:03:25 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/cpufreq', 0x4000, 0x30) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00ff0f000000fbdb02250a00000008000300", @ANYRES32=r0, @ANYBLOB="08003100264bf37e8d755ef9bb8cfb19b90800000005003700010000"], 0x38}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x20006) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xfffffffffffffec6, &(0x7f0000000140)={&(0x7f00000003c0)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY]}, 0x58}, 0x1, 0x0, 0x0, 0x44041}, 0x20008004) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0xbebb, 0x40000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8390cc519140ce32}, 0x4080) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xac, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48080}, 0x8010) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r9, 0x4b31, &(0x7f0000000000)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48885) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/cpufreq', 0x4000, 0x30) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00ff0f000000fbdb02250a00000008000300", @ANYRES32=r0, @ANYBLOB="08003100264bf37e8d755ef9bb8cfb19b90800000005003700010000"], 0x38}, 0x1, 0x0, 0x0, 0x80000}, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x20006) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xfffffffffffffec6, &(0x7f0000000140)={&(0x7f00000003c0)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY]}, 0x58}, 0x1, 0x0, 0x0, 0x44041}, 0x20008004) (async) syz_open_dev$vcsa(&(0x7f0000000100), 0xbebb, 0x40000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8390cc519140ce32}, 0x4080) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xac, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48080}, 0x8010) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r9, 0x4b31, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48885) (async) 00:03:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x80, 0x10, 0xa, 0x4, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x67, 0x0, 0x80, 0x14, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@end]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x43}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0xc885) 00:03:25 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) 00:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) 00:03:25 executing program 1: openat$sysfs(0xffffffffffffff9c, 0x0, 0xebffffff, 0x0) 00:03:25 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000040)) 00:03:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x80, 0x10, 0xa, 0x4, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x67, 0x0, 0x80, 0x14, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@end]}}}}}) 00:03:25 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/cpufreq', 0x4000, 0x30) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00ff0f000000fbdb02250a00000008000300", @ANYRES32=r0, @ANYBLOB="08003100264bf37e8d755ef9bb8cfb19b90800000005003700010000"], 0x38}, 0x1, 0x0, 0x0, 0x80000}, 0x0) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x20006) (rerun: 64) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xfffffffffffffec6, &(0x7f0000000140)={&(0x7f00000003c0)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY]}, 0x58}, 0x1, 0x0, 0x0, 0x44041}, 0x20008004) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0xbebb, 0x40000) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8390cc519140ce32}, 0x4080) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xac, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48080}, 0x8010) (async, rerun: 32) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDGKBTYPE(r9, 0x4b31, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48885) 00:03:25 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 00:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:25 executing program 1: openat$sysfs(0xffffffffffffff9c, 0x0, 0xebffffff, 0x0) 00:03:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) 00:03:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000140)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb_af9035', 0x481, 0x85) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/146) ioctl$KDENABIO(r0, 0x4b36) 00:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:25 executing program 5: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x6b, 0x3, 0x7}, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0x8, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x84850) 00:03:25 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1cd4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c4}, 0x4004005) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000140)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb_af9035', 0x481, 0x85) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/146) ioctl$KDENABIO(r0, 0x4b36) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000140)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb_af9035', 0x481, 0x85) (async) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/146) (async) ioctl$KDENABIO(r0, 0x4b36) (async) 00:03:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:03:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) 00:03:25 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000140)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb_af9035', 0x481, 0x85) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/146) ioctl$KDENABIO(r0, 0x4b36) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000140)) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb_af9035', 0x481, 0x85) (async) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/146) (async) ioctl$KDENABIO(r0, 0x4b36) (async) 00:03:25 executing program 5: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x6b, 0x3, 0x7}, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0x8, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x84850) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) (async) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1cd4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c4}, 0x4004005) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/202) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1cd4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c4}, 0x4004005) (async, rerun: 32) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:25 executing program 5: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9) (async, rerun: 32) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x6b, 0x3, 0x7}, 0x10) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0x8, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x84850) 00:03:25 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/202) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:25 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/loop', 0xb404bf95e249d1e6, 0x102) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/usbip_vudc', 0x101000, 0x26) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4c811) ioctl$KDGKBTYPE(r2, 0x4b3b, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/libceph', 0x10102, 0x28) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000240)) 00:03:25 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 00:03:25 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/loop', 0xb404bf95e249d1e6, 0x102) (async, rerun: 64) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/usbip_vudc', 0x101000, 0x26) (rerun: 64) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4c811) ioctl$KDGKBTYPE(r2, 0x4b3b, &(0x7f0000000000)) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/libceph', 0x10102, 0x28) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000240)) 00:03:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:25 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) 00:03:25 executing program 5: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x8154}, 0x4000) r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xffffffff, 0x8000) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1a00}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x20, 0xfff, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b7206701a85ea3c1dc70d70c53"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/202) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:26 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)) 00:03:26 executing program 5: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x8154}, 0x4000) r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xffffffff, 0x8000) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1a00}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x20, 0xfff, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b7206701a85ea3c1dc70d70c53"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x8154}, 0x4000) (async) syz_open_dev$vcsn(&(0x7f00000001c0), 0xffffffff, 0x8000) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1a00}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x20, 0xfff, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b7206701a85ea3c1dc70d70c53"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) 00:03:26 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/loop', 0xb404bf95e249d1e6, 0x102) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/usbip_vudc', 0x101000, 0x26) (async) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4c811) (async) ioctl$KDGKBTYPE(r2, 0x4b3b, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/libceph', 0x10102, 0x28) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000240)) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000040)) 00:03:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) 00:03:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:26 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)) 00:03:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000040)) 00:03:26 executing program 3: socketpair(0xa, 0x1, 0x217, &(0x7f0000000180)) 00:03:26 executing program 5: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x65}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x8154}, 0x4000) (async) r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xffffffff, 0x8000) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1a00}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x20, 0xfff, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b7206701a85ea3c1dc70d70c53"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000040)) 00:03:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) 00:03:26 executing program 3: socketpair(0x0, 0x1, 0x217, &(0x7f0000000180)) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000040)) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000040)) 00:03:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) (async) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x8, 0x20, 0x5da37bd1, 0xd4, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x68, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@noop, @cipso={0x86, 0x10, 0x3, [{0x7, 0x2}, {0x6, 0x8, "275dbc1f6115"}]}, @rr={0x7, 0x1b, 0xa7, [@multicast1, @empty, @multicast2, @remote, @multicast1, @multicast1]}, @generic={0x89, 0x8, "bbb6b0064e37"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="a0010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf25020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="3c0001801400020076657468305f746f5f5b6174616476001400020077673100000000000000000000000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="5c0001801400020076657468315f746f5f626f6e640000001400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300020000003c00018014000200766972745f7769666930000000000000080003000000000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f766972745f77696669004000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="140002006970365f76746930000000000000000018000180140002006e657464657673696d300000000000001800018014000200766c616e310000000000000000000000280001801400020063616966300000000000000000000000080003000200000008000300040000000c0001800800030002000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000100)=0x401) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_RELDISP(r7, 0x5605) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f0000000140)=""/118) 00:03:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0xd}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x210000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x50) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) r3 = syz_open_pts(r1, 0x84141) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rtl8192de', 0x10200, 0x80) 00:03:26 executing program 3: socketpair(0x0, 0x1, 0x217, &(0x7f0000000180)) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x8, 0x20, 0x5da37bd1, 0xd4, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x68, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@noop, @cipso={0x86, 0x10, 0x3, [{0x7, 0x2}, {0x6, 0x8, "275dbc1f6115"}]}, @rr={0x7, 0x1b, 0xa7, [@multicast1, @empty, @multicast2, @remote, @multicast1, @multicast1]}, @generic={0x89, 0x8, "bbb6b0064e37"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="a0010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf25020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="3c0001801400020076657468305f746f5f5b6174616476001400020077673100000000000000000000000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="5c0001801400020076657468315f746f5f626f6e640000001400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300020000003c00018014000200766972745f7769666930000000000000080003000000000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f766972745f77696669004000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="140002006970365f76746930000000000000000018000180140002006e657464657673696d300000000000001800018014000200766c616e310000000000000000000000280001801400020063616966300000000000000000000000080003000200000008000300040000000c0001800800030002000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000100)=0x401) (async) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_RELDISP(r7, 0x5605) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f0000000140)=""/118) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000040)=""/184) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) syz_open_dev$tty1(0xc, 0x4, 0x2) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000040)=""/184) 00:03:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0xd}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x210000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x50) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) (async) r3 = syz_open_pts(r1, 0x84141) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rtl8192de', 0x10200, 0x80) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000040)) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000040)=""/184) 00:03:26 executing program 3: socketpair(0x0, 0x1, 0x217, &(0x7f0000000180)) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x8, 0x20, 0x5da37bd1, 0xd4, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x68, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@noop, @cipso={0x86, 0x10, 0x3, [{0x7, 0x2}, {0x6, 0x8, "275dbc1f6115"}]}, @rr={0x7, 0x1b, 0xa7, [@multicast1, @empty, @multicast2, @remote, @multicast1, @multicast1]}, @generic={0x89, 0x8, "bbb6b0064e37"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="a0010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf25020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="3c0001801400020076657468305f746f5f5b6174616476001400020077673100000000000000000000000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="5c0001801400020076657468315f746f5f626f6e640000001400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300020000003c00018014000200766972745f7769666930000000000000080003000000000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f766972745f77696669004000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="140002006970365f76746930000000000000000018000180140002006e657464657673696d300000000000001800018014000200766c616e310000000000000000000000280001801400020063616966300000000000000000000000080003000200000008000300040000000c0001800800030002000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000100)=0x401) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_RELDISP(r7, 0x5605) (async) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, 0x0) (async) ioctl$GIO_SCRNMAP(r9, 0x4b40, &(0x7f0000000140)=""/118) 00:03:26 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0xd}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x10) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x210000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x50) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) (async) r3 = syz_open_pts(r1, 0x84141) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rtl8192de', 0x10200, 0x80) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 00:03:26 executing program 5: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x8080) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) syz_open_dev$tty1(0xc, 0x4, 0x2) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x400) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = syz_open_pts(r0, 0x200040) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008015}, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000200)) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) 00:03:26 executing program 3: socketpair(0xa, 0x0, 0x217, &(0x7f0000000180)) 00:03:26 executing program 5: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x8080) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x8080) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async, rerun: 64) r3 = syz_open_pts(r0, 0x200040) (rerun: 64) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000001c0)) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008015}, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000200)) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x400) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) 00:03:26 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f0000000180)) 00:03:26 executing program 5: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x8080) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = syz_open_pts(r0, 0x200040) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008015}, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000200)) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) (async) syz_open_pts(r0, 0x200040) (async) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000001c0)) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008015}, 0x0) (async) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000200)) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) (async) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000080), 0x3, 0x400) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:26 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x800, 0x20) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:26 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x800, 0x20) 00:03:26 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f0000000180)) 00:03:26 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x401, 0x92000) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1000000000000) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:03:26 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x800, 0x20) 00:03:26 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x401, 0x92000) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1000000000000) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 00:03:26 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x401, 0x92000) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1000000000000) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x401, 0x92000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x1000000000000) (async) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:03:26 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f0000000180)) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async, rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async, rerun: 64) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async, rerun: 64) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000000c0)) (async, rerun: 64) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b31, &(0x7f0000000000)) ioctl$TIOCCBRK(r0, 0x5428) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:26 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x198a, 0x64}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) socketpair(0x2c, 0x800, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x194, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 00:03:26 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x198a, 0x64}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) socketpair(0x2c, 0x800, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x194, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r3, 0x4b31, &(0x7f0000000000)) (async) ioctl$TIOCCBRK(r0, 0x5428) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) 00:03:26 executing program 3: socketpair(0xa, 0x0, 0x217, 0x0) 00:03:26 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x198a, 0x64}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) socketpair(0x2c, 0x800, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x194, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x198a, 0x64}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) socketpair(0x2c, 0x800, 0x9, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x194, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r3, 0x4b31, &(0x7f0000000000)) (async) ioctl$TIOCCBRK(r0, 0x5428) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:03:26 executing program 3: socketpair(0xa, 0x0, 0x217, 0x0) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) (async) 00:03:26 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbip_vudc', 0x4a4842, 0x214) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:03:26 executing program 3: socketpair(0xa, 0x0, 0x217, 0x0) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:26 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) 00:03:26 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:03:26 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbip_vudc', 0x4a4842, 0x214) 00:03:26 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x4, 0x902) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000340)=""/177) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2f4, 0x1, 0x4, 0x80}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20000000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0)) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000080)) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000280)={0x6, 0x1, 0xc8}) ioctl$VT_ACTIVATE(r4, 0x5606, 0x431ee9fa) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:26 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbip_vudc', 0x4a4842, 0x214) 00:03:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x2, &(0x7f0000000000)) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x4, 0x902) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000340)=""/177) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2f4, 0x1, 0x4, 0x80}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20000000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0)) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000080)) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000280)={0x6, 0x1, 0xc8}) ioctl$VT_ACTIVATE(r4, 0x5606, 0x431ee9fa) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$vcsa(&(0x7f0000000240), 0x4, 0x902) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000340)=""/177) (async) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2f4, 0x1, 0x4, 0x80}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20000000) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0)) (async) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000080)) (async) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000280)={0x6, 0x1, 0xc8}) (async) ioctl$VT_ACTIVATE(r4, 0x5606, 0x431ee9fa) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) 00:03:26 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x9, 0x80000000, 0x5f}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x88004}, 0x8840) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x404102, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b5835e0db60389b02531b71e0da5c23ce2e330c0904a9d6b8e47a116d5d0dcced719b13d4fa6308c38892e61e740055009829fdca81c3c", @ANYRES16=r3, @ANYBLOB="000225bd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c00580074000000000000000c00580003000000000000000c00580002000000000000000c00580022000000000000000c0058005f00000000000000"], 0x58}}, 0x880) 00:03:26 executing program 3: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x5d9e81) socketpair(0x2a, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0x8}, {0xb, 0xe}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) 00:03:26 executing program 2: io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) 00:03:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = syz_open_pts(r0, 0x200) ioctl$TCSBRK(r2, 0x5409, 0x7) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "10739c35e412eda094c7010f9e"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x3, 0x5, 0x3, 0x8, 0x2}) 00:03:26 executing program 2: io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000240), 0x4, 0x902) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000340)=""/177) (async) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x2f4, 0x1, 0x4, 0x80}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20000000) (async) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0)) (async) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000080)) (async, rerun: 64) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000280)={0x6, 0x1, 0xc8}) (async, rerun: 64) ioctl$VT_ACTIVATE(r4, 0x5606, 0x431ee9fa) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:26 executing program 3: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x5d9e81) socketpair(0x2a, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0x8}, {0xb, 0xe}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) 00:03:26 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x9, 0x80000000, 0x5f}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x88004}, 0x8840) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x404102, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b5835e0db60389b02531b71e0da5c23ce2e330c0904a9d6b8e47a116d5d0dcced719b13d4fa6308c38892e61e740055009829fdca81c3c", @ANYRES16=r3, @ANYBLOB="000225bd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c00580074000000000000000c00580003000000000000000c00580002000000000000000c00580022000000000000000c0058005f00000000000000"], 0x58}}, 0x880) 00:03:26 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:26 executing program 2: io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = syz_open_pts(r0, 0x200) ioctl$TCSBRK(r2, 0x5409, 0x7) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "10739c35e412eda094c7010f9e"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x3, 0x5, 0x3, 0x8, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) syz_open_pts(r0, 0x200) (async) ioctl$TCSBRK(r2, 0x5409, 0x7) (async) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "10739c35e412eda094c7010f9e"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) (async) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x3, 0x5, 0x3, 0x8, 0x2}) (async) 00:03:26 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x9, 0x80000000, 0x5f}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x88004}, 0x8840) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x404102, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b5835e0db60389b02531b71e0da5c23ce2e330c0904a9d6b8e47a116d5d0dcced719b13d4fa6308c38892e61e740055009829fdca81c3c", @ANYRES16=r3, @ANYBLOB="000225bd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c00580074000000000000000c00580003000000000000000c00580002000000000000000c00580022000000000000000c0058005f00000000000000"], 0x58}}, 0x880) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x9, 0x80000000, 0x5f}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x88004}, 0x8840) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x404102, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b5835e0db60389b02531b71e0da5c23ce2e330c0904a9d6b8e47a116d5d0dcced719b13d4fa6308c38892e61e740055009829fdca81c3c", @ANYRES16=r3, @ANYBLOB="000225bd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c00580074000000000000000c00580003000000000000000c00580002000000000000000c00580022000000000000000c0058005f00000000000000"], 0x58}}, 0x880) (async) 00:03:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x80000) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x401, 0x8, 0x7, 0x769, 0x8000}) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:26 executing program 3: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x5d9e81) socketpair(0x2a, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0x8}, {0xb, 0xe}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) 00:03:26 executing program 2: io_uring_setup(0x27b0, 0x0) 00:03:26 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = syz_open_pts(r0, 0x200) ioctl$TCSBRK(r2, 0x5409, 0x7) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "10739c35e412eda094c7010f9e"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x3, 0x5, 0x3, 0x8, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) syz_open_pts(r0, 0x200) (async) ioctl$TCSBRK(r2, 0x5409, 0x7) (async) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "10739c35e412eda094c7010f9e"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) (async) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x3, 0x5, 0x3, 0x8, 0x2}) (async) 00:03:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x80000) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) (async) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x401, 0x8, 0x7, 0x769, 0x8000}) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:27 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/gspca_topro', 0x121940, 0x110) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x700, 0x70bd2a, 0x9, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x18d5) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:03:27 executing program 3: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x5d9e81) socketpair(0x2a, 0x2, 0x2, &(0x7f0000000000)) 00:03:27 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x80000) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000080)=0x7b80) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x2) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) 00:03:27 executing program 2: io_uring_setup(0x27b0, 0x0) 00:03:27 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:27 executing program 3: socketpair(0x2a, 0x2, 0x2, &(0x7f0000000000)) 00:03:27 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x53c2, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:27 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/gspca_topro', 0x121940, 0x110) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x700, 0x70bd2a, 0x9, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x18d5) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:03:27 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x80000) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000080)=0x7b80) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x2) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x80000) (async) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000080)=0x7b80) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x2) (async) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) (async) 00:03:27 executing program 2: io_uring_setup(0x27b0, 0x0) 00:03:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x80000) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x401, 0x8, 0x7, 0x769, 0x8000}) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x80000) (async) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) (async) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x401, 0x8, 0x7, 0x769, 0x8000}) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:27 executing program 3: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 00:03:27 executing program 1: r0 = io_uring_setup(0x27b0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:27 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/gspca_topro', 0x121940, 0x110) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x700, 0x70bd2a, 0x9, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x18d5) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 00:03:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x40) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x9, 0x3f, 0x883, 0x6, 0x3, "8a4f89713678a66f8e93e43bca583d6238c6a8", 0x0, 0x1}) 00:03:27 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x80000) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000080)=0x7b80) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x2) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) 00:03:27 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x0, 0x27d}) 00:03:27 executing program 3: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 00:03:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) r1 = syz_open_pts(r0, 0x40) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x9, 0x3f, 0x883, 0x6, 0x3, "8a4f89713678a66f8e93e43bca583d6238c6a8", 0x0, 0x1}) 00:03:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x101, 0x4000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x8000, 0x8, 0x1, 0x800, 0x3f, "48f5915fc70e77c03e299505ab05a78b36d1e0", 0x0, 0x2}) 00:03:27 executing program 1: r0 = io_uring_setup(0x27b0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:27 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x27d}) 00:03:27 executing program 3: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 00:03:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x101, 0x4000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x8000, 0x8, 0x1, 0x800, 0x3f, "48f5915fc70e77c03e299505ab05a78b36d1e0", 0x0, 0x2}) 00:03:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x40) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x9, 0x3f, 0x883, 0x6, 0x3, "8a4f89713678a66f8e93e43bca583d6238c6a8", 0x0, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x40) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x9, 0x3f, 0x883, 0x6, 0x3, "8a4f89713678a66f8e93e43bca583d6238c6a8", 0x0, 0x1}) (async) 00:03:27 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x720, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xc}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x73}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008081}, 0x44444) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0xe, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40001) 00:03:27 executing program 1: r0 = io_uring_setup(0x27b0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:27 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x27d}) 00:03:27 executing program 3: socketpair(0x2a, 0x0, 0x2, &(0x7f0000000000)) 00:03:27 executing program 4: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20080811}, 0x24008801) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:27 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x27d}) 00:03:27 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x720, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xc}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x73}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008081}, 0x44444) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0xe, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40001) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x720, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xc}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x73}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008081}, 0x44444) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) (async) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0xe, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40001) (async) 00:03:27 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x101, 0x4000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) (rerun: 32) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x8000, 0x8, 0x1, 0x800, 0x3f, "48f5915fc70e77c03e299505ab05a78b36d1e0", 0x0, 0x2}) 00:03:27 executing program 3: socketpair(0x2a, 0x0, 0x2, &(0x7f0000000000)) 00:03:27 executing program 4: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20080811}, 0x24008801) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20080811}, 0x24008801) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:27 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x720, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xc}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x73}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008081}, 0x44444) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0xe, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40001) 00:03:27 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x27d}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:27 executing program 3: socketpair(0x2a, 0x0, 0x2, &(0x7f0000000000)) 00:03:27 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) 00:03:27 executing program 4: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20080811}, 0x24008801) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20080811}, 0x24008801) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:27 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc084) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/block/sda', 0x2000, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "b81dfb46c3b3bda69071fcd1e4a42b8a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24001) 00:03:27 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:27 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 1) 00:03:27 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc084) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/block/sda', 0x2000, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "b81dfb46c3b3bda69071fcd1e4a42b8a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24001) 00:03:27 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x37, 0x2, {0x0, 0x32a, 0x7, 0x0, 0x5, ':\\^!@'}}, 0x23) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff8186, 0x2f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x88}}, 0x4000000) 00:03:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x3b, 0x0, 0x200, 0xff, 0x1, "691343e9e0a9dd2d04ff395428e968e779e22e", 0x101, 0x80000001}) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:27 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:27 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xc084) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/block/sda', 0x2000, 0x80) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "b81dfb46c3b3bda69071fcd1e4a42b8a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24001) 00:03:27 executing program 3: socketpair(0x2a, 0x2, 0x0, 0x0) 00:03:27 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 494.204659][ T9674] FAULT_INJECTION: forcing a failure. [ 494.204659][ T9674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.217780][ T9674] CPU: 1 PID: 9674 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 494.217811][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:03:27 executing program 3: socketpair(0x2a, 0x2, 0x0, 0x0) 00:03:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8927, &(0x7f0000000000)={'wg1\x00', 0x0}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002c0000012cbd7000fcdbdf7bb581d24d480abb3a3f2520000000", @ANYRES32=r1, @ANYBLOB="0400f3ff0f00f1fff3ff08000b000100666c6f77657200001c000200050050001f00000008003b006401010206002c0000000000060005000305000008000b0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) socketpair(0x25, 0x4, 0x1000, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$nfc_llcp(r3, 0x118, 0x0, &(0x7f00000000c0)=""/10, 0xa) 00:03:27 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 2) 00:03:27 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 494.217824][ T9674] Call Trace: [ 494.217831][ T9674] [ 494.217837][ T9674] dump_stack_lvl+0xd6/0x122 [ 494.217933][ T9674] dump_stack+0x11/0x1b 00:03:27 executing program 3: socketpair(0x2a, 0x2, 0x0, 0x0) 00:03:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8927, &(0x7f0000000000)={'wg1\x00', 0x0}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002c0000012cbd7000fcdbdf7bb581d24d480abb3a3f2520000000", @ANYRES32=r1, @ANYBLOB="0400f3ff0f00f1fff3ff08000b000100666c6f77657200001c000200050050001f00000008003b006401010206002c0000000000060005000305000008000b0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) socketpair(0x25, 0x4, 0x1000, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$nfc_llcp(r3, 0x118, 0x0, &(0x7f00000000c0)=""/10, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8927, &(0x7f0000000000)={'wg1\x00'}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002c0000012cbd7000fcdbdf7bb581d24d480abb3a3f2520000000", @ANYRES32=r1, @ANYBLOB="0400f3ff0f00f1fff3ff08000b000100666c6f77657200001c000200050050001f00000008003b006401010206002c0000000000060005000305000008000b0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) socketpair(0x25, 0x4, 0x1000, &(0x7f0000000080)) (async) getsockopt$nfc_llcp(r3, 0x118, 0x0, &(0x7f00000000c0)=""/10, 0xa) (async) [ 494.217955][ T9674] should_fail+0x23c/0x250 [ 494.217979][ T9674] should_fail_usercopy+0x16/0x20 [ 494.218007][ T9674] _copy_from_user+0x1c/0xd0 [ 494.218073][ T9674] __x64_sys_io_uring_setup+0x5d/0x130 [ 494.218097][ T9674] do_syscall_64+0x44/0xd0 [ 494.218119][ T9674] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 494.218195][ T9674] RIP: 0033:0x7fb13ca1c059 [ 494.218211][ T9674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 494.218230][ T9674] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 494.218250][ T9674] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 494.218322][ T9674] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 494.218336][ T9674] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 494.218435][ T9674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.218447][ T9674] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 494.218462][ T9674] [ 494.311072][ T9696] FAULT_INJECTION: forcing a failure. [ 494.311072][ T9696] name failslab, interval 1, probability 0, space 0, times 0 [ 494.311098][ T9696] CPU: 0 PID: 9696 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 494.311201][ T9696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.311214][ T9696] Call Trace: [ 494.311220][ T9696] [ 494.311226][ T9696] dump_stack_lvl+0xd6/0x122 [ 494.311305][ T9696] dump_stack+0x11/0x1b [ 494.311329][ T9696] should_fail+0x23c/0x250 [ 494.311352][ T9696] ? io_ring_ctx_alloc+0x35/0x58d [ 494.311378][ T9696] __should_failslab+0x81/0x90 [ 494.311428][ T9696] should_failslab+0x5/0x20 [ 494.311454][ T9696] kmem_cache_alloc_trace+0x52/0x350 [ 494.311560][ T9696] ? proc_fail_nth_write+0x127/0x150 [ 494.311580][ T9696] io_ring_ctx_alloc+0x35/0x58d [ 494.311605][ T9696] io_uring_create+0x1c8/0x754 [ 494.311650][ T9696] __x64_sys_io_uring_setup+0x118/0x130 [ 494.311681][ T9696] do_syscall_64+0x44/0xd0 [ 494.311762][ T9696] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 494.311789][ T9696] RIP: 0033:0x7fb13ca1c059 [ 494.311806][ T9696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 494.311824][ T9696] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 494.311844][ T9696] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 494.311907][ T9696] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 494.311920][ T9696] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 494.311933][ T9696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:03:27 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) (async) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x37, 0x2, {0x0, 0x32a, 0x7, 0x0, 0x5, ':\\^!@'}}, 0x23) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff8186, 0x2f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x88}}, 0x4000000) 00:03:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x3b, 0x0, 0x200, 0xff, 0x1, "691343e9e0a9dd2d04ff395428e968e779e22e", 0x101, 0x80000001}) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:27 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 3) 00:03:27 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8927, &(0x7f0000000000)={'wg1\x00', 0x0}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000002c0000012cbd7000fcdbdf7bb581d24d480abb3a3f2520000000", @ANYRES32=r1, @ANYBLOB="0400f3ff0f00f1fff3ff08000b000100666c6f77657200001c000200050050001f00000008003b006401010206002c0000000000060005000305000008000b0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) socketpair(0x25, 0x4, 0x1000, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$nfc_llcp(r3, 0x118, 0x0, &(0x7f00000000c0)=""/10, 0xa) 00:03:27 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 1) [ 494.311946][ T9696] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 494.311961][ T9696] [ 494.648574][ T9721] FAULT_INJECTION: forcing a failure. [ 494.648574][ T9721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 494.648862][ T9712] FAULT_INJECTION: forcing a failure. [ 494.648862][ T9712] name failslab, interval 1, probability 0, space 0, times 0 [ 494.661872][ T9721] CPU: 0 PID: 9721 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 494.661898][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.661909][ T9721] Call Trace: [ 494.661916][ T9721] [ 494.701594][ T9721] dump_stack_lvl+0xd6/0x122 [ 494.706189][ T9721] dump_stack+0x11/0x1b [ 494.710338][ T9721] should_fail+0x23c/0x250 [ 494.714747][ T9721] __alloc_pages+0x102/0x330 [ 494.719333][ T9721] alloc_pages+0x316/0x420 [ 494.723743][ T9721] __pmd_alloc+0x47/0x330 [ 494.728064][ T9721] handle_mm_fault+0x1214/0x1590 [ 494.733010][ T9721] do_user_addr_fault+0x617/0xb90 [ 494.738032][ T9721] exc_page_fault+0x91/0x290 [ 494.742633][ T9721] asm_exc_page_fault+0x1e/0x30 [ 494.747476][ T9721] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 494.753299][ T9721] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 494.772945][ T9721] RSP: 0018:ffffc9000a737e80 EFLAGS: 00050297 [ 494.779033][ T9721] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 494.786994][ T9721] RDX: ffff88811a328780 RSI: 0000000000000005 RDI: 00000000ffffffff [ 494.794954][ T9721] RBP: 000000000000002a R08: ffffffff839e9178 R09: 0000000000000000 [ 494.802919][ T9721] R10: 00018881183f87a0 R11: 0001ffffffffffff R12: 0000000000000002 [ 494.810989][ T9721] R13: 0000000020000000 R14: 0000000000000000 R15: 0000000000000005 [ 494.819045][ T9721] ? __sys_socketpair+0xa8/0x810 [ 494.824057][ T9721] __sys_socketpair+0xc4/0x810 [ 494.828823][ T9721] __x64_sys_socketpair+0x4e/0x60 [ 494.833853][ T9721] do_syscall_64+0x44/0xd0 [ 494.838268][ T9721] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 494.844213][ T9721] RIP: 0033:0x7f9204835059 [ 494.848648][ T9721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 494.868291][ T9721] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 494.876709][ T9721] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 494.884670][ T9721] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 494.892631][ T9721] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 494.900593][ T9721] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.908556][ T9721] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 494.916523][ T9721] [ 494.919528][ T9712] CPU: 1 PID: 9712 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 494.930506][ T9712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.940565][ T9712] Call Trace: [ 494.943916][ T9712] [ 494.946851][ T9712] dump_stack_lvl+0xd6/0x122 [ 494.946883][ T9712] dump_stack+0x11/0x1b [ 494.946938][ T9712] should_fail+0x23c/0x250 [ 494.946961][ T9712] ? io_ring_ctx_alloc+0x9f/0x58d 00:03:28 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x37, 0x2, {0x0, 0x32a, 0x7, 0x0, 0x5, ':\\^!@'}}, 0x23) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff8186, 0x2f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x88}}, 0x4000000) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) (async) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x37, 0x2, {0x0, 0x32a, 0x7, 0x0, 0x5, ':\\^!@'}}, 0x23) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff8186, 0x2f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x88}}, 0x4000000) (async) 00:03:28 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sound', 0x200, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_IE={0xae, 0x2a, [@cf={0x4, 0x6, {0xff, 0x9, 0x0, 0x2}}, @peer_mgmt={0x75, 0x4, {0x0, 0xfff, @void, @void, @void}}, @supported_rates={0x1, 0x1, [{0x5}]}, @tim={0x5, 0x46, {0x4, 0xec, 0x4, "ec6abc72afa08f77ea394a674fe5d3a8091e97a500f47ed0ac970b186351918bb7070fe07074a78758acdf68eb848d929a5bd525ced5e739d93c57fd31f3a8abf35e4c"}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x7, 0x3f, @device_b, 0x4, 0x800}}, @rann={0x7e, 0x15, {{0x1, 0xb}, 0x6, 0x3f, @device_b, 0xfffffffc, 0x9, 0x9}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x6, 0x6, @device_b, 0x1, 0x5, 0x20}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x9}}, @dsss={0x3, 0x1, 0xb1}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x6}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000043}, 0x800) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x80}, 0x14) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x63a}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000008) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x50, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe25}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4084) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) 00:03:28 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 2) 00:03:28 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 494.947057][ T9712] __should_failslab+0x81/0x90 [ 494.947083][ T9712] should_failslab+0x5/0x20 [ 494.947110][ T9712] __kmalloc+0x6f/0x370 [ 494.947208][ T9712] ? io_ring_ctx_alloc+0x35/0x58d [ 494.947234][ T9712] io_ring_ctx_alloc+0x9f/0x58d [ 494.947260][ T9712] io_uring_create+0x1c8/0x754 [ 494.947286][ T9712] __x64_sys_io_uring_setup+0x118/0x130 [ 494.947360][ T9712] do_syscall_64+0x44/0xd0 [ 494.947382][ T9712] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 494.947448][ T9712] RIP: 0033:0x7fb13ca1c059 00:03:28 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sound', 0x200, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_IE={0xae, 0x2a, [@cf={0x4, 0x6, {0xff, 0x9, 0x0, 0x2}}, @peer_mgmt={0x75, 0x4, {0x0, 0xfff, @void, @void, @void}}, @supported_rates={0x1, 0x1, [{0x5}]}, @tim={0x5, 0x46, {0x4, 0xec, 0x4, "ec6abc72afa08f77ea394a674fe5d3a8091e97a500f47ed0ac970b186351918bb7070fe07074a78758acdf68eb848d929a5bd525ced5e739d93c57fd31f3a8abf35e4c"}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x7, 0x3f, @device_b, 0x4, 0x800}}, @rann={0x7e, 0x15, {{0x1, 0xb}, 0x6, 0x3f, @device_b, 0xfffffffc, 0x9, 0x9}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x6, 0x6, @device_b, 0x1, 0x5, 0x20}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x9}}, @dsss={0x3, 0x1, 0xb1}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x6}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000043}, 0x800) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x80}, 0x14) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x63a}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000008) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x50, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe25}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4084) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sound', 0x200, 0x8) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_IE={0xae, 0x2a, [@cf={0x4, 0x6, {0xff, 0x9, 0x0, 0x2}}, @peer_mgmt={0x75, 0x4, {0x0, 0xfff, @void, @void, @void}}, @supported_rates={0x1, 0x1, [{0x5}]}, @tim={0x5, 0x46, {0x4, 0xec, 0x4, "ec6abc72afa08f77ea394a674fe5d3a8091e97a500f47ed0ac970b186351918bb7070fe07074a78758acdf68eb848d929a5bd525ced5e739d93c57fd31f3a8abf35e4c"}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x7, 0x3f, @device_b, 0x4, 0x800}}, @rann={0x7e, 0x15, {{0x1, 0xb}, 0x6, 0x3f, @device_b, 0xfffffffc, 0x9, 0x9}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x6, 0x6, @device_b, 0x1, 0x5, 0x20}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x9}}, @dsss={0x3, 0x1, 0xb1}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x6}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000043}, 0x800) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x80}, 0x14) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x63a}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000008) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x50, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe25}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4084) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) 00:03:28 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/sound', 0x200, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_IE={0xae, 0x2a, [@cf={0x4, 0x6, {0xff, 0x9, 0x0, 0x2}}, @peer_mgmt={0x75, 0x4, {0x0, 0xfff, @void, @void, @void}}, @supported_rates={0x1, 0x1, [{0x5}]}, @tim={0x5, 0x46, {0x4, 0xec, 0x4, "ec6abc72afa08f77ea394a674fe5d3a8091e97a500f47ed0ac970b186351918bb7070fe07074a78758acdf68eb848d929a5bd525ced5e739d93c57fd31f3a8abf35e4c"}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x7, 0x3f, @device_b, 0x4, 0x800}}, @rann={0x7e, 0x15, {{0x1, 0xb}, 0x6, 0x3f, @device_b, 0xfffffffc, 0x9, 0x9}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x6, 0x6, @device_b, 0x1, 0x5, 0x20}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x9}}, @dsss={0x3, 0x1, 0xb1}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x6}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000043}, 0x800) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x80}, 0x14) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x63a}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000008) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x50, 0x2, 0x2, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe25}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4084) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) [ 494.947463][ T9712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 494.947482][ T9712] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 494.947580][ T9712] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 494.947595][ T9712] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 494.947608][ T9712] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 00:03:28 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 4) [ 495.054907][ T9734] FAULT_INJECTION: forcing a failure. [ 495.054907][ T9734] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.057994][ T9712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.058010][ T9712] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 495.058040][ T9712] [ 495.098485][ T9734] CPU: 0 PID: 9734 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 495.098524][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.098537][ T9734] Call Trace: [ 495.098544][ T9734] [ 495.098551][ T9734] dump_stack_lvl+0xd6/0x122 [ 495.098581][ T9734] dump_stack+0x11/0x1b [ 495.098653][ T9734] should_fail+0x23c/0x250 [ 495.098677][ T9734] __alloc_pages+0x102/0x330 [ 495.098770][ T9734] alloc_pages+0x316/0x420 [ 495.098791][ T9734] pte_alloc_one+0x29/0xb0 [ 495.098814][ T9734] __pte_alloc+0x2f/0x200 [ 495.098836][ T9734] ? __this_cpu_preempt_check+0x18/0x20 [ 495.098876][ T9734] do_anonymous_page+0x785/0x8d0 [ 495.098902][ T9734] ? preempt_count_add+0x4e/0x90 [ 495.098926][ T9734] ? _raw_spin_unlock+0x2e/0x50 [ 495.098944][ T9734] ? __pmd_alloc+0x2f5/0x330 [ 495.099037][ T9734] handle_mm_fault+0x814/0x1590 [ 495.099123][ T9734] do_user_addr_fault+0x617/0xb90 [ 495.099160][ T9734] exc_page_fault+0x91/0x290 [ 495.099179][ T9734] asm_exc_page_fault+0x1e/0x30 [ 495.099219][ T9734] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 495.099244][ T9734] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 495.099305][ T9734] RSP: 0018:ffffc9000a767e80 EFLAGS: 00050297 [ 495.099322][ T9734] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 495.099336][ T9734] RDX: ffff888102062680 RSI: 0000000000000005 RDI: 00000000ffffffff [ 495.099381][ T9734] RBP: 000000000000002a R08: ffffffff839e9178 R09: 0000000000000000 [ 495.099394][ T9734] R10: 00018881183f8a20 R11: 0001ffffffffffff R12: 0000000000000002 [ 495.099480][ T9734] R13: 0000000020000000 R14: 0000000000000000 R15: 0000000000000005 [ 495.099495][ T9734] ? __sys_socketpair+0xa8/0x810 [ 495.099563][ T9734] __sys_socketpair+0xc4/0x810 [ 495.099652][ T9734] __x64_sys_socketpair+0x4e/0x60 [ 495.099676][ T9734] do_syscall_64+0x44/0xd0 [ 495.099695][ T9734] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 495.099718][ T9734] RIP: 0033:0x7f9204835059 [ 495.099758][ T9734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 495.099806][ T9734] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 495.099825][ T9734] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 495.099839][ T9734] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 495.099851][ T9734] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 495.099864][ T9734] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.099877][ T9734] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 495.099892][ T9734] [ 495.130307][ T9766] FAULT_INJECTION: forcing a failure. [ 495.130307][ T9766] name failslab, interval 1, probability 0, space 0, times 0 [ 495.130332][ T9766] CPU: 1 PID: 9766 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 495.130427][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.130438][ T9766] Call Trace: [ 495.130443][ T9766] [ 495.130449][ T9766] dump_stack_lvl+0xd6/0x122 [ 495.130554][ T9766] dump_stack+0x11/0x1b [ 495.130576][ T9766] should_fail+0x23c/0x250 [ 495.130602][ T9766] ? io_ring_ctx_alloc+0xf2/0x58d [ 495.130646][ T9766] __should_failslab+0x81/0x90 [ 495.130672][ T9766] should_failslab+0x5/0x20 [ 495.130736][ T9766] kmem_cache_alloc_trace+0x52/0x350 [ 495.130792][ T9766] ? io_ring_ctx_alloc+0x9f/0x58d [ 495.130931][ T9766] io_ring_ctx_alloc+0xf2/0x58d [ 495.130956][ T9766] io_uring_create+0x1c8/0x754 [ 495.130981][ T9766] __x64_sys_io_uring_setup+0x118/0x130 [ 495.131023][ T9766] do_syscall_64+0x44/0xd0 [ 495.131044][ T9766] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 495.131140][ T9766] RIP: 0033:0x7fb13ca1c059 [ 495.131156][ T9766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 00:03:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x3b, 0x0, 0x200, 0xff, 0x1, "691343e9e0a9dd2d04ff395428e968e779e22e", 0x101, 0x80000001}) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:28 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:03:28 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 3) 00:03:28 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x840) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe0}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x80, 0x0, 0x7}, 0x5}}, 0x18) 00:03:28 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 5) 00:03:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) [ 495.131174][ T9766] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 495.131194][ T9766] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 495.131207][ T9766] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 495.131234][ T9766] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 495.131248][ T9766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.131261][ T9766] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 495.131345][ T9766] [ 495.597146][ T9773] FAULT_INJECTION: forcing a failure. [ 495.597146][ T9773] name failslab, interval 1, probability 0, space 0, times 0 [ 495.599490][ T9775] FAULT_INJECTION: forcing a failure. [ 495.599490][ T9775] name failslab, interval 1, probability 0, space 0, times 0 [ 495.609813][ T9773] CPU: 1 PID: 9773 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 495.633407][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.643453][ T9773] Call Trace: [ 495.646727][ T9773] [ 495.649670][ T9773] dump_stack_lvl+0xd6/0x122 [ 495.654280][ T9773] dump_stack+0x11/0x1b [ 495.658470][ T9773] should_fail+0x23c/0x250 [ 495.662886][ T9773] ? percpu_ref_init+0x96/0x250 [ 495.667735][ T9773] ? io_sq_offload_create+0x84e/0x84e [ 495.673116][ T9773] __should_failslab+0x81/0x90 [ 495.677962][ T9773] should_failslab+0x5/0x20 [ 495.682574][ T9773] kmem_cache_alloc_trace+0x52/0x350 [ 495.687859][ T9773] ? io_sq_offload_create+0x84e/0x84e [ 495.693302][ T9773] percpu_ref_init+0x96/0x250 [ 495.698010][ T9773] io_ring_ctx_alloc+0x137/0x58d [ 495.702963][ T9773] io_uring_create+0x1c8/0x754 [ 495.707725][ T9773] __x64_sys_io_uring_setup+0x118/0x130 [ 495.713268][ T9773] do_syscall_64+0x44/0xd0 [ 495.717679][ T9773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 495.723582][ T9773] RIP: 0033:0x7fb13ca1c059 [ 495.727989][ T9773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 495.747586][ T9773] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 495.756074][ T9773] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 495.764037][ T9773] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 495.772014][ T9773] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 495.779986][ T9773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.787981][ T9773] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 00:03:28 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 6) 00:03:28 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:03:28 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x840) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe0}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x80, 0x0, 0x7}, 0x5}}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x840) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe0}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) (async) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x80, 0x0, 0x7}, 0x5}}, 0x18) (async) [ 495.795956][ T9773] [ 495.798971][ T9775] CPU: 0 PID: 9775 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 495.809958][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.820134][ T9775] Call Trace: [ 495.823418][ T9775] [ 495.826353][ T9775] dump_stack_lvl+0xd6/0x122 [ 495.830967][ T9775] dump_stack+0x11/0x1b 00:03:29 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x840) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe0}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x80, 0x0, 0x7}, 0x5}}, 0x18) 00:03:29 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 7) 00:03:29 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 4) [ 495.831053][ T9775] should_fail+0x23c/0x250 [ 495.831143][ T9775] ? __anon_vma_prepare+0x44/0x2c0 [ 495.831219][ T9775] __should_failslab+0x81/0x90 [ 495.831272][ T9775] should_failslab+0x5/0x20 [ 495.831299][ T9775] kmem_cache_alloc+0x4f/0x320 [ 495.831325][ T9775] __anon_vma_prepare+0x44/0x2c0 [ 495.831381][ T9775] do_anonymous_page+0x7a6/0x8d0 [ 495.831408][ T9775] ? preempt_count_add+0x4e/0x90 [ 495.831434][ T9775] ? _raw_spin_unlock+0x2e/0x50 [ 495.831476][ T9775] ? __pmd_alloc+0x2f5/0x330 [ 495.831501][ T9775] handle_mm_fault+0x814/0x1590 [ 495.831542][ T9775] do_user_addr_fault+0x617/0xb90 [ 495.831568][ T9775] exc_page_fault+0x91/0x290 [ 495.831594][ T9775] asm_exc_page_fault+0x1e/0x30 [ 495.831683][ T9775] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 495.831750][ T9775] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 495.831768][ T9775] RSP: 0018:ffffc9000a3e7e80 EFLAGS: 00050297 [ 495.831785][ T9775] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 495.831799][ T9775] RDX: ffff88811a1b4800 RSI: 0000000000000005 RDI: 00000000ffffffff [ 495.831826][ T9775] RBP: 000000000000002a R08: ffffffff839e9178 R09: 0000000000000000 [ 495.831840][ T9775] R10: 00018881183f8a20 R11: 0001ffffffffffff R12: 0000000000000002 [ 495.831853][ T9775] R13: 0000000020000000 R14: 0000000000000000 R15: 0000000000000005 [ 495.831904][ T9775] ? __sys_socketpair+0xa8/0x810 [ 495.831929][ T9775] __sys_socketpair+0xc4/0x810 [ 495.831952][ T9775] __x64_sys_socketpair+0x4e/0x60 [ 495.832049][ T9775] do_syscall_64+0x44/0xd0 [ 495.832134][ T9775] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 495.832207][ T9775] RIP: 0033:0x7f9204835059 [ 495.832222][ T9775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 495.832241][ T9775] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 495.832266][ T9775] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 495.832281][ T9775] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 495.832295][ T9775] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 495.832309][ T9775] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.832323][ T9775] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 495.832373][ T9775] [ 495.842654][ T9787] FAULT_INJECTION: forcing a failure. [ 495.842654][ T9787] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.842737][ T9787] CPU: 0 PID: 9787 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 495.842763][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.842774][ T9787] Call Trace: [ 495.842781][ T9787] [ 495.842788][ T9787] dump_stack_lvl+0xd6/0x122 [ 495.842815][ T9787] dump_stack+0x11/0x1b [ 495.842898][ T9787] should_fail+0x23c/0x250 [ 495.842919][ T9787] __alloc_pages+0x102/0x330 [ 495.842939][ T9787] alloc_pages+0x316/0x420 [ 495.843016][ T9787] __get_free_pages+0x8/0x30 [ 495.843033][ T9787] io_mem_alloc+0x2b/0x40 [ 495.843087][ T9787] io_allocate_scq_urings+0x98/0x1bb [ 495.843115][ T9787] io_uring_create+0x341/0x754 [ 495.843199][ T9787] __x64_sys_io_uring_setup+0x118/0x130 [ 495.843226][ T9787] do_syscall_64+0x44/0xd0 [ 495.843248][ T9787] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 495.843299][ T9787] RIP: 0033:0x7fb13ca1c059 [ 495.843316][ T9787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 495.843334][ T9787] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 495.843353][ T9787] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 495.843367][ T9787] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 495.843381][ T9787] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 495.843396][ T9787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.843409][ T9787] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 495.843473][ T9787] [ 495.875409][ T9797] FAULT_INJECTION: forcing a failure. [ 495.875409][ T9797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.875479][ T9797] CPU: 0 PID: 9797 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 495.875505][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.875517][ T9797] Call Trace: [ 495.875523][ T9797] [ 495.875529][ T9797] dump_stack_lvl+0xd6/0x122 [ 495.875554][ T9797] dump_stack+0x11/0x1b [ 495.875673][ T9797] should_fail+0x23c/0x250 [ 495.875706][ T9797] __alloc_pages+0x102/0x330 [ 495.875728][ T9797] alloc_pages+0x316/0x420 [ 495.875750][ T9797] __get_free_pages+0x8/0x30 [ 495.875848][ T9797] io_mem_alloc+0x2b/0x40 [ 495.875871][ T9797] io_allocate_scq_urings+0x154/0x1bb [ 495.875905][ T9797] io_uring_create+0x341/0x754 [ 495.876000][ T9797] __x64_sys_io_uring_setup+0x118/0x130 [ 495.876023][ T9797] do_syscall_64+0x44/0xd0 [ 495.876043][ T9797] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 495.876081][ T9797] RIP: 0033:0x7fb13ca1c059 [ 495.876096][ T9797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 495.876115][ T9797] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 495.876142][ T9797] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 495.876157][ T9797] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 495.876171][ T9797] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 495.876235][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.876249][ T9797] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 495.876266][ T9797] [ 495.885887][ T9800] FAULT_INJECTION: forcing a failure. [ 495.885887][ T9800] name failslab, interval 1, probability 0, space 0, times 0 00:03:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x3b, 0x0, 0x200, 0xff, 0x1, "691343e9e0a9dd2d04ff395428e968e779e22e", 0x101, 0x80000001}) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:29 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) socketpair(0x2b, 0x800, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x200000c1) 00:03:29 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 8) [ 496.473407][ T9800] CPU: 0 PID: 9800 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 496.484364][ T9800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.494430][ T9800] Call Trace: [ 496.497807][ T9800] [ 496.500558][ T9805] FAULT_INJECTION: forcing a failure. [ 496.500558][ T9805] name failslab, interval 1, probability 0, space 0, times 0 [ 496.500741][ T9800] dump_stack_lvl+0xd6/0x122 [ 496.517914][ T9800] dump_stack+0x11/0x1b 00:03:29 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) socketpair(0x2b, 0x800, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x200000c1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) socketpair(0x2b, 0x800, 0x8, &(0x7f0000000000)) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x200000c1) (async) [ 496.517943][ T9800] should_fail+0x23c/0x250 [ 496.517964][ T9800] ? __anon_vma_prepare+0x92/0x2c0 [ 496.517989][ T9800] __should_failslab+0x81/0x90 [ 496.518012][ T9800] should_failslab+0x5/0x20 [ 496.518061][ T9800] kmem_cache_alloc+0x4f/0x320 [ 496.518082][ T9800] ? __anon_vma_prepare+0x44/0x2c0 [ 496.518152][ T9800] __anon_vma_prepare+0x92/0x2c0 [ 496.518172][ T9800] do_anonymous_page+0x7a6/0x8d0 [ 496.518202][ T9800] ? preempt_count_add+0x4e/0x90 [ 496.518224][ T9800] ? _raw_spin_unlock+0x2e/0x50 [ 496.518242][ T9800] ? __pmd_alloc+0x2f5/0x330 [ 496.518264][ T9800] handle_mm_fault+0x814/0x1590 [ 496.518301][ T9800] do_user_addr_fault+0x617/0xb90 [ 496.518351][ T9800] exc_page_fault+0x91/0x290 [ 496.518385][ T9800] asm_exc_page_fault+0x1e/0x30 [ 496.518474][ T9800] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 496.518496][ T9800] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 496.518513][ T9800] RSP: 0018:ffffc9000aa33e80 EFLAGS: 00050297 [ 496.518527][ T9800] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 496.518539][ T9800] RDX: ffff888118140c00 RSI: 0000000000000005 RDI: 00000000ffffffff [ 496.518551][ T9800] RBP: 000000000000002a R08: ffffffff839e9178 R09: 0000000000000000 [ 496.518589][ T9800] R10: 00018881182f0e20 R11: 0001ffffffffffff R12: 0000000000000002 [ 496.518599][ T9800] R13: 0000000020000000 R14: 0000000000000000 R15: 0000000000000005 [ 496.518609][ T9800] ? __sys_socketpair+0xa8/0x810 [ 496.518696][ T9800] __sys_socketpair+0xc4/0x810 [ 496.518739][ T9800] __x64_sys_socketpair+0x4e/0x60 [ 496.518756][ T9800] do_syscall_64+0x44/0xd0 [ 496.518772][ T9800] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 496.518805][ T9800] RIP: 0033:0x7f9204835059 [ 496.518818][ T9800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 496.518833][ T9800] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 496.518849][ T9800] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 496.518862][ T9800] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 496.518873][ T9800] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 496.518936][ T9800] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.518990][ T9800] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 496.519003][ T9800] [ 496.519010][ T9805] CPU: 1 PID: 9805 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 496.519035][ T9805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.519045][ T9805] Call Trace: [ 496.519050][ T9805] [ 496.519056][ T9805] dump_stack_lvl+0xd6/0x122 [ 496.519094][ T9805] dump_stack+0x11/0x1b [ 496.519123][ T9805] should_fail+0x23c/0x250 [ 496.519144][ T9805] ? io_sq_offload_create+0x1aa/0x84e [ 496.519169][ T9805] __should_failslab+0x81/0x90 [ 496.519210][ T9805] should_failslab+0x5/0x20 [ 496.519256][ T9805] kmem_cache_alloc_trace+0x52/0x350 [ 496.519281][ T9805] io_sq_offload_create+0x1aa/0x84e [ 496.519305][ T9805] ? __get_free_pages+0x8/0x30 [ 496.519323][ T9805] ? io_mem_alloc+0x2b/0x40 [ 496.519408][ T9805] ? io_allocate_scq_urings+0x16e/0x1bb [ 496.519433][ T9805] io_uring_create+0x35f/0x754 [ 496.519492][ T9805] __x64_sys_io_uring_setup+0x118/0x130 [ 496.519514][ T9805] do_syscall_64+0x44/0xd0 [ 496.519559][ T9805] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 496.519583][ T9805] RIP: 0033:0x7fb13ca1c059 [ 496.519599][ T9805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 496.519698][ T9805] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 496.519719][ T9805] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 00:03:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:30 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 9) 00:03:30 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 5) 00:03:30 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async, rerun: 64) socketpair(0x2b, 0x800, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x200000c1) 00:03:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$VT_RELDISP(r2, 0x5605) (async) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) [ 496.519733][ T9805] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 496.519745][ T9805] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 496.519758][ T9805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.519823][ T9805] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 496.519839][ T9805] [ 496.991204][ T9827] FAULT_INJECTION: forcing a failure. [ 496.991204][ T9827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 496.997206][ T9831] FAULT_INJECTION: forcing a failure. [ 496.997206][ T9831] name failslab, interval 1, probability 0, space 0, times 0 [ 497.004526][ T9827] CPU: 0 PID: 9827 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 497.028021][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.038143][ T9827] Call Trace: [ 497.041411][ T9827] [ 497.044330][ T9827] dump_stack_lvl+0xd6/0x122 [ 497.049005][ T9827] dump_stack+0x11/0x1b [ 497.053194][ T9827] should_fail+0x23c/0x250 [ 497.057608][ T9827] __alloc_pages+0x102/0x330 [ 497.062201][ T9827] alloc_pages_vma+0x67e/0x810 [ 497.066985][ T9827] ? __anon_vma_prepare+0x21d/0x2c0 [ 497.072245][ T9827] do_anonymous_page+0x161/0x8d0 [ 497.077183][ T9827] ? preempt_count_add+0x4e/0x90 [ 497.082116][ T9827] ? _raw_spin_unlock+0x2e/0x50 [ 497.087039][ T9827] ? __pmd_alloc+0x2f5/0x330 [ 497.091692][ T9827] handle_mm_fault+0x814/0x1590 [ 497.096561][ T9827] do_user_addr_fault+0x617/0xb90 [ 497.101585][ T9827] exc_page_fault+0x91/0x290 [ 497.106173][ T9827] asm_exc_page_fault+0x1e/0x30 [ 497.111187][ T9827] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 497.116909][ T9827] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 497.136541][ T9827] RSP: 0018:ffffc9000122be80 EFLAGS: 00050297 [ 497.142600][ T9827] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000 [ 497.150669][ T9827] RDX: ffff8881088ea480 RSI: 0000000000000005 RDI: 00000000ffffffff [ 497.158688][ T9827] RBP: 000000000000002a R08: ffffffff839e9178 R09: 0000000000000000 [ 497.166678][ T9827] R10: 00018881183f8a20 R11: 0001ffffffffffff R12: 0000000000000002 [ 497.174690][ T9827] R13: 0000000020000000 R14: 0000000000000000 R15: 0000000000000005 [ 497.182735][ T9827] ? __sys_socketpair+0xa8/0x810 [ 497.187780][ T9827] __sys_socketpair+0xc4/0x810 [ 497.192684][ T9827] __x64_sys_socketpair+0x4e/0x60 [ 497.197787][ T9827] do_syscall_64+0x44/0xd0 [ 497.202231][ T9827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 497.208122][ T9827] RIP: 0033:0x7f9204835059 [ 497.212527][ T9827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 497.232181][ T9827] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 497.240658][ T9827] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 497.248620][ T9827] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 497.256582][ T9827] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.264545][ T9827] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.272511][ T9827] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 497.280478][ T9827] 00:03:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$VT_RELDISP(r2, 0x5605) (async) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) 00:03:30 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 6) 00:03:30 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 10) [ 497.283558][ T9831] CPU: 1 PID: 9831 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 497.294504][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.304568][ T9831] Call Trace: [ 497.307858][ T9831] [ 497.307867][ T9831] dump_stack_lvl+0xd6/0x122 [ 497.307951][ T9831] dump_stack+0x11/0x1b [ 497.307976][ T9831] should_fail+0x23c/0x250 [ 497.308000][ T9831] __should_failslab+0x81/0x90 [ 497.308060][ T9831] should_failslab+0x5/0x20 [ 497.308119][ T9831] kmem_cache_alloc_node+0x61/0x2d0 [ 497.308146][ T9831] ? page_counter_try_charge+0x2e1/0x310 [ 497.308206][ T9831] ? dup_task_struct+0x63/0x680 [ 497.308233][ T9831] dup_task_struct+0x63/0x680 [ 497.308258][ T9831] copy_process+0x3f9/0x2f30 [ 497.308281][ T9831] ? __this_cpu_preempt_check+0x18/0x20 [ 497.308350][ T9831] ? save_fpregs_to_fpstate+0xf5/0x140 [ 497.308374][ T9831] ? io_sq_offload_create+0x1aa/0x84e [ 497.308398][ T9831] ? _raw_spin_unlock+0x2e/0x50 [ 497.308463][ T9831] ? finish_task_switch+0xd0/0x280 [ 497.308483][ T9831] ? io_sq_offload_create+0x1aa/0x84e [ 497.308525][ T9831] ? io_mem_alloc+0x40/0x40 [ 497.308549][ T9831] create_io_thread+0x95/0xc0 [ 497.308576][ T9831] ? io_mem_alloc+0x40/0x40 [ 497.308670][ T9831] io_sq_offload_create+0x7a5/0x84e [ 497.308764][ T9831] io_uring_create+0x35f/0x754 [ 497.308789][ T9831] __x64_sys_io_uring_setup+0x118/0x130 [ 497.308879][ T9831] do_syscall_64+0x44/0xd0 [ 497.308901][ T9831] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 497.308927][ T9831] RIP: 0033:0x7fb13ca1c059 [ 497.309021][ T9831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 497.309039][ T9831] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 497.309059][ T9831] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 497.309071][ T9831] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 497.309085][ T9831] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.309100][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.309191][ T9831] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 497.309206][ T9831] [ 497.332305][ T9837] FAULT_INJECTION: forcing a failure. [ 497.332305][ T9837] name failslab, interval 1, probability 0, space 0, times 0 [ 497.332331][ T9837] CPU: 1 PID: 9837 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 497.332384][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.332397][ T9837] Call Trace: [ 497.332403][ T9837] [ 497.332409][ T9837] dump_stack_lvl+0xd6/0x122 [ 497.332447][ T9837] dump_stack+0x11/0x1b [ 497.332471][ T9837] should_fail+0x23c/0x250 [ 497.332553][ T9837] ? sock_alloc_inode+0x23/0x90 [ 497.332579][ T9837] __should_failslab+0x81/0x90 [ 497.332644][ T9837] ? sockfs_init_fs_context+0x70/0x70 [ 497.332669][ T9837] should_failslab+0x5/0x20 [ 497.332764][ T9837] kmem_cache_alloc+0x4f/0x320 [ 497.332788][ T9837] ? sockfs_init_fs_context+0x70/0x70 [ 497.332813][ T9837] sock_alloc_inode+0x23/0x90 [ 497.332858][ T9837] ? sockfs_init_fs_context+0x70/0x70 [ 497.333015][ T9837] new_inode_pseudo+0x38/0x190 [ 497.333087][ T9837] __sock_create+0x122/0x4e0 [ 497.333107][ T9837] __sys_socketpair+0x192/0x810 [ 497.333206][ T9837] __x64_sys_socketpair+0x4e/0x60 [ 497.333287][ T9837] do_syscall_64+0x44/0xd0 [ 497.333308][ T9837] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 497.333331][ T9837] RIP: 0033:0x7f9204835059 [ 497.333456][ T9837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 497.333476][ T9837] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 497.333497][ T9837] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 497.333548][ T9837] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 497.333562][ T9837] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.333576][ T9837] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.333590][ T9837] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 497.333607][ T9837] [ 497.333631][ T9837] socket: no more sockets [ 497.339034][ T9839] FAULT_INJECTION: forcing a failure. [ 497.339034][ T9839] name failslab, interval 1, probability 0, space 0, times 0 [ 497.339060][ T9839] CPU: 0 PID: 9839 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 497.339168][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.339180][ T9839] Call Trace: [ 497.339187][ T9839] [ 497.339193][ T9839] dump_stack_lvl+0xd6/0x122 [ 497.339285][ T9839] dump_stack+0x11/0x1b [ 497.339387][ T9839] should_fail+0x23c/0x250 [ 497.339414][ T9839] __should_failslab+0x81/0x90 [ 497.339440][ T9839] should_failslab+0x5/0x20 [ 497.339464][ T9839] kmem_cache_alloc_node_trace+0x61/0x310 [ 497.339516][ T9839] ? mod_objcg_state+0x490/0x5c0 [ 497.339544][ T9839] ? __get_vm_area_node+0x11b/0x240 [ 497.339568][ T9839] __get_vm_area_node+0x11b/0x240 [ 497.339594][ T9839] __vmalloc_node_range+0xb8/0x1f0 [ 497.339642][ T9839] ? copy_process+0x3f9/0x2f30 [ 497.339665][ T9839] ? dup_task_struct+0x63/0x680 [ 497.339757][ T9839] dup_task_struct+0x496/0x680 [ 497.339782][ T9839] ? copy_process+0x3f9/0x2f30 [ 497.339858][ T9839] copy_process+0x3f9/0x2f30 [ 497.339937][ T9839] ? avc_has_perm_noaudit+0x1c0/0x270 [ 497.339962][ T9839] ? io_mem_alloc+0x40/0x40 [ 497.340018][ T9839] create_io_thread+0x95/0xc0 [ 497.340043][ T9839] ? io_mem_alloc+0x40/0x40 [ 497.340070][ T9839] io_sq_offload_create+0x7a5/0x84e [ 497.340110][ T9839] io_uring_create+0x35f/0x754 [ 497.340135][ T9839] __x64_sys_io_uring_setup+0x118/0x130 [ 497.340158][ T9839] do_syscall_64+0x44/0xd0 [ 497.340236][ T9839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 497.340262][ T9839] RIP: 0033:0x7fb13ca1c059 [ 497.340334][ T9839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 497.340392][ T9839] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 497.340414][ T9839] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 497.340429][ T9839] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 497.340443][ T9839] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.340461][ T9839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.340475][ T9839] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 497.340490][ T9839] [ 497.340511][ T9839] syz-executor.2: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 497.340558][ T9839] CPU: 0 PID: 9839 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 497.340649][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.340660][ T9839] Call Trace: [ 497.340665][ T9839] [ 497.340688][ T9839] dump_stack_lvl+0xd6/0x122 [ 497.340714][ T9839] dump_stack+0x11/0x1b [ 497.340738][ T9839] warn_alloc+0x152/0x1d0 [ 497.340821][ T9839] __vmalloc_node_range+0x129/0x1f0 [ 497.340849][ T9839] dup_task_struct+0x496/0x680 [ 497.340902][ T9839] ? copy_process+0x3f9/0x2f30 [ 497.340928][ T9839] copy_process+0x3f9/0x2f30 [ 497.340960][ T9839] ? avc_has_perm_noaudit+0x1c0/0x270 [ 497.340996][ T9839] ? io_mem_alloc+0x40/0x40 [ 497.341021][ T9839] create_io_thread+0x95/0xc0 [ 497.341102][ T9839] ? io_mem_alloc+0x40/0x40 [ 497.341128][ T9839] io_sq_offload_create+0x7a5/0x84e [ 497.341179][ T9839] io_uring_create+0x35f/0x754 [ 497.341205][ T9839] __x64_sys_io_uring_setup+0x118/0x130 [ 497.341229][ T9839] do_syscall_64+0x44/0xd0 [ 497.341249][ T9839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 497.341292][ T9839] RIP: 0033:0x7fb13ca1c059 [ 497.341373][ T9839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 497.341391][ T9839] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 497.341409][ T9839] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 497.341422][ T9839] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 497.341434][ T9839] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.341463][ T9839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.341477][ T9839] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 497.341494][ T9839] [ 497.341500][ T9839] Mem-Info: [ 497.341505][ T9839] active_anon:525 inactive_anon:11229 isolated_anon:0 [ 497.341505][ T9839] active_file:4202 inactive_file:30655 isolated_file:0 [ 497.341505][ T9839] unevictable:0 dirty:13 writeback:0 [ 497.341505][ T9839] slab_reclaimable:7576 slab_unreclaimable:15688 [ 497.341505][ T9839] mapped:27579 shmem:633 pagetables:610 bounce:0 [ 497.341505][ T9839] kernel_misc_reclaimable:0 [ 497.341505][ T9839] free:1908133 free_pcp:2608 free_cma:0 [ 497.341560][ T9839] Node 0 active_anon:2100kB inactive_anon:44916kB active_file:16808kB inactive_file:122620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110316kB dirty:52kB writeback:0kB shmem:2532kB writeback_tmp:0kB kernel_stack:3808kB pagetables:2440kB all_unreclaimable? no [ 497.341635][ T9839] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 497.341844][ T9839] lowmem_reserve[]: 0 2896 7874 7874 [ 497.341868][ T9839] Node 0 DMA32 free:2967228kB boost:0kB min:4172kB low:7136kB high:10100kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2970676kB mlocked:0kB bounce:0kB free_pcp:3448kB local_pcp:96kB free_cma:0kB [ 497.341945][ T9839] lowmem_reserve[]: 0 0 4978 4978 [ 497.342006][ T9839] Node 0 Normal free:4649944kB boost:0kB min:7172kB low:12268kB high:17364kB reserved_highatomic:0KB active_anon:2100kB inactive_anon:44916kB active_file:16808kB inactive_file:122620kB unevictable:0kB writepending:52kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:6984kB local_pcp:2508kB free_cma:0kB [ 497.342070][ T9839] lowmem_reserve[]: 0 0 0 0 [ 497.342092][ T9839] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 497.342325][ T9839] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 2*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 722*4096kB (M) = 2967228kB [ 497.342597][ T9839] Node 0 Normal: 180*4kB (UM) 75*8kB (UME) 117*16kB (UME) 135*32kB (UME) 96*64kB (UME) 29*128kB (UME) 4*256kB (U) 4*512kB (U) 1*1024kB (M) 2*2048kB (ME) 1129*4096kB (UM) = 4649944kB 00:03:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x3b, 0x0, 0x200, 0xff, 0x1, "691343e9e0a9dd2d04ff395428e968e779e22e", 0x101, 0x80000001}) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b62, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:31 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 11) 00:03:31 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 7) 00:03:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_pts(r0, 0x10000) 00:03:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) [ 497.342773][ T9839] Node 0 hugepages_total=8 hugepages_free=8 hugepages_surp=4 hugepages_size=2048kB [ 497.342792][ T9839] 11924 total pagecache pages [ 497.342798][ T9839] 0 pages in swap cache [ 497.342805][ T9839] Swap cache stats: add 0, delete 0, find 0/0 [ 497.342818][ T9839] Free swap = 0kB [ 497.342823][ T9839] Total swap = 0kB [ 497.342829][ T9839] 2097051 pages RAM [ 497.342834][ T9839] 0 pages HighMem/MovableOnly [ 497.342840][ T9839] 75982 pages reserved [ 498.466283][ T9858] FAULT_INJECTION: forcing a failure. [ 498.466283][ T9858] name failslab, interval 1, probability 0, space 0, times 0 [ 498.467735][ T9860] FAULT_INJECTION: forcing a failure. [ 498.467735][ T9860] name failslab, interval 1, probability 0, space 0, times 0 [ 498.479025][ T9858] CPU: 0 PID: 9858 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 498.502526][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.512589][ T9858] Call Trace: [ 498.515857][ T9858] [ 498.518851][ T9858] dump_stack_lvl+0xd6/0x122 [ 498.523512][ T9858] dump_stack+0x11/0x1b [ 498.527729][ T9858] should_fail+0x23c/0x250 [ 498.532142][ T9858] ? security_inode_alloc+0x30/0x180 [ 498.537424][ T9858] __should_failslab+0x81/0x90 [ 498.542338][ T9858] should_failslab+0x5/0x20 [ 498.546885][ T9858] kmem_cache_alloc+0x4f/0x320 [ 498.551684][ T9858] security_inode_alloc+0x30/0x180 [ 498.557336][ T9858] inode_init_always+0x214/0x3e0 [ 498.562342][ T9858] ? sockfs_init_fs_context+0x70/0x70 [ 498.567726][ T9858] new_inode_pseudo+0x6f/0x190 [ 498.572533][ T9858] __sock_create+0x122/0x4e0 [ 498.577258][ T9858] __sys_socketpair+0x192/0x810 [ 498.582510][ T9858] __x64_sys_socketpair+0x4e/0x60 [ 498.587587][ T9858] do_syscall_64+0x44/0xd0 [ 498.591997][ T9858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 498.598684][ T9858] RIP: 0033:0x7f9204835059 [ 498.603126][ T9858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 498.622837][ T9858] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 498.631248][ T9858] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 498.639211][ T9858] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 498.647216][ T9858] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 498.655180][ T9858] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 00:03:31 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/116}) [ 498.663320][ T9858] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 498.671284][ T9858] [ 498.674317][ T9860] CPU: 1 PID: 9860 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 498.674480][ T9858] socket: no more sockets [ 498.685255][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.685267][ T9860] Call Trace: [ 498.685274][ T9860] [ 498.685280][ T9860] dump_stack_lvl+0xd6/0x122 [ 498.710429][ T9860] dump_stack+0x11/0x1b 00:03:31 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 8) 00:03:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b62, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b62, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) [ 498.714606][ T9860] should_fail+0x23c/0x250 [ 498.719040][ T9860] __should_failslab+0x81/0x90 [ 498.723847][ T9860] should_failslab+0x5/0x20 [ 498.728367][ T9860] kmem_cache_alloc_node+0x61/0x2d0 [ 498.733576][ T9860] ? avc_has_perm_noaudit+0x1c0/0x270 [ 498.739136][ T9860] ? alloc_vmap_area+0x14a/0x1230 [ 498.744191][ T9860] alloc_vmap_area+0x14a/0x1230 [ 498.749075][ T9860] ? kmem_cache_alloc_node_trace+0x20f/0x310 [ 498.755145][ T9860] __get_vm_area_node+0x165/0x240 [ 498.760259][ T9860] __vmalloc_node_range+0xb8/0x1f0 00:03:31 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 9) 00:03:31 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 12) [ 498.765388][ T9860] ? copy_process+0x3f9/0x2f30 [ 498.765468][ T9860] ? dup_task_struct+0x63/0x680 [ 498.765496][ T9860] dup_task_struct+0x496/0x680 [ 498.765524][ T9860] ? copy_process+0x3f9/0x2f30 [ 498.765575][ T9860] copy_process+0x3f9/0x2f30 [ 498.765659][ T9860] ? avc_has_perm_noaudit+0x1c0/0x270 [ 498.765685][ T9860] ? io_mem_alloc+0x40/0x40 [ 498.765711][ T9860] create_io_thread+0x95/0xc0 [ 498.765775][ T9860] ? io_mem_alloc+0x40/0x40 [ 498.765821][ T9860] io_sq_offload_create+0x7a5/0x84e [ 498.765854][ T9860] io_uring_create+0x35f/0x754 [ 498.765878][ T9860] __x64_sys_io_uring_setup+0x118/0x130 [ 498.765902][ T9860] do_syscall_64+0x44/0xd0 [ 498.765926][ T9860] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 498.765953][ T9860] RIP: 0033:0x7fb13ca1c059 [ 498.765969][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 498.765990][ T9860] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 498.766045][ T9860] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 498.766059][ T9860] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 498.766072][ T9860] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 498.766085][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.766099][ T9860] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 498.766116][ T9860] [ 498.776433][ T9870] FAULT_INJECTION: forcing a failure. [ 498.776433][ T9870] name failslab, interval 1, probability 0, space 0, times 0 [ 498.776460][ T9870] CPU: 1 PID: 9870 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 498.776486][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.776498][ T9870] Call Trace: [ 498.776536][ T9870] [ 498.776542][ T9870] dump_stack_lvl+0xd6/0x122 [ 498.776584][ T9870] dump_stack+0x11/0x1b [ 498.776606][ T9870] should_fail+0x23c/0x250 [ 498.776630][ T9870] ? sk_prot_alloc+0x41/0x190 [ 498.776697][ T9870] __should_failslab+0x81/0x90 [ 498.776747][ T9870] should_failslab+0x5/0x20 [ 498.776810][ T9870] kmem_cache_alloc+0x4f/0x320 [ 498.776855][ T9870] sk_prot_alloc+0x41/0x190 [ 498.776883][ T9870] sk_alloc+0x2f/0x360 [ 498.776909][ T9870] qrtr_create+0x53/0x100 [ 498.776938][ T9870] __sock_create+0x2cc/0x4e0 [ 498.776993][ T9870] __sys_socketpair+0x192/0x810 [ 498.777016][ T9870] __x64_sys_socketpair+0x4e/0x60 [ 498.777040][ T9870] do_syscall_64+0x44/0xd0 [ 498.777062][ T9870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 498.777150][ T9870] RIP: 0033:0x7f9204835059 [ 498.777166][ T9870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 498.777212][ T9870] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 498.777232][ T9870] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 498.777247][ T9870] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 498.777261][ T9870] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 498.777275][ T9870] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.777289][ T9870] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 498.777379][ T9870] [ 498.799005][ T9874] FAULT_INJECTION: forcing a failure. [ 498.799005][ T9874] name failslab, interval 1, probability 0, space 0, times 0 [ 498.799069][ T9874] CPU: 1 PID: 9874 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 498.799093][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.799106][ T9874] Call Trace: [ 498.799113][ T9874] [ 498.799119][ T9874] dump_stack_lvl+0xd6/0x122 [ 498.799148][ T9874] dump_stack+0x11/0x1b [ 498.799246][ T9874] should_fail+0x23c/0x250 [ 498.799268][ T9874] ? selinux_sk_alloc_security+0x61/0x120 [ 498.799291][ T9874] __should_failslab+0x81/0x90 [ 498.799316][ T9874] should_failslab+0x5/0x20 [ 498.799372][ T9874] kmem_cache_alloc_trace+0x52/0x350 [ 498.799397][ T9874] ? __rcu_read_unlock+0x5c/0x290 [ 498.799419][ T9874] selinux_sk_alloc_security+0x61/0x120 [ 498.799486][ T9874] security_sk_alloc+0x45/0x90 [ 498.799512][ T9874] sk_prot_alloc+0xd2/0x190 [ 498.799539][ T9874] sk_alloc+0x2f/0x360 [ 498.799698][ T9874] qrtr_create+0x53/0x100 [ 498.799724][ T9874] __sock_create+0x2cc/0x4e0 [ 498.799803][ T9874] __sys_socketpair+0x192/0x810 [ 498.799847][ T9874] __x64_sys_socketpair+0x4e/0x60 [ 498.799889][ T9874] do_syscall_64+0x44/0xd0 [ 498.799909][ T9874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 498.799931][ T9874] RIP: 0033:0x7f9204835059 [ 498.799947][ T9874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 498.799968][ T9874] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 498.799990][ T9874] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 498.800004][ T9874] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 498.800018][ T9874] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 498.800030][ T9874] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.800043][ T9874] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 498.800139][ T9874] [ 498.804100][ T9876] FAULT_INJECTION: forcing a failure. [ 498.804100][ T9876] name failslab, interval 1, probability 0, space 0, times 0 [ 498.804137][ T9876] CPU: 0 PID: 9876 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 498.804162][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.804174][ T9876] Call Trace: [ 498.804180][ T9876] [ 498.804226][ T9876] dump_stack_lvl+0xd6/0x122 [ 498.804254][ T9876] dump_stack+0x11/0x1b [ 498.804276][ T9876] should_fail+0x23c/0x250 [ 498.804299][ T9876] __should_failslab+0x81/0x90 [ 498.804364][ T9876] should_failslab+0x5/0x20 [ 498.804388][ T9876] kmem_cache_alloc_node+0x61/0x2d0 [ 498.804450][ T9876] ? alloc_vmap_area+0x530/0x1230 [ 498.804476][ T9876] alloc_vmap_area+0x530/0x1230 [ 498.804504][ T9876] __get_vm_area_node+0x165/0x240 [ 498.804547][ T9876] __vmalloc_node_range+0xb8/0x1f0 [ 498.804572][ T9876] ? copy_process+0x3f9/0x2f30 [ 498.804596][ T9876] ? dup_task_struct+0x63/0x680 [ 498.804620][ T9876] dup_task_struct+0x496/0x680 00:03:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_pts(r0, 0x10000) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x10000) (async) 00:03:32 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 10) 00:03:32 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/116}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/116}) (async) 00:03:32 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing', 0x119800, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x900) [ 498.804692][ T9876] ? copy_process+0x3f9/0x2f30 [ 499.422592][ T9876] copy_process+0x3f9/0x2f30 [ 499.427199][ T9876] ? avc_has_perm_noaudit+0x1c0/0x270 [ 499.432597][ T9876] ? io_mem_alloc+0x40/0x40 [ 499.437136][ T9876] create_io_thread+0x95/0xc0 [ 499.441902][ T9876] ? io_mem_alloc+0x40/0x40 [ 499.446432][ T9876] io_sq_offload_create+0x7a5/0x84e [ 499.451659][ T9876] io_uring_create+0x35f/0x754 [ 499.456466][ T9876] __x64_sys_io_uring_setup+0x118/0x130 00:03:32 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing', 0x119800, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x900) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing', 0x119800, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x900) (async) 00:03:32 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing', 0x119800, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x900) 00:03:32 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8801) [ 499.462116][ T9876] do_syscall_64+0x44/0xd0 [ 499.462146][ T9876] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 499.462233][ T9876] RIP: 0033:0x7fb13ca1c059 [ 499.462249][ T9876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 499.462267][ T9876] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 499.462289][ T9876] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 00:03:32 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8801) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8801) (async) 00:03:32 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8801) 00:03:32 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x810) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x6e, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) [ 499.462304][ T9876] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 499.462394][ T9876] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.462409][ T9876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.462424][ T9876] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 499.462442][ T9876] [ 499.473618][ T9888] FAULT_INJECTION: forcing a failure. [ 499.473618][ T9888] name failslab, interval 1, probability 0, space 0, times 0 00:03:32 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 13) [ 499.568918][ T9888] CPU: 0 PID: 9888 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 499.579883][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.579901][ T9888] Call Trace: [ 499.579967][ T9888] [ 499.579975][ T9888] dump_stack_lvl+0xd6/0x122 [ 499.580005][ T9888] dump_stack+0x11/0x1b [ 499.580028][ T9888] should_fail+0x23c/0x250 [ 499.580049][ T9888] ? sock_alloc_inode+0x23/0x90 [ 499.580115][ T9888] __should_failslab+0x81/0x90 [ 499.580212][ T9888] ? sockfs_init_fs_context+0x70/0x70 [ 499.580242][ T9888] should_failslab+0x5/0x20 [ 499.580268][ T9888] kmem_cache_alloc+0x4f/0x320 [ 499.580393][ T9888] ? sockfs_init_fs_context+0x70/0x70 [ 499.580421][ T9888] sock_alloc_inode+0x23/0x90 [ 499.580446][ T9888] ? sockfs_init_fs_context+0x70/0x70 [ 499.580485][ T9888] new_inode_pseudo+0x38/0x190 [ 499.580508][ T9888] __sock_create+0x122/0x4e0 [ 499.580531][ T9888] __sys_socketpair+0x1dc/0x810 [ 499.580554][ T9888] __x64_sys_socketpair+0x4e/0x60 [ 499.580575][ T9888] do_syscall_64+0x44/0xd0 [ 499.580640][ T9888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 499.580663][ T9888] RIP: 0033:0x7f9204835059 [ 499.580679][ T9888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 499.580781][ T9888] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 499.580803][ T9888] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 499.580843][ T9888] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 499.580857][ T9888] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.580870][ T9888] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.580884][ T9888] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 499.580900][ T9888] [ 499.580941][ T9888] socket: no more sockets [ 499.606039][ T9922] FAULT_INJECTION: forcing a failure. [ 499.606039][ T9922] name failslab, interval 1, probability 0, space 0, times 0 [ 499.606065][ T9922] CPU: 0 PID: 9922 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 499.606162][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.606175][ T9922] Call Trace: [ 499.606181][ T9922] [ 499.606188][ T9922] dump_stack_lvl+0xd6/0x122 [ 499.606218][ T9922] dump_stack+0x11/0x1b [ 499.606242][ T9922] should_fail+0x23c/0x250 [ 499.606266][ T9922] ? io_wq_create+0x7b/0x6f0 [ 499.606349][ T9922] __should_failslab+0x81/0x90 [ 499.606375][ T9922] should_failslab+0x5/0x20 [ 499.606401][ T9922] __kmalloc+0x6f/0x370 [ 499.606478][ T9922] io_wq_create+0x7b/0x6f0 [ 499.606504][ T9922] ? kmem_cache_alloc_trace+0x24b/0x350 [ 499.606529][ T9922] ? io_uring_alloc_task_context+0xef/0x2e0 [ 499.606606][ T9922] io_uring_alloc_task_context+0x19d/0x2e0 [ 499.606716][ T9922] ? io_wq_free_work+0xd0/0xd0 [ 499.606738][ T9922] ? tctx_task_work+0xc90/0xc90 [ 499.606760][ T9922] io_sq_offload_create+0x7f8/0x84e [ 499.606815][ T9922] io_uring_create+0x35f/0x754 [ 499.606900][ T9922] __x64_sys_io_uring_setup+0x118/0x130 [ 499.606924][ T9922] do_syscall_64+0x44/0xd0 [ 499.606944][ T9922] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 499.606995][ T9922] RIP: 0033:0x7fb13ca1c059 [ 499.607041][ T9922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 499.607059][ T9922] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 499.607118][ T9922] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 499.607131][ T9922] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 499.607145][ T9922] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.607157][ T9922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:03:33 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x37, 0x2, {0x0, 0x32a, 0x7, 0x0, 0x5, ':\\^!@'}}, 0x23) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff8186, 0x2f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x88}}, 0x4000000) 00:03:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) syz_open_pts(r0, 0x10000) 00:03:33 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/116}) 00:03:33 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x810) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x6e, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) 00:03:33 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 11) 00:03:33 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 14) 00:03:33 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async, rerun: 32) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) (async, rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x810) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x6e, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) [ 499.607170][ T9922] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 499.607184][ T9922] [ 500.000106][ T9931] FAULT_INJECTION: forcing a failure. [ 500.000106][ T9931] name failslab, interval 1, probability 0, space 0, times 0 [ 500.012846][ T9931] CPU: 1 PID: 9931 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 500.012883][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.012895][ T9931] Call Trace: [ 500.012900][ T9931] [ 500.012906][ T9931] dump_stack_lvl+0xd6/0x122 [ 500.012937][ T9931] dump_stack+0x11/0x1b [ 500.012974][ T9931] should_fail+0x23c/0x250 [ 500.012997][ T9931] ? security_inode_alloc+0x30/0x180 [ 500.013019][ T9931] __should_failslab+0x81/0x90 [ 500.013065][ T9931] should_failslab+0x5/0x20 00:03:33 executing program 5: sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2d, 0x101, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) 00:03:33 executing program 5: sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2d, 0x101, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2d, 0x101, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) (async) 00:03:33 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 12) 00:03:33 executing program 5: sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2d, 0x101, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2d, 0x101, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) (async) 00:03:33 executing program 5: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x802, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x497, 0x600080) [ 500.013151][ T9931] kmem_cache_alloc+0x4f/0x320 [ 500.013176][ T9931] security_inode_alloc+0x30/0x180 [ 500.013199][ T9931] inode_init_always+0x214/0x3e0 [ 500.013291][ T9931] ? sockfs_init_fs_context+0x70/0x70 [ 500.013319][ T9931] new_inode_pseudo+0x6f/0x190 [ 500.013383][ T9931] __sock_create+0x122/0x4e0 [ 500.013406][ T9931] __sys_socketpair+0x1dc/0x810 [ 500.013490][ T9931] __x64_sys_socketpair+0x4e/0x60 [ 500.013512][ T9931] do_syscall_64+0x44/0xd0 [ 500.013533][ T9931] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.013637][ T9931] RIP: 0033:0x7f9204835059 [ 500.013652][ T9931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 500.013670][ T9931] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 500.013721][ T9931] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 500.013734][ T9931] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 500.013746][ T9931] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.013759][ T9931] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.013772][ T9931] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 500.013790][ T9931] [ 500.013852][ T9931] socket: no more sockets [ 500.019609][ T9933] FAULT_INJECTION: forcing a failure. [ 500.019609][ T9933] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 500.130170][ T9953] FAULT_INJECTION: forcing a failure. [ 500.130170][ T9953] name failslab, interval 1, probability 0, space 0, times 0 [ 500.143475][ T9933] CPU: 1 PID: 9933 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 500.143504][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.143515][ T9933] Call Trace: [ 500.143522][ T9933] [ 500.251917][ T9933] dump_stack_lvl+0xd6/0x122 [ 500.251947][ T9933] dump_stack+0x11/0x1b [ 500.251966][ T9933] should_fail+0x23c/0x250 [ 500.252025][ T9933] __alloc_pages_bulk+0x10e/0x710 [ 500.252042][ T9933] ? should_fail+0xd6/0x250 [ 500.252061][ T9933] alloc_pages_bulk_array_mempolicy+0x43f/0x540 [ 500.252083][ T9933] __vmalloc_area_node+0x242/0x8d0 [ 500.252107][ T9933] __vmalloc_node_range+0x191/0x1f0 [ 500.252142][ T9933] ? dup_task_struct+0x63/0x680 [ 500.252164][ T9933] dup_task_struct+0x496/0x680 [ 500.252263][ T9933] ? copy_process+0x3f9/0x2f30 [ 500.252284][ T9933] copy_process+0x3f9/0x2f30 [ 500.252306][ T9933] ? avc_has_perm_noaudit+0x1c0/0x270 [ 500.252326][ T9933] ? io_mem_alloc+0x40/0x40 [ 500.252410][ T9933] create_io_thread+0x95/0xc0 [ 500.252432][ T9933] ? io_mem_alloc+0x40/0x40 [ 500.252453][ T9933] io_sq_offload_create+0x7a5/0x84e [ 500.252529][ T9933] io_uring_create+0x35f/0x754 [ 500.252593][ T9933] __x64_sys_io_uring_setup+0x118/0x130 [ 500.252613][ T9933] do_syscall_64+0x44/0xd0 [ 500.252632][ T9933] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.252653][ T9933] RIP: 0033:0x7fb13ca1c059 [ 500.252667][ T9933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 500.252685][ T9933] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 500.252702][ T9933] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 500.252714][ T9933] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 500.252726][ T9933] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.252760][ T9933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.252771][ T9933] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 500.252786][ T9933] [ 500.252793][ T9953] CPU: 0 PID: 9953 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 500.252885][ T9953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.252897][ T9953] Call Trace: [ 500.252902][ T9953] [ 500.252909][ T9953] dump_stack_lvl+0xd6/0x122 [ 500.252938][ T9953] dump_stack+0x11/0x1b [ 500.253014][ T9953] should_fail+0x23c/0x250 [ 500.253042][ T9953] ? sk_prot_alloc+0x41/0x190 [ 500.253150][ T9953] __should_failslab+0x81/0x90 [ 500.253206][ T9953] should_failslab+0x5/0x20 [ 500.253262][ T9953] kmem_cache_alloc+0x4f/0x320 [ 500.253289][ T9953] sk_prot_alloc+0x41/0x190 [ 500.253447][ T9953] sk_alloc+0x2f/0x360 [ 500.253471][ T9953] qrtr_create+0x53/0x100 [ 500.253549][ T9953] __sock_create+0x2cc/0x4e0 [ 500.253591][ T9953] __sys_socketpair+0x1dc/0x810 [ 500.253610][ T9953] __x64_sys_socketpair+0x4e/0x60 [ 500.253633][ T9953] do_syscall_64+0x44/0xd0 [ 500.253652][ T9953] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.253677][ T9953] RIP: 0033:0x7f9204835059 [ 500.253691][ T9953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 500.253710][ T9953] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 00:03:33 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080)) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x37, 0x2, {0x0, 0x32a, 0x7, 0x0, 0x5, ':\\^!@'}}, 0x23) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff8186, 0x2f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x88}}, 0x4000000) 00:03:33 executing program 5: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x802, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x497, 0x600080) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x802, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000140), 0x497, 0x600080) (async) 00:03:33 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 13) 00:03:33 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 15) 00:03:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000c00)) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000080)={0xaec, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x63}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0xf2, 0x7f, [@measure_req={0x26, 0xec, {0x8, 0xdf, 0xf4, "0fc256bbe7e58ac4d4487522140859be441c5727239e7aad5acac1e4a4ab15b13e7251bf430f23fb7e8b62b8e545dad278a4a1e55b477d22243e3ee8289a433d0f96d62c1cdf80e59e7cbc730f988e1567e16284985aa33af03851313988cf433ffbfaad5256c2aa0ded4ca246c81572104b2a5fc481ff951c4d4903a52fa3bf652ad0d3c0fc11178f2c02635604cfc0bdb1b2a49c5027bacbe9cce8989c4bf3b24bb543dd0a4197540ad3b62118573d7997528234df3b876c22c6df1a5efdcee7316284d45f4b0c9f7cc6bdfe93e76b8420f673a7fb24be13b509124e837dc1ed277d36a99663ba83"}}]}, @NL80211_ATTR_PROBE_RESP={0x2af, 0x91, "de067b89fcf278f381d826f50884bd58cd096f987a6836894b961c70aeeba1a200e7313747fa700f704dcf8bb244797a313762d9df2f548b42c0e923a0cdeac023a806d0fcebbbb761b2ca1bf90b4bee5b259aa9ac74a74047948d4dbbad3cf7b70f5d67714c232fbea7cec21882bb93f88d143d6760d1ba96146573ea4322b1d62b5c3b42aeddc55fed2dab24a75e3d82208709ddde1a71d4a109ecd2e888b1acea2fcbcbbd80c0bffb8a4657ef2c2bc80d0737178b06a96ec308392796eb9dfcfee41ddbe1e5021557af94355a88b2b1529433e28c79d16a642417fc7747a89aca7bf4bb9d1c327fb1ace9b36167cbd850a12817c9f18cdb24115b85bc177474fd9167230a92b74e997f140b2996b7919a3c98fab38e0f253694650e289ac583d09c47492090ea82377b90e7f7ec925d92c58ec6a2af89324863835e250a1acd6b57b264212f3c437c0995fccd6bb47ad4f846588157f7428b99854d3f4b81599480e567233bec27c08d1b2c1a964bb90dcb444dfc11f77834cae2cb7140ffb050b537dbe10e2c8557f8091ffff5602328eaa04a65aa5c50c1a512f0ff79d7e12406e2505b003fb0128a32861526984783164caa4ba21e3c7b6e9adee605930d2b919f91bac5f6e2c0f441c2f7d92b99f7ab36739d8bf3f061faf65c4acc99fddbb259b4e121961fb368c946a036add36b9e3cf1ccb4ab5f811502ed8222247c8af43e783f83bd76a80da9f7d0b0cabf2a416f7165a2e7c12150a02d62670f4fe31d7077353bfb31ec16aec30bf682f6e55571a7942d306748f47a23ce6370b354066d89eb61c23e3c5bb206dce7f7414aa20048c8dbb36a16e604f492554abaf55ef439d074d9cf6981a1090b98198ac82cfa4e9eac878244303b06cdbd9633ea44123ebd0c814547bf7c2745ec723612299466306c50ec6f7b99d60ac0180929f9e78b051d0b0f1bdc"}, @NL80211_ATTR_BEACON_TAIL={0x12a, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x2}, 0xd7, 0x5, @device_b, 0xc5, 0x0, 0xffffff9e}}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x7, @broadcast, 0x3, "", 0x1, 0x0, @device_a, 0x40}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x4e, 0xff, @device_b, 0x1, 0x400, 0x5}}, @random={0x0, 0xc4, "5768b73e71b686fbb6141862e317fffcf107a560560412250bb4914c72da100ec3c7ade21332a8dc8b993bc0557c1e367b783de75097e06f1e505bf5d3b1c60bdb7f2a4de92bf12e8b4ae6e5f78d58a7c8e0991064ce8fcaa3d01bea2610761bdf892fbffed41733f2601b29f8780bb5ee473ecaa9ca1ea13160b9de8ec58eb6966db0ccf604786742be3aed01705168e3fd5f96a8a02ade69bd47697e6235d693e4c30861598c60750ec6eb73e93885a9c5f4958fee0af95d99294ed65944da0f90fab4"}, @dsss={0x3, 0x1, 0x2}, @gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x4, [{0x30}, {0x30, 0x1}, {0x60, 0x1}, {0xc}]}]}, @NL80211_ATTR_PROBE_RESP={0x5ec, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}]}, 0xaec}, 0x1, 0x0, 0x0, 0x2004c084}, 0x4004000) [ 500.253802][ T9953] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 500.253831][ T9953] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 500.253844][ T9953] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.253857][ T9953] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.253870][ T9953] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 500.253933][ T9953] [ 500.639186][ T9966] FAULT_INJECTION: forcing a failure. [ 500.639186][ T9966] name failslab, interval 1, probability 0, space 0, times 0 [ 500.639543][ T9965] FAULT_INJECTION: forcing a failure. [ 500.639543][ T9965] name failslab, interval 1, probability 0, space 0, times 0 [ 500.651891][ T9966] CPU: 0 PID: 9966 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 500.675422][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.685470][ T9966] Call Trace: [ 500.688801][ T9966] [ 500.691728][ T9966] dump_stack_lvl+0xd6/0x122 [ 500.696368][ T9966] dump_stack+0x11/0x1b [ 500.700620][ T9966] should_fail+0x23c/0x250 [ 500.705045][ T9966] ? selinux_sk_alloc_security+0x61/0x120 [ 500.710808][ T9966] __should_failslab+0x81/0x90 [ 500.715642][ T9966] should_failslab+0x5/0x20 [ 500.720255][ T9966] kmem_cache_alloc_trace+0x52/0x350 [ 500.725536][ T9966] ? __rcu_read_unlock+0x5c/0x290 [ 500.730565][ T9966] selinux_sk_alloc_security+0x61/0x120 [ 500.736112][ T9966] security_sk_alloc+0x45/0x90 [ 500.740878][ T9966] sk_prot_alloc+0xd2/0x190 [ 500.745425][ T9966] sk_alloc+0x2f/0x360 [ 500.749498][ T9966] qrtr_create+0x53/0x100 [ 500.753829][ T9966] __sock_create+0x2cc/0x4e0 [ 500.758464][ T9966] __sys_socketpair+0x1dc/0x810 [ 500.763307][ T9966] __x64_sys_socketpair+0x4e/0x60 [ 500.768370][ T9966] do_syscall_64+0x44/0xd0 [ 500.772817][ T9966] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.778716][ T9966] RIP: 0033:0x7f9204835059 [ 500.783153][ T9966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 500.802858][ T9966] RSP: 002b:00007f92039ab168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 500.811328][ T9966] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f9204835059 [ 500.819291][ T9966] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 500.827255][ T9966] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 00:03:34 executing program 5: sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x802, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000140), 0x497, 0x600080) [ 500.835215][ T9966] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.843180][ T9966] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 500.851162][ T9966] [ 500.854173][ T9965] CPU: 1 PID: 9965 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 500.865191][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.875250][ T9965] Call Trace: [ 500.878601][ T9965] [ 500.881536][ T9965] dump_stack_lvl+0xd6/0x122 [ 500.886146][ T9965] dump_stack+0x11/0x1b [ 500.890446][ T9965] should_fail+0x23c/0x250 [ 500.894876][ T9965] ? io_rsrc_node_switch_start+0x53/0x110 [ 500.900647][ T9965] __should_failslab+0x81/0x90 [ 500.905434][ T9965] should_failslab+0x5/0x20 [ 500.905490][ T9965] kmem_cache_alloc_trace+0x52/0x350 [ 500.905531][ T9965] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 500.905557][ T9965] ? io_sq_offload_create+0x826/0x84e [ 500.905583][ T9965] io_rsrc_node_switch_start+0x53/0x110 [ 500.905681][ T9965] io_uring_create+0x37a/0x754 00:03:34 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 14) 00:03:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:34 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0xa49051696ab9d9a6, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40448c0}, 0x20000004) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xbf97fec09360b0bb}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) [ 500.905708][ T9965] __x64_sys_io_uring_setup+0x118/0x130 [ 500.905734][ T9965] do_syscall_64+0x44/0xd0 [ 500.905755][ T9965] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.905779][ T9965] RIP: 0033:0x7fb13ca1c059 [ 500.905833][ T9965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 500.972270][ T9980] FAULT_INJECTION: forcing a failure. [ 500.972270][ T9980] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:03:34 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0xa49051696ab9d9a6, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40448c0}, 0x20000004) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xbf97fec09360b0bb}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) [ 500.977129][ T9965] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 500.977161][ T9965] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 500.977176][ T9965] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 501.014476][ T9965] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 00:03:34 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) [ 501.014493][ T9965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.014504][ T9965] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 501.014519][ T9965] [ 501.014527][ T9980] CPU: 0 PID: 9980 Comm: syz-executor.3 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 501.014550][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.014562][ T9980] Call Trace: [ 501.014567][ T9980] [ 501.014573][ T9980] dump_stack_lvl+0xd6/0x122 [ 501.014601][ T9980] dump_stack+0x11/0x1b [ 501.014683][ T9980] should_fail+0x23c/0x250 [ 501.014708][ T9980] should_fail_usercopy+0x16/0x20 [ 501.014809][ T9980] _copy_to_user+0x1c/0x90 [ 501.014826][ T9980] simple_read_from_buffer+0xab/0x120 [ 501.014845][ T9980] proc_fail_nth_read+0x10d/0x150 [ 501.014874][ T9980] ? proc_fault_inject_write+0x230/0x230 [ 501.014972][ T9980] vfs_read+0x1e6/0x750 [ 501.014994][ T9980] ? __fget_files+0x1d2/0x210 [ 501.015015][ T9980] ksys_read+0xd9/0x190 [ 501.015036][ T9980] __x64_sys_read+0x3e/0x50 [ 501.015058][ T9980] do_syscall_64+0x44/0xd0 [ 501.015088][ T9980] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.015256][ T9980] RIP: 0033:0x7f92047e7c0c [ 501.015271][ T9980] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 00:03:34 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (fail_nth: 1) 00:03:34 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 16) 00:03:34 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0xa49051696ab9d9a6, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40448c0}, 0x20000004) (async, rerun: 32) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) (async, rerun: 64) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xbf97fec09360b0bb}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) (rerun: 64) 00:03:34 executing program 3: socketpair(0x2, 0x2, 0x0, &(0x7f0000000000)) 00:03:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000c00)) (async, rerun: 32) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000080)={0xaec, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x63}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0xf2, 0x7f, [@measure_req={0x26, 0xec, {0x8, 0xdf, 0xf4, "0fc256bbe7e58ac4d4487522140859be441c5727239e7aad5acac1e4a4ab15b13e7251bf430f23fb7e8b62b8e545dad278a4a1e55b477d22243e3ee8289a433d0f96d62c1cdf80e59e7cbc730f988e1567e16284985aa33af03851313988cf433ffbfaad5256c2aa0ded4ca246c81572104b2a5fc481ff951c4d4903a52fa3bf652ad0d3c0fc11178f2c02635604cfc0bdb1b2a49c5027bacbe9cce8989c4bf3b24bb543dd0a4197540ad3b62118573d7997528234df3b876c22c6df1a5efdcee7316284d45f4b0c9f7cc6bdfe93e76b8420f673a7fb24be13b509124e837dc1ed277d36a99663ba83"}}]}, @NL80211_ATTR_PROBE_RESP={0x2af, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x12a, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x2}, 0xd7, 0x5, @device_b, 0xc5, 0x0, 0xffffff9e}}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x7, @broadcast, 0x3, "", 0x1, 0x0, @device_a, 0x40}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x4e, 0xff, @device_b, 0x1, 0x400, 0x5}}, @random={0x0, 0xc4, "5768b73e71b686fbb6141862e317fffcf107a560560412250bb4914c72da100ec3c7ade21332a8dc8b993bc0557c1e367b783de75097e06f1e505bf5d3b1c60bdb7f2a4de92bf12e8b4ae6e5f78d58a7c8e0991064ce8fcaa3d01bea2610761bdf892fbffed41733f2601b29f8780bb5ee473ecaa9ca1ea13160b9de8ec58eb6966db0ccf604786742be3aed01705168e3fd5f96a8a02ade69bd47697e6235d693e4c30861598c60750ec6eb73e93885a9c5f4958fee0af95d99294ed65944da0f90fab4"}, @dsss={0x3, 0x1, 0x2}, @gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x4, [{0x30}, {0x30, 0x1}, {0x60, 0x1}, {0xc}]}]}, @NL80211_ATTR_PROBE_RESP={0x5ec, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}]}, 0xaec}, 0x1, 0x0, 0x0, 0x2004c084}, 0x4004000) (rerun: 32) [ 501.015343][ T9980] RSP: 002b:00007f92039ab160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.015432][ T9980] RAX: ffffffffffffffda RBX: 00007f9204947f60 RCX: 00007f92047e7c0c [ 501.015447][ T9980] RDX: 000000000000000f RSI: 00007f92039ab1e0 RDI: 0000000000000003 [ 501.015486][ T9980] RBP: 00007f92039ab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 501.015547][ T9980] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.015559][ T9980] R13: 00007ffedec27bef R14: 00007f92039ab300 R15: 0000000000022000 [ 501.015575][ T9980] 00:03:34 executing program 3: socketpair(0x5, 0x2, 0x0, &(0x7f0000000000)) 00:03:34 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20048001) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48009) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd27, 0x735, {{}, {@void, @val={0xc, 0x99, {0x5, 0x18}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x188e08}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}}, 0x4004000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc81}, 0x8048001) [ 501.268721][T10002] FAULT_INJECTION: forcing a failure. [ 501.268721][T10002] name failslab, interval 1, probability 0, space 0, times 0 [ 501.281416][T10002] CPU: 1 PID: 10002 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 501.292458][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:03:34 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:34 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000000)) 00:03:34 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 17) 00:03:34 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20048001) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48009) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd27, 0x735, {{}, {@void, @val={0xc, 0x99, {0x5, 0x18}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x188e08}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}}, 0x4004000) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc81}, 0x8048001) 00:03:34 executing program 3: socketpair(0xf, 0x2, 0x0, &(0x7f0000000000)) [ 501.292509][T10002] Call Trace: [ 501.292514][T10002] [ 501.292520][T10002] dump_stack_lvl+0xd6/0x122 [ 501.292549][T10002] dump_stack+0x11/0x1b [ 501.292579][T10002] should_fail+0x23c/0x250 00:03:34 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x2, 0x0, 0x0) 00:03:34 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 18) 00:03:34 executing program 3: socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) [ 501.292603][T10002] ? io_uring_alloc_task_context+0x49/0x2e0 [ 501.292757][T10002] __should_failslab+0x81/0x90 [ 501.292781][T10002] should_failslab+0x5/0x20 [ 501.292818][T10002] kmem_cache_alloc_trace+0x52/0x350 [ 501.292900][T10002] io_uring_alloc_task_context+0x49/0x2e0 [ 501.292924][T10002] ? io_mem_alloc+0x40/0x40 [ 501.292990][T10002] io_sq_offload_create+0x7f8/0x84e [ 501.293014][T10002] io_uring_create+0x35f/0x754 [ 501.293038][T10002] __x64_sys_io_uring_setup+0x118/0x130 [ 501.293131][T10002] do_syscall_64+0x44/0xd0 [ 501.293172][T10002] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.293198][T10002] RIP: 0033:0x7fb13ca1c059 [ 501.293214][T10002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 501.293285][T10002] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 501.293308][T10002] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 501.293322][T10002] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 501.293401][T10002] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 501.293415][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.293429][T10002] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 501.293445][T10002] [ 501.310695][T10008] FAULT_INJECTION: forcing a failure. [ 501.310695][T10008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.310721][T10008] CPU: 1 PID: 10008 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 501.310744][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.310756][T10008] Call Trace: [ 501.310779][T10008] [ 501.310788][T10008] dump_stack_lvl+0xd6/0x122 [ 501.310882][T10008] dump_stack+0x11/0x1b [ 501.310905][T10008] should_fail+0x23c/0x250 [ 501.311005][T10008] should_fail_usercopy+0x16/0x20 [ 501.311026][T10008] _copy_to_user+0x1c/0x90 [ 501.311070][T10008] simple_read_from_buffer+0xab/0x120 [ 501.311093][T10008] proc_fail_nth_read+0x10d/0x150 [ 501.311127][T10008] ? proc_fault_inject_write+0x230/0x230 [ 501.311153][T10008] vfs_read+0x1e6/0x750 [ 501.311173][T10008] ? __fget_files+0x1d2/0x210 [ 501.311247][T10008] ksys_read+0xd9/0x190 [ 501.311281][T10008] __x64_sys_read+0x3e/0x50 [ 501.311300][T10008] do_syscall_64+0x44/0xd0 [ 501.311322][T10008] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.311390][T10008] RIP: 0033:0x7fd336d8cc0c [ 501.311403][T10008] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 501.311419][T10008] RSP: 002b:00007fd335f50160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.311445][T10008] RAX: ffffffffffffffda RBX: 00007fd336eecf60 RCX: 00007fd336d8cc0c [ 501.311525][T10008] RDX: 000000000000000f RSI: 00007fd335f501e0 RDI: 0000000000000004 [ 501.311538][T10008] RBP: 00007fd335f501d0 R08: 0000000000000000 R09: 0000000000000000 [ 501.311557][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.311651][T10008] R13: 00007ffcde73b09f R14: 00007fd335f50300 R15: 0000000000022000 [ 501.311667][T10008] [ 501.358044][T10023] FAULT_INJECTION: forcing a failure. [ 501.358044][T10023] name failslab, interval 1, probability 0, space 0, times 0 [ 501.358073][T10023] CPU: 1 PID: 10023 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 501.358104][T10023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.358117][T10023] Call Trace: [ 501.358123][T10023] [ 501.358131][T10023] dump_stack_lvl+0xd6/0x122 [ 501.358158][T10023] dump_stack+0x11/0x1b [ 501.358182][T10023] should_fail+0x23c/0x250 [ 501.358203][T10023] ? io_wq_create+0x7b/0x6f0 [ 501.358229][T10023] __should_failslab+0x81/0x90 [ 501.358273][T10023] should_failslab+0x5/0x20 [ 501.358299][T10023] __kmalloc+0x6f/0x370 [ 501.358322][T10023] io_wq_create+0x7b/0x6f0 [ 501.358427][T10023] ? kmem_cache_alloc_trace+0x24b/0x350 [ 501.358453][T10023] ? io_uring_alloc_task_context+0xef/0x2e0 [ 501.358592][T10023] io_uring_alloc_task_context+0x19d/0x2e0 [ 501.358618][T10023] ? io_wq_free_work+0xd0/0xd0 [ 501.358642][T10023] ? tctx_task_work+0xc90/0xc90 [ 501.358666][T10023] io_sq_offload_create+0x7f8/0x84e [ 501.358736][T10023] io_uring_create+0x35f/0x754 [ 501.358828][T10023] __x64_sys_io_uring_setup+0x118/0x130 [ 501.358852][T10023] do_syscall_64+0x44/0xd0 [ 501.358872][T10023] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.358929][T10023] RIP: 0033:0x7fb13ca1c059 [ 501.358945][T10023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 501.358963][T10023] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 501.359015][T10023] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 501.359030][T10023] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 501.359044][T10023] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 501.359057][T10023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.359071][T10023] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 501.359088][T10023] [ 501.397593][T10033] FAULT_INJECTION: forcing a failure. [ 501.397593][T10033] name failslab, interval 1, probability 0, space 0, times 0 [ 501.397668][T10033] CPU: 1 PID: 10033 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 501.397696][T10033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.397707][T10033] Call Trace: [ 501.397712][T10033] [ 501.397718][T10033] dump_stack_lvl+0xd6/0x122 [ 501.397747][T10033] dump_stack+0x11/0x1b [ 501.397807][T10033] should_fail+0x23c/0x250 [ 501.397830][T10033] __should_failslab+0x81/0x90 [ 501.397856][T10033] should_failslab+0x5/0x20 [ 501.397883][T10033] kmem_cache_alloc_node_trace+0x61/0x310 [ 501.397935][T10033] ? __cpuhp_state_add_instance_cpuslocked+0x1dc/0x330 [ 501.397960][T10033] ? __cpuhp_state_add_instance+0x87/0x170 [ 501.397982][T10033] ? io_wq_create+0x217/0x6f0 [ 501.398009][T10033] io_wq_create+0x217/0x6f0 [ 501.398067][T10033] io_uring_alloc_task_context+0x19d/0x2e0 [ 501.398145][T10033] ? io_wq_free_work+0xd0/0xd0 [ 501.398194][T10033] ? tctx_task_work+0xc90/0xc90 [ 501.398218][T10033] io_sq_offload_create+0x7f8/0x84e [ 501.398245][T10033] io_uring_create+0x35f/0x754 [ 501.398335][T10033] __x64_sys_io_uring_setup+0x118/0x130 [ 501.398359][T10033] do_syscall_64+0x44/0xd0 [ 501.398381][T10033] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.398406][T10033] RIP: 0033:0x7fb13ca1c059 [ 501.398421][T10033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 501.398495][T10033] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 501.398516][T10033] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 501.398530][T10033] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 501.398550][T10033] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 00:03:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x1a8, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$TIOCCBRK(r0, 0x5428) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000c00)) (async) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000080)={0xaec, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x63}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0xf2, 0x7f, [@measure_req={0x26, 0xec, {0x8, 0xdf, 0xf4, "0fc256bbe7e58ac4d4487522140859be441c5727239e7aad5acac1e4a4ab15b13e7251bf430f23fb7e8b62b8e545dad278a4a1e55b477d22243e3ee8289a433d0f96d62c1cdf80e59e7cbc730f988e1567e16284985aa33af03851313988cf433ffbfaad5256c2aa0ded4ca246c81572104b2a5fc481ff951c4d4903a52fa3bf652ad0d3c0fc11178f2c02635604cfc0bdb1b2a49c5027bacbe9cce8989c4bf3b24bb543dd0a4197540ad3b62118573d7997528234df3b876c22c6df1a5efdcee7316284d45f4b0c9f7cc6bdfe93e76b8420f673a7fb24be13b509124e837dc1ed277d36a99663ba83"}}]}, @NL80211_ATTR_PROBE_RESP={0x2af, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x12a, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x2}, 0xd7, 0x5, @device_b, 0xc5, 0x0, 0xffffff9e}}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x7, @broadcast, 0x3, "", 0x1, 0x0, @device_a, 0x40}}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x4e, 0xff, @device_b, 0x1, 0x400, 0x5}}, @random={0x0, 0xc4, "5768b73e71b686fbb6141862e317fffcf107a560560412250bb4914c72da100ec3c7ade21332a8dc8b993bc0557c1e367b783de75097e06f1e505bf5d3b1c60bdb7f2a4de92bf12e8b4ae6e5f78d58a7c8e0991064ce8fcaa3d01bea2610761bdf892fbffed41733f2601b29f8780bb5ee473ecaa9ca1ea13160b9de8ec58eb6966db0ccf604786742be3aed01705168e3fd5f96a8a02ade69bd47697e6235d693e4c30861598c60750ec6eb73e93885a9c5f4958fee0af95d99294ed65944da0f90fab4"}, @dsss={0x3, 0x1, 0x2}, @gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x4, [{0x30}, {0x30, 0x1}, {0x60, 0x1}, {0xc}]}]}, @NL80211_ATTR_PROBE_RESP={0x5ec, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}]}, 0xaec}, 0x1, 0x0, 0x0, 0x2004c084}, 0x4004000) 00:03:35 executing program 3: socketpair(0x11, 0x2, 0x0, &(0x7f0000000000)) 00:03:35 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20048001) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48009) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd27, 0x735, {{}, {@void, @val={0xc, 0x99, {0x5, 0x18}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x188e08}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}}, 0x4004000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc81}, 0x8048001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20048001) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48009) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd27, 0x735, {{}, {@void, @val={0xc, 0x99, {0x5, 0x18}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x188e08}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}}, 0x4004000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc81}, 0x8048001) (async) 00:03:35 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x3, 0x0, 0x0) 00:03:35 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 19) [ 501.398564][T10033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.398578][T10033] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 501.398593][T10033] 00:03:35 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x4, 0x0, 0x0) 00:03:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x1a8, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:35 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x1, 0x4) 00:03:35 executing program 3: socketpair(0x2d, 0x2, 0x0, &(0x7f0000000000)) [ 502.166441][T10048] FAULT_INJECTION: forcing a failure. [ 502.166441][T10048] name failslab, interval 1, probability 0, space 0, times 0 [ 502.179142][T10048] CPU: 1 PID: 10048 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 502.190195][T10048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.200338][T10048] Call Trace: [ 502.203624][T10048] [ 502.206558][T10048] dump_stack_lvl+0xd6/0x122 00:03:35 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x1, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x1, 0x4) (async) 00:03:35 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x5, 0x0, 0x0) 00:03:35 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async, rerun: 32) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x1, 0x4) [ 502.211186][T10048] dump_stack+0x11/0x1b [ 502.211289][T10048] should_fail+0x23c/0x250 [ 502.211313][T10048] ? security_inode_alloc+0x30/0x180 [ 502.211336][T10048] __should_failslab+0x81/0x90 [ 502.211361][T10048] should_failslab+0x5/0x20 [ 502.211391][T10048] kmem_cache_alloc+0x4f/0x320 [ 502.211419][T10048] security_inode_alloc+0x30/0x180 [ 502.211440][T10048] inode_init_always+0x214/0x3e0 [ 502.211463][T10048] ? sockfs_init_fs_context+0x70/0x70 [ 502.211541][T10048] new_inode_pseudo+0x6f/0x190 [ 502.211564][T10048] __sock_create+0x122/0x4e0 [ 502.211583][T10048] ? should_fail+0xd6/0x250 [ 502.211603][T10048] sock_create_kern+0x34/0x40 [ 502.211624][T10048] io_uring_create+0x50b/0x754 [ 502.211716][T10048] __x64_sys_io_uring_setup+0x118/0x130 [ 502.211741][T10048] do_syscall_64+0x44/0xd0 [ 502.211763][T10048] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 502.211803][T10048] RIP: 0033:0x7fb13ca1c059 [ 502.211819][T10048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 502.211839][T10048] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 502.211907][T10048] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 502.211964][T10048] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 502.211978][T10048] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 502.211992][T10048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.212006][T10048] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 502.212024][T10048] [ 502.212097][T10048] socket: no more sockets 00:03:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xfffffffffffffffa) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:03:35 executing program 3: socketpair(0x2a, 0x4, 0x0, &(0x7f0000000000)) 00:03:35 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 20) 00:03:35 executing program 5: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x3, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x80) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x15, 0xa, 0x802, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 00:03:35 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x6, 0x0, 0x0) 00:03:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCCONS(r1, 0x541d) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x1a8, 0x0, 0x302, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:35 executing program 3: socketpair(0x2a, 0xa, 0x0, &(0x7f0000000000)) [ 502.232253][ T24] audit: type=1400 audit(1643414615.385:154): avc: denied { create } for pid=10073 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 502.458151][T10088] FAULT_INJECTION: forcing a failure. [ 502.458151][T10088] name failslab, interval 1, probability 0, space 0, times 0 00:03:35 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/clockevents', 0x4000, 0x97) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) ioctl$KDGKBTYPE(r2, 0x4b31, &(0x7f0000000080)) 00:03:35 executing program 3: socketpair(0x2a, 0x7d, 0x0, &(0x7f0000000000)) [ 502.470795][T10088] CPU: 0 PID: 10088 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 502.481862][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.491999][T10088] Call Trace: [ 502.495281][T10088] [ 502.498239][T10088] dump_stack_lvl+0xd6/0x122 [ 502.502879][T10088] dump_stack+0x11/0x1b [ 502.507052][T10088] should_fail+0x23c/0x250 [ 502.511482][T10088] ? percpu_ref_init+0x96/0x250 [ 502.516353][T10088] ? kzalloc+0x21/0x21 00:03:35 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:35 executing program 3: socketpair(0x2a, 0x2, 0x2, &(0x7f0000000000)) 00:03:35 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x7, 0x0, 0x0) [ 502.520437][T10088] __should_failslab+0x81/0x90 [ 502.525220][T10088] should_failslab+0x5/0x20 [ 502.529760][T10088] kmem_cache_alloc_trace+0x52/0x350 [ 502.535103][T10088] ? kzalloc+0x21/0x21 [ 502.539193][T10088] percpu_ref_init+0x96/0x250 [ 502.543962][T10088] io_rsrc_node_switch_start+0x71/0x110 [ 502.549576][T10088] io_uring_create+0x37a/0x754 [ 502.554364][T10088] __x64_sys_io_uring_setup+0x118/0x130 [ 502.559977][T10088] do_syscall_64+0x44/0xd0 [ 502.564409][T10088] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 502.570321][T10088] RIP: 0033:0x7fb13ca1c059 [ 502.574757][T10088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 502.594386][T10088] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 502.594415][T10088] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 00:03:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xfffffffffffffffa) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) ioctl$TCSBRK(r0, 0x5409, 0xfffffffffffffffa) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) 00:03:35 executing program 5: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x3, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x80) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x15, 0xa, 0x802, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x3, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x80) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x15, 0xa, 0x802, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 00:03:35 executing program 3: socketpair(0x2a, 0x2, 0x3, &(0x7f0000000000)) 00:03:35 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 21) 00:03:35 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x8, 0x0, 0x0) 00:03:35 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDENABIO(r0, 0x4b36) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/clockevents', 0x4000, 0x97) (async, rerun: 64) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (rerun: 64) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) (async, rerun: 64) ioctl$KDGKBTYPE(r2, 0x4b31, &(0x7f0000000080)) (rerun: 64) [ 502.594429][T10088] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 502.594442][T10088] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 502.594455][T10088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.594510][T10088] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 502.594528][T10088] 00:03:35 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) [ 502.676555][T10129] FAULT_INJECTION: forcing a failure. [ 502.676555][T10129] name failslab, interval 1, probability 0, space 0, times 0 [ 502.689308][T10129] CPU: 0 PID: 10129 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 502.689339][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.689382][T10129] Call Trace: [ 502.689389][T10129] [ 502.689395][T10129] dump_stack_lvl+0xd6/0x122 [ 502.689432][T10129] dump_stack+0x11/0x1b 00:03:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xfffffffffffffffa) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) ioctl$TCSBRK(r0, 0x5409, 0xfffffffffffffffa) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) 00:03:35 executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/clockevents', 0x4000, 0x97) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) ioctl$KDGKBTYPE(r2, 0x4b31, &(0x7f0000000080)) [ 502.689534][T10129] should_fail+0x23c/0x250 [ 502.689556][T10129] ? selinux_sk_alloc_security+0x61/0x120 [ 502.689580][T10129] __should_failslab+0x81/0x90 [ 502.689622][T10129] should_failslab+0x5/0x20 [ 502.744978][T10129] kmem_cache_alloc_trace+0x52/0x350 [ 502.750296][T10129] ? __rcu_read_unlock+0x5c/0x290 [ 502.755354][T10129] selinux_sk_alloc_security+0x61/0x120 [ 502.760925][T10129] security_sk_alloc+0x45/0x90 [ 502.765778][T10129] sk_prot_alloc+0xd2/0x190 [ 502.770331][T10129] sk_alloc+0x2f/0x360 00:03:35 executing program 3: socketpair(0x2a, 0x2, 0x4, &(0x7f0000000000)) 00:03:35 executing program 5: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x3, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x80) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x15, 0xa, 0x802, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x3, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x80) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x15, 0xa, 0x802, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 00:03:35 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xb, 0x0, 0x0) [ 502.774428][T10129] unix_create1+0xa3/0x420 [ 502.778915][T10129] unix_create+0xfb/0x120 [ 502.783261][T10129] __sock_create+0x2cc/0x4e0 [ 502.787865][T10129] sock_create_kern+0x34/0x40 [ 502.792655][T10129] io_uring_create+0x50b/0x754 [ 502.797434][T10129] __x64_sys_io_uring_setup+0x118/0x130 [ 502.802995][T10129] do_syscall_64+0x44/0xd0 [ 502.807434][T10129] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:03:35 executing program 3: socketpair(0x2a, 0x2, 0x6, &(0x7f0000000000)) 00:03:36 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 22) 00:03:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/l1oip', 0x101000, 0x100) r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x34a6}}, [""]}, 0xfffffec8}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) [ 502.807466][T10129] RIP: 0033:0x7fb13ca1c059 [ 502.807529][T10129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 502.807550][T10129] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 502.807573][T10129] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 502.807588][T10129] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 00:03:36 executing program 3: socketpair(0x2a, 0x2, 0x10, &(0x7f0000000000)) [ 502.807602][T10129] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 502.807615][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.807628][T10129] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 502.807716][T10129] [ 502.853905][T10185] FAULT_INJECTION: forcing a failure. [ 502.853905][T10185] name failslab, interval 1, probability 0, space 0, times 0 00:03:36 executing program 3: socketpair(0x2a, 0x2, 0x2e1, &(0x7f0000000000)) 00:03:36 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xc, 0x0, 0x0) [ 502.916961][T10185] CPU: 0 PID: 10185 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 502.916991][T10185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.917003][T10185] Call Trace: 00:03:36 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 23) 00:03:36 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1a4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1a4}}, 0x800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/typec', 0x400000, 0x118) 00:03:36 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1a4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1a4}}, 0x800) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/typec', 0x400000, 0x118) 00:03:36 executing program 3: socketpair(0x2a, 0x2, 0x300, &(0x7f0000000000)) [ 502.917009][T10185] [ 502.917016][T10185] dump_stack_lvl+0xd6/0x122 [ 502.917044][T10185] dump_stack+0x11/0x1b [ 502.917068][T10185] should_fail+0x23c/0x250 [ 502.917147][T10185] ? new_inode_pseudo+0x5c/0x190 [ 502.917172][T10185] __should_failslab+0x81/0x90 [ 502.917198][T10185] should_failslab+0x5/0x20 [ 502.917292][T10185] kmem_cache_alloc+0x4f/0x320 [ 502.917323][T10185] new_inode_pseudo+0x5c/0x190 00:03:36 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xd, 0x0, 0x0) 00:03:36 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000f6dfdba372f3e3813e5851162b239afedae84a02b3f83ccef6a8976fc617f621fce22b1a86ecb944f638c691ab355f99e94167124ea02cb07e2dfc0184dc04aacb59533f284f34bff13e25c77b1b6cad7d203f4fd067df9108633f4ba77e3dac038240de1e01941bfda39b23ee722180d05e108a433ec563fa48d2a463a1ffea834cf74a4f73c41e6571f8563a3b5aa91ca38e3a609f3d95514c267739109cb46fc71dd4110ba91e2fe3ac37463b1243a3695bc656aa7d91ee9657336a07a45978861531b57e0c2cd88e4c91a173e03dec245859079019cfb228649b6c8873e3624ba7c606b23caa6bb5e8f7052f4b627bb6", @ANYRES16=r2, @ANYBLOB="020026bd7000ffdbdf25010000000000000007410000004c00180000000073797a3000"/98], 0x68}, 0x1, 0x0, 0x0, 0xd9aeadec22697c54}, 0x4040800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b31, &(0x7f0000000000)) 00:03:36 executing program 3: socketpair(0x2a, 0x2, 0x600, &(0x7f0000000000)) 00:03:36 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xe, 0x0, 0x0) [ 502.917348][T10185] alloc_anon_inode+0x1a/0x190 [ 502.917369][T10185] __anon_inode_getfile+0xe0/0x260 [ 502.917526][T10185] anon_inode_getfile_secure+0x36/0x40 [ 502.917550][T10185] io_uring_create+0x554/0x754 [ 502.917575][T10185] __x64_sys_io_uring_setup+0x118/0x130 [ 502.917663][T10185] do_syscall_64+0x44/0xd0 [ 502.917684][T10185] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 502.917721][T10185] RIP: 0033:0x7fb13ca1c059 [ 502.917779][T10185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 502.917877][T10185] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 502.917900][T10185] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 502.917916][T10185] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 502.917930][T10185] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 502.917944][T10185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.917978][T10185] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 502.917994][T10185] [ 502.987839][T10197] FAULT_INJECTION: forcing a failure. [ 502.987839][T10197] name failslab, interval 1, probability 0, space 0, times 0 [ 503.148369][T10197] CPU: 1 PID: 10197 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 503.159394][T10197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.159409][T10197] Call Trace: [ 503.159415][T10197] 00:03:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/l1oip', 0x101000, 0x100) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x34a6}}, [""]}, 0xfffffec8}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async, rerun: 32) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (rerun: 32) 00:03:36 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1a4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1a4}}, 0x800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/typec', 0x400000, 0x118) 00:03:36 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xf, 0x0, 0x0) 00:03:36 executing program 3: socketpair(0x2a, 0x2, 0x2000, &(0x7f0000000000)) [ 503.159422][T10197] dump_stack_lvl+0xd6/0x122 [ 503.159488][T10197] dump_stack+0x11/0x1b [ 503.159511][T10197] should_fail+0x23c/0x250 [ 503.159534][T10197] ? sock_alloc_inode+0x23/0x90 [ 503.159595][T10197] __should_failslab+0x81/0x90 [ 503.159622][T10197] ? sockfs_init_fs_context+0x70/0x70 [ 503.203847][T10197] should_failslab+0x5/0x20 [ 503.208358][T10197] kmem_cache_alloc+0x4f/0x320 00:03:36 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 24) 00:03:36 executing program 3: socketpair(0x2a, 0x2, 0x4000, &(0x7f0000000000)) 00:03:36 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/koneplus', 0x280c2, 0xf2) 00:03:36 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x10, 0x0, 0x0) 00:03:36 executing program 3: socketpair(0x2a, 0x2, 0xe102, &(0x7f0000000000)) [ 503.213211][T10197] ? sockfs_init_fs_context+0x70/0x70 [ 503.213244][T10197] sock_alloc_inode+0x23/0x90 [ 503.213305][T10197] ? sockfs_init_fs_context+0x70/0x70 [ 503.213347][T10197] new_inode_pseudo+0x38/0x190 [ 503.213372][T10197] __sock_create+0x122/0x4e0 [ 503.213393][T10197] ? should_fail+0xd6/0x250 [ 503.213414][T10197] sock_create_kern+0x34/0x40 [ 503.213435][T10197] io_uring_create+0x50b/0x754 [ 503.213524][T10197] __x64_sys_io_uring_setup+0x118/0x130 [ 503.213548][T10197] do_syscall_64+0x44/0xd0 [ 503.213570][T10197] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 503.213655][T10197] RIP: 0033:0x7fb13ca1c059 [ 503.213669][T10197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 503.213686][T10197] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 503.213706][T10197] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 503.213763][T10197] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 503.213785][T10197] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 503.213800][T10197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.213813][T10197] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 503.213903][T10197] [ 503.213981][T10197] socket: no more sockets [ 503.277726][T10235] FAULT_INJECTION: forcing a failure. [ 503.277726][T10235] name failslab, interval 1, probability 0, space 0, times 0 [ 503.277784][T10235] CPU: 0 PID: 10235 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 503.277835][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.277848][T10235] Call Trace: [ 503.277854][T10235] [ 503.277861][T10235] dump_stack_lvl+0xd6/0x122 [ 503.277890][T10235] dump_stack+0x11/0x1b [ 503.277962][T10235] should_fail+0x23c/0x250 [ 503.277986][T10235] ? security_inode_alloc+0x30/0x180 [ 503.278011][T10235] __should_failslab+0x81/0x90 [ 503.278106][T10235] should_failslab+0x5/0x20 [ 503.278131][T10235] kmem_cache_alloc+0x4f/0x320 [ 503.278213][T10235] security_inode_alloc+0x30/0x180 [ 503.278237][T10235] inode_init_always+0x214/0x3e0 [ 503.278280][T10235] ? sockfs_init_fs_context+0x70/0x70 [ 503.278315][T10235] new_inode_pseudo+0x6f/0x190 [ 503.278340][T10235] __sock_create+0x122/0x4e0 [ 503.278361][T10235] ? should_fail+0xd6/0x250 [ 503.278424][T10235] sock_create_kern+0x34/0x40 [ 503.278445][T10235] io_uring_create+0x50b/0x754 [ 503.278473][T10235] __x64_sys_io_uring_setup+0x118/0x130 [ 503.278496][T10235] do_syscall_64+0x44/0xd0 [ 503.278592][T10235] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 503.278616][T10235] RIP: 0033:0x7fb13ca1c059 [ 503.278632][T10235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 503.278652][T10235] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 503.278705][T10235] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 503.278719][T10235] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 00:03:36 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000f6dfdba372f3e3813e5851162b239afedae84a02b3f83ccef6a8976fc617f621fce22b1a86ecb944f638c691ab355f99e94167124ea02cb07e2dfc0184dc04aacb59533f284f34bff13e25c77b1b6cad7d203f4fd067df9108633f4ba77e3dac038240de1e01941bfda39b23ee722180d05e108a433ec563fa48d2a463a1ffea834cf74a4f73c41e6571f8563a3b5aa91ca38e3a609f3d95514c267739109cb46fc71dd4110ba91e2fe3ac37463b1243a3695bc656aa7d91ee9657336a07a45978861531b57e0c2cd88e4c91a173e03dec245859079019cfb228649b6c8873e3624ba7c606b23caa6bb5e8f7052f4b627bb6", @ANYRES16=r2, @ANYBLOB="020026bd7000ffdbdf25010000000000000007410000004c00180000000073797a3000"/98], 0x68}, 0x1, 0x0, 0x0, 0xd9aeadec22697c54}, 0x4040800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b31, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000f6dfdba372f3e3813e5851162b239afedae84a02b3f83ccef6a8976fc617f621fce22b1a86ecb944f638c691ab355f99e94167124ea02cb07e2dfc0184dc04aacb59533f284f34bff13e25c77b1b6cad7d203f4fd067df9108633f4ba77e3dac038240de1e01941bfda39b23ee722180d05e108a433ec563fa48d2a463a1ffea834cf74a4f73c41e6571f8563a3b5aa91ca38e3a609f3d95514c267739109cb46fc71dd4110ba91e2fe3ac37463b1243a3695bc656aa7d91ee9657336a07a45978861531b57e0c2cd88e4c91a173e03dec245859079019cfb228649b6c8873e3624ba7c606b23caa6bb5e8f7052f4b627bb6", @ANYRES16=r2, @ANYBLOB="020026bd7000ffdbdf25010000000000000007410000004c00180000000073797a3000"/98], 0x68}, 0x1, 0x0, 0x0, 0xd9aeadec22697c54}, 0x4040800) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r3, 0x4b31, &(0x7f0000000000)) (async) 00:03:36 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/koneplus', 0x280c2, 0xf2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/koneplus', 0x280c2, 0xf2) (async) 00:03:36 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x11, 0x0, 0x0) 00:03:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/l1oip', 0x101000, 0x100) r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x34a6}}, [""]}, 0xfffffec8}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/l1oip', 0x101000, 0x100) (async) syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x0) (async) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x34a6}}, [""]}, 0xfffffec8}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:36 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 25) 00:03:36 executing program 3: socketpair(0x2a, 0x2, 0x200000, &(0x7f0000000000)) 00:03:36 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/koneplus', 0x280c2, 0xf2) [ 503.278733][T10235] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 503.278746][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.278759][T10235] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 503.278775][T10235] [ 503.278784][T10235] socket: no more sockets 00:03:36 executing program 3: socketpair(0x2a, 0x2, 0x1000000, &(0x7f0000000000)) 00:03:36 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 26) 00:03:36 executing program 3: socketpair(0x2a, 0x2, 0x2000000, &(0x7f0000000000)) 00:03:36 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='T \x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fce4df250900000008003200060400000008003c000400000008002b000010000008000300db94da0ae1e43020a72e746c7843c71303ed62a98a0d20ff3d7d145739053a3b96ede81f30214fd3279713f6671beb3572d05044932cb19b9801ee22595b318e84c73ddbbf9c82f26208e3cf8c82cf1812219752a7fb96da464c16c0c884c0a18b2e0898e3a622cdd7571930935b924aa88b333e35fa937784bd5b2e4d2bd613d7ae4d7c94003f14326bb3d438f6e9", @ANYRES32=0x0, @ANYBLOB="05003700000000000500290000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x10400, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340)) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x193}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0xa0) 00:03:36 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x12, 0x0, 0x0) [ 503.636275][T10251] FAULT_INJECTION: forcing a failure. [ 503.636275][T10251] name failslab, interval 1, probability 0, space 0, times 0 [ 503.649076][T10251] CPU: 1 PID: 10251 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 503.660128][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.660143][T10251] Call Trace: [ 503.660150][T10251] [ 503.660156][T10251] dump_stack_lvl+0xd6/0x122 [ 503.660231][T10251] dump_stack+0x11/0x1b [ 503.660253][T10251] should_fail+0x23c/0x250 [ 503.660276][T10251] ? selinux_sk_alloc_security+0x61/0x120 [ 503.660298][T10251] __should_failslab+0x81/0x90 [ 503.660323][T10251] should_failslab+0x5/0x20 [ 503.660355][T10251] kmem_cache_alloc_trace+0x52/0x350 [ 503.660378][T10251] ? __rcu_read_unlock+0x5c/0x290 [ 503.660446][T10251] selinux_sk_alloc_security+0x61/0x120 [ 503.660466][T10251] security_sk_alloc+0x45/0x90 [ 503.660492][T10251] sk_prot_alloc+0xd2/0x190 [ 503.660661][T10251] sk_alloc+0x2f/0x360 [ 503.660734][T10251] unix_create1+0xa3/0x420 [ 503.660755][T10251] unix_create+0xfb/0x120 [ 503.660773][T10251] __sock_create+0x2cc/0x4e0 [ 503.660832][T10251] sock_create_kern+0x34/0x40 [ 503.660882][T10251] io_uring_create+0x50b/0x754 [ 503.660907][T10251] __x64_sys_io_uring_setup+0x118/0x130 [ 503.660929][T10251] do_syscall_64+0x44/0xd0 [ 503.660952][T10251] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 503.660976][T10251] RIP: 0033:0x7fb13ca1c059 [ 503.660991][T10251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 503.661009][T10251] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 503.661028][T10251] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 503.661100][T10251] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 503.661113][T10251] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 503.661126][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.661138][T10251] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 503.661153][T10251] [ 503.722984][T10278] FAULT_INJECTION: forcing a failure. [ 503.722984][T10278] name failslab, interval 1, probability 0, space 0, times 0 [ 503.723014][T10278] CPU: 0 PID: 10278 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 503.723081][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.723094][T10278] Call Trace: [ 503.723100][T10278] [ 503.723106][T10278] dump_stack_lvl+0xd6/0x122 [ 503.723175][T10278] dump_stack+0x11/0x1b [ 503.723199][T10278] should_fail+0x23c/0x250 [ 503.723221][T10278] ? security_file_alloc+0x30/0x190 [ 503.723245][T10278] __should_failslab+0x81/0x90 [ 503.723322][T10278] should_failslab+0x5/0x20 [ 503.723463][T10278] kmem_cache_alloc+0x4f/0x320 [ 503.723488][T10278] security_file_alloc+0x30/0x190 [ 503.723511][T10278] __alloc_file+0x83/0x1a0 [ 503.723641][T10278] alloc_empty_file+0xcd/0x1c0 [ 503.723662][T10278] alloc_file+0x3a/0x280 [ 503.723693][T10278] alloc_file_pseudo+0xfa/0x150 [ 503.723717][T10278] __anon_inode_getfile+0x14b/0x260 [ 503.723815][T10278] anon_inode_getfile_secure+0x36/0x40 [ 503.723838][T10278] io_uring_create+0x554/0x754 [ 503.723885][T10278] __x64_sys_io_uring_setup+0x118/0x130 [ 503.723908][T10278] do_syscall_64+0x44/0xd0 [ 503.723929][T10278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 503.724006][T10278] RIP: 0033:0x7fb13ca1c059 [ 503.724020][T10278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 503.724039][T10278] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 503.724061][T10278] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 00:03:37 executing program 3: socketpair(0x2a, 0x2, 0x3000000, &(0x7f0000000000)) 00:03:37 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000f6dfdba372f3e3813e5851162b239afedae84a02b3f83ccef6a8976fc617f621fce22b1a86ecb944f638c691ab355f99e94167124ea02cb07e2dfc0184dc04aacb59533f284f34bff13e25c77b1b6cad7d203f4fd067df9108633f4ba77e3dac038240de1e01941bfda39b23ee722180d05e108a433ec563fa48d2a463a1ffea834cf74a4f73c41e6571f8563a3b5aa91ca38e3a609f3d95514c267739109cb46fc71dd4110ba91e2fe3ac37463b1243a3695bc656aa7d91ee9657336a07a45978861531b57e0c2cd88e4c91a173e03dec245859079019cfb228649b6c8873e3624ba7c606b23caa6bb5e8f7052f4b627bb6", @ANYRES16=r2, @ANYBLOB="020026bd7000ffdbdf25010000000000000007410000004c00180000000073797a3000"/98], 0x68}, 0x1, 0x0, 0x0, 0xd9aeadec22697c54}, 0x4040800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b31, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000f6dfdba372f3e3813e5851162b239afedae84a02b3f83ccef6a8976fc617f621fce22b1a86ecb944f638c691ab355f99e94167124ea02cb07e2dfc0184dc04aacb59533f284f34bff13e25c77b1b6cad7d203f4fd067df9108633f4ba77e3dac038240de1e01941bfda39b23ee722180d05e108a433ec563fa48d2a463a1ffea834cf74a4f73c41e6571f8563a3b5aa91ca38e3a609f3d95514c267739109cb46fc71dd4110ba91e2fe3ac37463b1243a3695bc656aa7d91ee9657336a07a45978861531b57e0c2cd88e4c91a173e03dec245859079019cfb228649b6c8873e3624ba7c606b23caa6bb5e8f7052f4b627bb6", @ANYRES16=r2, @ANYBLOB="020026bd7000ffdbdf25010000000000000007410000004c00180000000073797a3000"/98], 0x68}, 0x1, 0x0, 0x0, 0xd9aeadec22697c54}, 0x4040800) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r3, 0x4b31, &(0x7f0000000000)) (async) 00:03:37 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='T \x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fce4df250900000008003200060400000008003c000400000008002b000010000008000300db94da0ae1e43020a72e746c7843c71303ed62a98a0d20ff3d7d145739053a3b96ede81f30214fd3279713f6671beb3572d05044932cb19b9801ee22595b318e84c73ddbbf9c82f26208e3cf8c82cf1812219752a7fb96da464c16c0c884c0a18b2e0898e3a622cdd7571930935b924aa88b333e35fa937784bd5b2e4d2bd613d7ae4d7c94003f14326bb3d438f6e9", @ANYRES32=0x0, @ANYBLOB="05003700000000000500290000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x10400, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340)) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x193}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0xa0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='T \x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fce4df250900000008003200060400000008003c000400000008002b000010000008000300db94da0ae1e43020a72e746c7843c71303ed62a98a0d20ff3d7d145739053a3b96ede81f30214fd3279713f6671beb3572d05044932cb19b9801ee22595b318e84c73ddbbf9c82f26208e3cf8c82cf1812219752a7fb96da464c16c0c884c0a18b2e0898e3a622cdd7571930935b924aa88b333e35fa937784bd5b2e4d2bd613d7ae4d7c94003f14326bb3d438f6e9", @ANYRES32=0x0, @ANYBLOB="05003700000000000500290000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x10400, 0x0) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340)) (async) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x193}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0xa0) (async) 00:03:37 executing program 4: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/10) syz_open_pts(r0, 0x20000) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x7, 0x2, {{0x4, '^}:#'}, 0xffff}}, 0x11) 00:03:37 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 27) 00:03:37 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x13, 0x0, 0x0) 00:03:37 executing program 3: socketpair(0x2a, 0x2, 0x4000000, &(0x7f0000000000)) [ 503.724075][T10278] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 503.724088][T10278] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 503.724102][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.724115][T10278] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 503.724130][T10278] [ 504.140268][T10302] FAULT_INJECTION: forcing a failure. [ 504.140268][T10302] name failslab, interval 1, probability 0, space 0, times 0 [ 504.152990][T10302] CPU: 1 PID: 10302 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 504.164029][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.174093][T10302] Call Trace: [ 504.177379][T10302] [ 504.180375][T10302] dump_stack_lvl+0xd6/0x122 [ 504.184979][T10302] dump_stack+0x11/0x1b 00:03:37 executing program 4: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) (async, rerun: 32) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/10) syz_open_pts(r0, 0x20000) (async) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x7, 0x2, {{0x4, '^}:#'}, 0xffff}}, 0x11) 00:03:37 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x2, 0x0) 00:03:37 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='T \x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fce4df250900000008003200060400000008003c000400000008002b000010000008000300db94da0ae1e43020a72e746c7843c71303ed62a98a0d20ff3d7d145739053a3b96ede81f30214fd3279713f6671beb3572d05044932cb19b9801ee22595b318e84c73ddbbf9c82f26208e3cf8c82cf1812219752a7fb96da464c16c0c884c0a18b2e0898e3a622cdd7571930935b924aa88b333e35fa937784bd5b2e4d2bd613d7ae4d7c94003f14326bb3d438f6e9", @ANYRES32=0x0, @ANYBLOB="05003700000000000500290000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x10400, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000340)) (async) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x193}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0xa0) 00:03:37 executing program 3: socketpair(0x2a, 0x2, 0x6000000, &(0x7f0000000000)) 00:03:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) [ 504.189214][T10302] should_fail+0x23c/0x250 [ 504.193718][T10302] ? security_inode_alloc+0x30/0x180 [ 504.199012][T10302] __should_failslab+0x81/0x90 [ 504.203792][T10302] should_failslab+0x5/0x20 [ 504.208505][T10302] kmem_cache_alloc+0x4f/0x320 [ 504.213289][T10302] ? __rcu_read_unlock+0x5c/0x290 [ 504.218324][T10302] security_inode_alloc+0x30/0x180 [ 504.223456][T10302] inode_init_always+0x214/0x3e0 [ 504.228415][T10302] new_inode_pseudo+0x6f/0x190 [ 504.228445][T10302] alloc_anon_inode+0x1a/0x190 00:03:37 executing program 3: socketpair(0x2a, 0x2, 0x10000000, &(0x7f0000000000)) 00:03:37 executing program 3: socketpair(0x2a, 0x2, 0x40000000, &(0x7f0000000000)) 00:03:37 executing program 3: socketpair(0x2a, 0x2, 0xe1020000, &(0x7f0000000000)) [ 504.228464][T10302] __anon_inode_getfile+0xe0/0x260 [ 504.228510][T10302] anon_inode_getfile_secure+0x36/0x40 [ 504.228533][T10302] io_uring_create+0x554/0x754 [ 504.228559][T10302] __x64_sys_io_uring_setup+0x118/0x130 [ 504.228648][T10302] do_syscall_64+0x44/0xd0 [ 504.228689][T10302] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.228792][T10302] RIP: 0033:0x7fb13ca1c059 00:03:37 executing program 3: socketpair(0x2a, 0x2, 0xfeffffff, &(0x7f0000000000)) [ 504.228808][T10302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 504.228828][T10302] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 504.228850][T10302] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 504.309930][T10302] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 504.309947][T10302] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.309960][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.309973][T10302] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 504.341848][T10302] 00:03:37 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 28) 00:03:37 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x144, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x90}, 0x800) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1080000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@access_uid={'access', 0x3d, r2}}, {@cache_loose}, {@cache_none}, {@access_user}, {@aname={'aname', 0x3d, '\'{!$(]-'}}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '],]*@%'}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/nvram\x00'}}, {@dont_measure}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/nvram\x00'}}]}}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/module/xz_dec', 0x0, 0x8) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000740)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf257b004000"], 0x14}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0xa0, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x85}, {0x8, 0x0, 0x80}, {0x8}, {0x8, 0x0, 0xfffffff7}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) 00:03:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:37 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x2000000, 0x0) 00:03:37 executing program 3: socketpair(0x2a, 0x2, 0xfffffffe, &(0x7f0000000000)) 00:03:37 executing program 4: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/10) (async) syz_open_pts(r0, 0x20000) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x7, 0x2, {{0x4, '^}:#'}, 0xffff}}, 0x11) 00:03:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) 00:03:37 executing program 3: socketpair(0x3, 0x2, 0x40000000, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 00:03:37 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x200000000000000, 0x0) 00:03:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xf, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x80, 0x93, 0xf, 0x3}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x24045848}, 0x4) 00:03:37 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x144, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x90}, 0x800) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1080000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@access_uid={'access', 0x3d, r2}}, {@cache_loose}, {@cache_none}, {@access_user}, {@aname={'aname', 0x3d, '\'{!$(]-'}}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '],]*@%'}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/nvram\x00'}}, {@dont_measure}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/nvram\x00'}}]}}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/module/xz_dec', 0x0, 0x8) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000740)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf257b004000"], 0x14}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0xa0, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x85}, {0x8, 0x0, 0x80}, {0x8}, {0x8, 0x0, 0xfffffff7}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x144, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x90}, 0x800) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) geteuid() (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1080000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@access_uid={'access', 0x3d, r2}}, {@cache_loose}, {@cache_none}, {@access_user}, {@aname={'aname', 0x3d, '\'{!$(]-'}}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '],]*@%'}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/nvram\x00'}}, {@dont_measure}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/nvram\x00'}}]}}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/module/xz_dec', 0x0, 0x8) (async) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000740)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf257b004000"], 0x14}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0xa0, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x85}, {0x8, 0x0, 0x80}, {0x8}, {0x8, 0x0, 0xfffffff7}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) (async) [ 504.412666][T10355] FAULT_INJECTION: forcing a failure. [ 504.412666][T10355] name failslab, interval 1, probability 0, space 0, times 0 [ 504.425343][T10355] CPU: 1 PID: 10355 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 504.436369][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.446476][T10355] Call Trace: [ 504.449757][T10355] [ 504.452692][T10355] dump_stack_lvl+0xd6/0x122 [ 504.457297][T10355] dump_stack+0x11/0x1b 00:03:37 executing program 3: socketpair(0x3, 0x2, 0x40000000, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) [ 504.461497][T10355] should_fail+0x23c/0x250 [ 504.466004][T10355] ? io_wq_create+0x7b/0x6f0 [ 504.466053][T10355] __should_failslab+0x81/0x90 [ 504.466082][T10355] should_failslab+0x5/0x20 [ 504.466188][T10355] __kmalloc+0x6f/0x370 [ 504.466226][T10355] io_wq_create+0x7b/0x6f0 [ 504.466249][T10355] ? preempt_count_add+0x4e/0x90 [ 504.466275][T10355] ? _raw_spin_lock_irqsave+0x4c/0xa0 [ 504.466295][T10355] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 504.466380][T10355] io_uring_alloc_task_context+0x19d/0x2e0 00:03:37 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 29) 00:03:37 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0xffffffff00000000, 0x0) 00:03:37 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x144, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x90}, 0x800) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1080000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@access_uid={'access', 0x3d, r2}}, {@cache_loose}, {@cache_none}, {@access_user}, {@aname={'aname', 0x3d, '\'{!$(]-'}}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '],]*@%'}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/nvram\x00'}}, {@dont_measure}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/nvram\x00'}}]}}) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/module/xz_dec', 0x0, 0x8) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000740)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf257b004000"], 0x14}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0xa0, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x85}, {0x8, 0x0, 0x80}, {0x8}, {0x8, 0x0, 0xfffffff7}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) [ 504.510585][T10355] ? io_wq_free_work+0xd0/0xd0 [ 504.510619][T10355] ? tctx_task_work+0xc90/0xc90 [ 504.510689][T10355] io_uring_add_tctx_node+0x96/0x2c0 [ 504.510713][T10355] io_uring_create+0x5cd/0x754 [ 504.510737][T10355] __x64_sys_io_uring_setup+0x118/0x130 [ 504.510764][T10355] do_syscall_64+0x44/0xd0 00:03:37 executing program 3: socketpair(0x3, 0x2, 0x40000000, &(0x7f0000000000)) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 00:03:37 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0xc0000, 0x102) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x202401, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) 00:03:37 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 30) [ 504.510829][T10355] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.510854][T10355] RIP: 0033:0x7fb13ca1c059 [ 504.510870][T10355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 504.510889][T10355] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 504.510912][T10355] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 504.510927][T10355] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 504.510997][T10355] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.511010][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.511022][T10355] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 504.511039][T10355] [ 504.556237][T10388] FAULT_INJECTION: forcing a failure. [ 504.556237][T10388] name failslab, interval 1, probability 0, space 0, times 0 [ 504.556342][T10388] CPU: 1 PID: 10388 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 504.556365][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.556430][T10388] Call Trace: [ 504.556437][T10388] [ 504.556443][T10388] dump_stack_lvl+0xd6/0x122 [ 504.556533][T10388] dump_stack+0x11/0x1b [ 504.556605][T10388] should_fail+0x23c/0x250 [ 504.556630][T10388] ? __alloc_file+0x2e/0x1a0 [ 504.556659][T10388] __should_failslab+0x81/0x90 [ 504.556682][T10388] should_failslab+0x5/0x20 [ 504.556705][T10388] kmem_cache_alloc+0x4f/0x320 [ 504.556727][T10388] __alloc_file+0x2e/0x1a0 [ 504.556761][T10388] alloc_empty_file+0xcd/0x1c0 [ 504.556803][T10388] alloc_file+0x3a/0x280 [ 504.556824][T10388] alloc_file_pseudo+0xfa/0x150 [ 504.556887][T10388] __anon_inode_getfile+0x14b/0x260 [ 504.556912][T10388] anon_inode_getfile_secure+0x36/0x40 [ 504.556958][T10388] io_uring_create+0x554/0x754 [ 504.556982][T10388] __x64_sys_io_uring_setup+0x118/0x130 [ 504.557066][T10388] do_syscall_64+0x44/0xd0 [ 504.557087][T10388] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.557112][T10388] RIP: 0033:0x7fb13ca1c059 [ 504.557129][T10388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 504.557148][T10388] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 504.557168][T10388] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 504.557182][T10388] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 504.557195][T10388] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.557208][T10388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.557220][T10388] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 504.557328][T10388] [ 504.602293][T10398] FAULT_INJECTION: forcing a failure. [ 504.602293][T10398] name failslab, interval 1, probability 0, space 0, times 0 00:03:38 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:38 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x2) 00:03:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xff}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair(0x8, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0xd0, 0x688780) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0xb22, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}}, 0x4) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000130a010100000000000000000a0000060c00064000000000000000010900020073797a30000000000900020073797a31000000000800034000000009080003400000000ad13c9014c633e7b918c1180e1628afc8d6f4aa69fcb62958753d"], 0x48}, 0x1, 0x0, 0x0, 0x61e135e4d0a144a2}, 0x1) 00:03:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xf, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x80, 0x93, 0xf, 0x3}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x24045848}, 0x4) 00:03:38 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0xc0000, 0x102) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x202401, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) 00:03:38 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x2000000) [ 504.864238][T10398] CPU: 0 PID: 10398 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 504.875334][T10398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.885422][T10398] Call Trace: [ 504.888791][T10398] 00:03:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xff}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair(0x8, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0xd0, 0x688780) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0xb22, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}}, 0x4) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000130a010100000000000000000a0000060c00064000000000000000010900020073797a30000000000900020073797a31000000000800034000000009080003400000000ad13c9014c633e7b918c1180e1628afc8d6f4aa69fcb62958753d"], 0x48}, 0x1, 0x0, 0x0, 0x61e135e4d0a144a2}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xff}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) (async) socketpair(0x8, 0x2, 0x0, &(0x7f0000000000)) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0xd0, 0x688780) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0xb22, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}}, 0x4) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) (async) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000130a010100000000000000000a0000060c00064000000000000000010900020073797a30000000000900020073797a31000000000800034000000009080003400000000ad13c9014c633e7b918c1180e1628afc8d6f4aa69fcb62958753d"], 0x48}, 0x1, 0x0, 0x0, 0x61e135e4d0a144a2}, 0x1) (async) 00:03:38 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x200000000000000) 00:03:38 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0xc0000, 0x102) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x202401, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) [ 504.888812][T10398] dump_stack_lvl+0xd6/0x122 00:03:38 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 31) 00:03:38 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xff}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) socketpair(0x8, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f0000000040), 0xd0, 0x688780) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0xb22, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}}, 0x4) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) (async) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000130a010100000000000000000a0000060c00064000000000000000010900020073797a30000000000900020073797a31000000000800034000000009080003400000000ad13c9014c633e7b918c1180e1628afc8d6f4aa69fcb62958753d"], 0x48}, 0x1, 0x0, 0x0, 0x61e135e4d0a144a2}, 0x1) 00:03:38 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffd}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf43}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3348}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe5b1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1044}, 0x20008001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x80800, 0x0) [ 504.888962][T10398] dump_stack+0x11/0x1b [ 504.888986][T10398] should_fail+0x23c/0x250 [ 504.889009][T10398] ? io_uring_add_tctx_node+0x19f/0x2c0 [ 504.889036][T10398] __should_failslab+0x81/0x90 [ 504.889138][T10398] should_failslab+0x5/0x20 [ 504.889162][T10398] kmem_cache_alloc_trace+0x52/0x350 [ 504.889185][T10398] ? xa_load+0x259/0x270 [ 504.889202][T10398] io_uring_add_tctx_node+0x19f/0x2c0 [ 504.889231][T10398] io_uring_create+0x5cd/0x754 [ 504.889257][T10398] __x64_sys_io_uring_setup+0x118/0x130 [ 504.889307][T10398] do_syscall_64+0x44/0xd0 [ 504.889329][T10398] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.889354][T10398] RIP: 0033:0x7fb13ca1c059 [ 504.889368][T10398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 504.889417][T10398] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 504.889439][T10398] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 504.889453][T10398] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 504.889467][T10398] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.889481][T10398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.889494][T10398] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 504.889512][T10398] [ 504.977496][T10440] FAULT_INJECTION: forcing a failure. [ 504.977496][T10440] name failslab, interval 1, probability 0, space 0, times 0 [ 504.977524][T10440] CPU: 1 PID: 10440 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 504.977552][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.977564][T10440] Call Trace: [ 504.977570][T10440] [ 504.977576][T10440] dump_stack_lvl+0xd6/0x122 [ 504.977606][T10440] dump_stack+0x11/0x1b [ 504.977710][T10440] should_fail+0x23c/0x250 [ 504.977734][T10440] ? xas_create+0x94b/0xb10 [ 504.977762][T10440] __should_failslab+0x81/0x90 [ 504.977802][T10440] should_failslab+0x5/0x20 [ 504.977825][T10440] kmem_cache_alloc+0x4f/0x320 [ 504.977848][T10440] xas_create+0x94b/0xb10 [ 504.977903][T10440] xas_store+0x70/0xca0 [ 504.977920][T10440] ? io_wq_create+0x217/0x6f0 [ 504.977947][T10440] ? io_wq_create+0x4f8/0x6f0 [ 504.977972][T10440] __xa_store+0xdb/0x300 [ 504.977991][T10440] xa_store+0x30/0x50 [ 504.978083][T10440] io_uring_add_tctx_node+0x1d4/0x2c0 [ 504.978107][T10440] io_uring_create+0x5cd/0x754 [ 504.978156][T10440] __x64_sys_io_uring_setup+0x118/0x130 [ 504.978239][T10440] do_syscall_64+0x44/0xd0 [ 504.978259][T10440] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.978289][T10440] RIP: 0033:0x7fb13ca1c059 [ 504.978306][T10440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 504.978325][T10440] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 504.978396][T10440] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 00:03:38 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCCBRK(r1, 0x5428) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:38 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0xffffffff00000000) 00:03:38 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffd}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf43}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3348}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe5b1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1044}, 0x20008001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x80800, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffd}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf43}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3348}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe5b1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1044}, 0x20008001) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x80800, 0x0) (async) 00:03:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async, rerun: 64) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) (rerun: 64) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xf, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x80, 0x93, 0xf, 0x3}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x68}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x24045848}, 0x4) 00:03:38 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 32) 00:03:38 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) shmdt(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x6, 0x7800, 0x7, 0x558967f6, {{0x9, 0x4, 0x2, 0x2c, 0x24, 0x64, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @multicast1, {[@noop, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0xb, [{@loopback, 0x3ff}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x880}, 0x44020) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) [ 504.978411][T10440] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 504.978424][T10440] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.978437][T10440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.978450][T10440] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 504.978466][T10440] 00:03:38 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffd}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf43}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3348}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe5b1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1044}, 0x20008001) (async, rerun: 64) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x80800, 0x0) 00:03:38 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x7b95, &(0x7f0000000100)={0x0, 0x8db9, 0x0, 0x0, 0x313, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:38 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) shmdt(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x6, 0x7800, 0x7, 0x558967f6, {{0x9, 0x4, 0x2, 0x2c, 0x24, 0x64, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @multicast1, {[@noop, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0xb, [{@loopback, 0x3ff}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x880}, 0x44020) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) shmdt(0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x6, 0x7800, 0x7, 0x558967f6, {{0x9, 0x4, 0x2, 0x2c, 0x24, 0x64, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @multicast1, {[@noop, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0xb, [{@loopback, 0x3ff}]}]}}}}}) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x880}, 0x44020) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) 00:03:38 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x7b95, &(0x7f0000000100)={0x0, 0x8db9, 0x0, 0x0, 0x313, 0x0, r1}) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 32) [ 505.339192][T10448] FAULT_INJECTION: forcing a failure. [ 505.339192][T10448] name failslab, interval 1, probability 0, space 0, times 0 [ 505.351846][T10448] CPU: 0 PID: 10448 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 505.362914][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:03:38 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) (async) shmdt(0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x6, 0x7800, 0x7, 0x558967f6, {{0x9, 0x4, 0x2, 0x2c, 0x24, 0x64, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @multicast1, {[@noop, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0xb, [{@loopback, 0x3ff}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x880}, 0x44020) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:38 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '\'%@$\'//,@]'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '\'%@$\'//,@]'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '\'%@$\'//,@]'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048044}, 0x1) [ 505.362928][T10448] Call Trace: [ 505.362933][T10448] [ 505.362996][T10448] dump_stack_lvl+0xd6/0x122 [ 505.363025][T10448] dump_stack+0x11/0x1b [ 505.363047][T10448] should_fail+0x23c/0x250 [ 505.363068][T10448] ? io_wq_create+0x7b/0x6f0 [ 505.363121][T10448] __should_failslab+0x81/0x90 [ 505.363145][T10448] should_failslab+0x5/0x20 [ 505.363173][T10448] __kmalloc+0x6f/0x370 [ 505.363238][T10448] io_wq_create+0x7b/0x6f0 [ 505.363262][T10448] ? preempt_count_add+0x4e/0x90 [ 505.363337][T10448] ? _raw_spin_lock_irqsave+0x4c/0xa0 [ 505.363414][T10448] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 505.363438][T10448] io_uring_alloc_task_context+0x19d/0x2e0 [ 505.363574][T10448] ? io_wq_free_work+0xd0/0xd0 [ 505.363598][T10448] ? tctx_task_work+0xc90/0xc90 [ 505.363695][T10448] io_uring_add_tctx_node+0x96/0x2c0 [ 505.363784][T10448] io_uring_create+0x5cd/0x754 [ 505.363811][T10448] __x64_sys_io_uring_setup+0x118/0x130 [ 505.363870][T10448] do_syscall_64+0x44/0xd0 [ 505.363892][T10448] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.363916][T10448] RIP: 0033:0x7fb13ca1c059 [ 505.363932][T10448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 505.363976][T10448] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 505.363996][T10448] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 505.364009][T10448] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 00:03:38 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TIOCCBRK(r1, 0x5428) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) 00:03:38 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 33) 00:03:38 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800020, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ',{\xe0'}}, {@version_u}, {@afid={'afid', 0x3d, 0x6}}], [{@smackfsdef={'smackfsdef', 0x3d, '-}$,{'}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x16}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@subj_user={'subj_user', 0x3d, '-)-!'}}, {@uid_gt={'uid>', r1}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) 00:03:38 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '\'%@$\'//,@]'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '\'%@$\'//,@]'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '\'%@$\'//,@]'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048044}, 0x1) 00:03:38 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x7b95, &(0x7f0000000100)={0x0, 0x8db9, 0x0, 0x0, 0x313, 0x0, r1}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 505.364070][T10448] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.364083][T10448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.364134][T10448] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 505.364178][T10448] 00:03:38 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800020, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ',{\xe0'}}, {@version_u}, {@afid={'afid', 0x3d, 0x6}}], [{@smackfsdef={'smackfsdef', 0x3d, '-}$,{'}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x16}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@subj_user={'subj_user', 0x3d, '-)-!'}}, {@uid_gt={'uid>', r1}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) 00:03:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10a, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x4040000) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:38 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '\'%@$\'//,@]'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '\'%@$\'//,@]'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '\'%@$\'//,@]'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048044}, 0x1) 00:03:38 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800020, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ',{\xe0'}}, {@version_u}, {@afid={'afid', 0x3d, 0x6}}], [{@smackfsdef={'smackfsdef', 0x3d, '-}$,{'}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x16}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@subj_user={'subj_user', 0x3d, '-)-!'}}, {@uid_gt={'uid>', r1}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800020, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ',{\xe0'}}, {@version_u}, {@afid={'afid', 0x3d, 0x6}}], [{@smackfsdef={'smackfsdef', 0x3d, '-}$,{'}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x16}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@subj_user={'subj_user', 0x3d, '-)-!'}}, {@uid_gt={'uid>', r1}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) (async) 00:03:38 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/l2tp_eth', 0x60000, 0x28) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f80700002d00000229bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7f8}, 0x1, 0x0, 0x0, 0x8005}, 0x4c054) io_uring_setup(0x2080, &(0x7f0000000000)={0x0, 0x9609, 0x1, 0x1, 0x3af, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000100)=0xa9) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 505.646044][T10498] FAULT_INJECTION: forcing a failure. [ 505.646044][T10498] name failslab, interval 1, probability 0, space 0, times 0 [ 505.658766][T10498] CPU: 1 PID: 10498 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 00:03:38 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 34) 00:03:38 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/l2tp_eth', 0x60000, 0x28) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f80700002d00000229bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7f8}, 0x1, 0x0, 0x0, 0x8005}, 0x4c054) io_uring_setup(0x2080, &(0x7f0000000000)={0x0, 0x9609, 0x1, 0x1, 0x3af, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000100)=0xa9) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/l2tp_eth', 0x60000, 0x28) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f80700002d00000229bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="010004000e00f2ffeaff2f000600050004720000060005003cfe00000d0001006d61746368616c6c0000000014000200080001000b0003000800010006000c000b000100666c6f77657200003001020006002e00000000002401548014000280080001000800000008000100070000001400018005001c000500000006000100ff00000024000180060001000900000005000200200000000600010008000000050003000700000014000280080001000600000008000100060000002c000380050003007f000000080002000800000005000300050000000800020000a8390005000400010000002c0003800500030036000000080002001900000005000300ff0000000500030002000000050003000800000034000180050003000800000005000200040000000500e9bf0100000005000300030000000600010001010000050002002000000014000380050004007f000000050001000100000014000180050003000400000005000300f70000000c000180050002000200000008000b000d81000008000100753332003406020044050500074075000f0e08000500dd00000000ff0000000000001000e1ffffff2f0000000000000900000006f8ffffff040000000000008100000fff03000000ff0700150000000500000002010000000900000000000009000000030400000000000000000000040000d54c08000000400000000000856100000005010000804000000000000004fffffff840000000040000000300000000000234ff03000081000000000000850000000502000000ff0700000000001f000000050100010006000000000000000000000206000000de0000000000000600000004ffffff7f010000000000000300007fff02000000c200000000000001000006090000008000000000007c000000000008ff010000000000000000007f00000007369e0000000000000000010100000005070000005300000000000009000000080400000000000000000000030000000220000000060000000000001f00000001000100005100000000000008000000070100000042000000000000040000000508000000ff03000080000000000001d201f8fffffcff0300ffffffff0000000200010000df00000000000001000000050101000007000000000000010000800003000000040000000000000000000007220000000001000000000000fffff0087c090000400000000000000200000800ffff0000770000000000000500000fffffffffff010000000000000100000100ff070000400000000000007f00000007001000005b4d00000000007fffff080000000000000500000020010000000800000000001000000000060600000003000000ffef00000000000905000000ff000000000000de000000090600000020000000000001000000000100000080040000000000ffff000000d9282f00000cc3a1290000002000000002090000000200000000000200000000048c0000000000000000000003000000010000000003000000fffffff9000000ff0700004419fa7858867522aa0009000000000000070000000304000000020000000000000800000007010000009e00000000000003000000054f0500000600000000004ae87fffffff0104000000324e00008100000000000006000000020600000000feffff000007ff0000000606000000de71e03a00000081fffffffb0000000000ffe300fffffa160000ffff02000000050000000000000700000007768100000700000000000003000000ef0500000005000000000000800000000309000000df4afd0900000008000000048100000007000000000084d70000000404000000000400000000000700000100844a000009000000000000050000000700800000ffffffff00000004000000391f0400000400000000000001000000070100000004000000000000f8000000001335000007000000000004000000000509000000090000000000100000007fff0001000002000000000000000000000000000600000ffff9000000ff0000000000000800000006ff0100000000008000000009000000fdffff00007f0000000000000100000003010000000400000000000006000000019f4cff56400000000000000600000000ff0f000001000000000000020000094e380a00000000000080000001000000083702000008000000000034aa0000000802000000fbffffff000000590000100001000000030000004471606700000006000000000600000000000072000000011f000000030000000000000a000008ed018000000300000000000009fffffffc090000000200000000000001000003ff05000000ffffffff0000004000000002080000000300000000000005000000000500000008000000c4000500051f8100000103000500faff000000040000000800007fff0900000002000000000000060001000005000000030000000000075600000009020000000100000000000009000000f500000000f9ffffff0000000300000002000400000400000000000800ffffffff6a3900000000000000000000000006a3ff0f00000800000000000001000003ff01000000070000008000000000003514f9ffffff03000000000008001f6916e900000000ffffff7f0000000600000009090000000300000008000b0003000000080003000000000008000b0006000000080001001e00030008000b00030000000600050002030000060005000808000008000b00000200eb2c5fc05d6fbc7ce1860a34cc92c10e27c61cb93e8fbb30544d274ed2ca286abbb01594a0097ac9e28b4cc67dff36b7e018a89102d2ddb4ea29a15caa3d6536f51ac204f190f24b47c9838285a95a6e78805446d8"], 0x7f8}, 0x1, 0x0, 0x0, 0x8005}, 0x4c054) (async) io_uring_setup(0x2080, &(0x7f0000000000)={0x0, 0x9609, 0x1, 0x1, 0x3af, 0x0, r1}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000100)=0xa9) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) [ 505.658809][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.658822][T10498] Call Trace: [ 505.658828][T10498] [ 505.658834][T10498] dump_stack_lvl+0xd6/0x122 [ 505.658869][T10498] dump_stack+0x11/0x1b [ 505.658893][T10498] should_fail+0x23c/0x250 [ 505.658939][T10498] ? io_wq_create+0x7b/0x6f0 [ 505.658965][T10498] __should_failslab+0x81/0x90 [ 505.658988][T10498] should_failslab+0x5/0x20 [ 505.659074][T10498] __kmalloc+0x6f/0x370 [ 505.659099][T10498] io_wq_create+0x7b/0x6f0 [ 505.659124][T10498] ? preempt_count_add+0x4e/0x90 [ 505.659150][T10498] ? _raw_spin_lock_irqsave+0x4c/0xa0 [ 505.659241][T10498] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 505.659267][T10498] io_uring_alloc_task_context+0x19d/0x2e0 [ 505.659292][T10498] ? io_wq_free_work+0xd0/0xd0 [ 505.659313][T10498] ? tctx_task_work+0xc90/0xc90 [ 505.659411][T10498] io_uring_add_tctx_node+0x96/0x2c0 [ 505.659436][T10498] io_uring_create+0x5cd/0x754 [ 505.659474][T10498] __x64_sys_io_uring_setup+0x118/0x130 [ 505.659499][T10498] do_syscall_64+0x44/0xd0 [ 505.659591][T10498] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.659622][T10498] RIP: 0033:0x7fb13ca1c059 [ 505.659713][T10498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 505.659733][T10498] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 505.659756][T10498] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 505.659771][T10498] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 505.659784][T10498] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.659797][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.659810][T10498] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 505.659842][T10498] [ 505.751128][T10529] FAULT_INJECTION: forcing a failure. [ 505.751128][T10529] name failslab, interval 1, probability 0, space 0, times 0 [ 505.751155][T10529] CPU: 0 PID: 10529 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 505.751179][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.751190][T10529] Call Trace: [ 505.751196][T10529] [ 505.751202][T10529] dump_stack_lvl+0xd6/0x122 [ 505.751280][T10529] dump_stack+0x11/0x1b [ 505.751300][T10529] should_fail+0x23c/0x250 [ 505.751320][T10529] ? xas_create+0x94b/0xb10 [ 505.751345][T10529] __should_failslab+0x81/0x90 [ 505.751370][T10529] should_failslab+0x5/0x20 [ 505.751400][T10529] kmem_cache_alloc+0x4f/0x320 [ 505.751421][T10529] ? xas_create+0x94b/0xb10 [ 505.751445][T10529] xas_create+0x94b/0xb10 [ 505.751469][T10529] xas_store+0x70/0xca0 [ 505.751498][T10529] ? io_wq_create+0x217/0x6f0 [ 505.751522][T10529] ? io_wq_create+0x4f8/0x6f0 [ 505.751545][T10529] __xa_store+0xdb/0x300 [ 505.751581][T10529] xa_store+0x30/0x50 [ 505.751596][T10529] io_uring_add_tctx_node+0x1d4/0x2c0 [ 505.751619][T10529] io_uring_create+0x5cd/0x754 [ 505.751643][T10529] __x64_sys_io_uring_setup+0x118/0x130 [ 505.751723][T10529] do_syscall_64+0x44/0xd0 [ 505.751744][T10529] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.751784][T10529] RIP: 0033:0x7fb13ca1c059 [ 505.751799][T10529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 505.751823][T10529] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 505.751843][T10529] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 505.751856][T10529] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 00:03:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:39 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x50881}, 0x0) 00:03:39 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 35) 00:03:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1e0b515f256ce7dd2bce2519d165a011"}]}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x444, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}}, 0x4004800) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:39 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x4}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/l2tp_eth', 0x60000, 0x28) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f80700002d00000229bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7f8}, 0x1, 0x0, 0x0, 0x8005}, 0x4c054) io_uring_setup(0x2080, &(0x7f0000000000)={0x0, 0x9609, 0x1, 0x1, 0x3af, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000100)=0xa9) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x4}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/l2tp_eth', 0x60000, 0x28) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f80700002d00000229bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7f8}, 0x1, 0x0, 0x0, 0x8005}, 0x4c054) (async) io_uring_setup(0x2080, &(0x7f0000000000)={0x0, 0x9609, 0x1, 0x1, 0x3af, 0x0, r1}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000100)=0xa9) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:03:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10a, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x4040000) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) [ 505.751869][T10529] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.751892][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.751904][T10529] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 505.751920][T10529] [ 506.163640][T10545] FAULT_INJECTION: forcing a failure. 00:03:39 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x50881}, 0x0) 00:03:39 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x50881}, 0x0) [ 506.163640][T10545] name failslab, interval 1, probability 0, space 0, times 0 [ 506.176320][T10545] CPU: 0 PID: 10545 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 506.187355][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.187372][T10545] Call Trace: [ 506.187378][T10545] [ 506.187384][T10545] dump_stack_lvl+0xd6/0x122 [ 506.187412][T10545] dump_stack+0x11/0x1b [ 506.187434][T10545] should_fail+0x23c/0x250 [ 506.187497][T10545] ? io_uring_add_tctx_node+0x19f/0x2c0 00:03:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1e0b515f256ce7dd2bce2519d165a011"}]}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x444, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}}, 0x4004800) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) [ 506.187524][T10545] __should_failslab+0x81/0x90 [ 506.187550][T10545] should_failslab+0x5/0x20 [ 506.187640][T10545] kmem_cache_alloc_trace+0x52/0x350 [ 506.187665][T10545] ? xa_load+0x259/0x270 [ 506.187681][T10545] io_uring_add_tctx_node+0x19f/0x2c0 [ 506.187727][T10545] io_uring_create+0x5cd/0x754 [ 506.251554][T10545] __x64_sys_io_uring_setup+0x118/0x130 [ 506.251592][T10545] do_syscall_64+0x44/0xd0 [ 506.251645][T10545] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:03:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1e0b515f256ce7dd2bce2519d165a011"}]}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x444, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}}, 0x4004800) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:39 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ptp', 0x1, 0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x1000}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200088c1}, 0x4800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fddb08000200d29005000200020000000600689c6df03548f1b90b00", @ANYRES32=r2, @ANYBLOB="0500040002000000060001004e210000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x2041) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088d1}, 0x24000085) 00:03:39 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ptp', 0x1, 0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x1000}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200088c1}, 0x4800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fddb08000200d29005000200020000000600689c6df03548f1b90b00", @ANYRES32=r2, @ANYBLOB="0500040002000000060001004e210000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x2041) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088d1}, 0x24000085) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ptp', 0x1, 0x4) (async) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x1000}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200088c1}, 0x4800) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) (async) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fddb08000200d29005000200020000000600689c6df03548f1b90b00", @ANYRES32=r2, @ANYBLOB="0500040002000000060001004e210000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x2041) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088d1}, 0x24000085) (async) [ 506.251725][T10545] RIP: 0033:0x7fb13ca1c059 [ 506.251740][T10545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 506.251816][T10545] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 506.251835][T10545] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 506.251848][T10545] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 506.251861][T10545] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 506.251923][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.251936][T10545] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 00:03:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) 00:03:39 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) getuid() 00:03:39 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1c, 0x6, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) 00:03:39 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 36) 00:03:39 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ptp', 0x1, 0x4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x1000}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200088c1}, 0x4800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fddb08000200d29005000200020000000600689c6df03548f1b90b00", @ANYRES32=r2, @ANYBLOB="0500040002000000060001004e210000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x2041) (async, rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088d1}, 0x24000085) [ 506.251951][T10545] [ 506.384838][T10591] FAULT_INJECTION: forcing a failure. [ 506.384838][T10591] name failslab, interval 1, probability 0, space 0, times 0 [ 506.397602][T10591] CPU: 0 PID: 10591 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 506.408716][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:03:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10a, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x4040000) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x10a, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x4040000) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:39 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1c, 0x6, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) 00:03:39 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) getuid() 00:03:39 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/bluetooth', 0x4000, 0x0) [ 506.418787][T10591] Call Trace: 00:03:39 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 37) 00:03:39 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1c, 0x6, @udp='udp:syz0\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) 00:03:39 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/bluetooth', 0x4000, 0x0) [ 506.418797][T10591] [ 506.418804][T10591] dump_stack_lvl+0xd6/0x122 [ 506.418853][T10591] dump_stack+0x11/0x1b [ 506.418878][T10591] should_fail+0x23c/0x250 [ 506.418900][T10591] ? xas_create+0x94b/0xb10 [ 506.418935][T10591] __should_failslab+0x81/0x90 [ 506.418960][T10591] should_failslab+0x5/0x20 [ 506.418984][T10591] kmem_cache_alloc+0x4f/0x320 [ 506.419009][T10591] xas_create+0x94b/0xb10 [ 506.419099][T10591] xas_store+0x70/0xca0 [ 506.419186][T10591] ? io_wq_create+0x217/0x6f0 [ 506.419212][T10591] ? io_wq_create+0x4f8/0x6f0 [ 506.419238][T10591] __xa_store+0xdb/0x300 [ 506.419256][T10591] xa_store+0x30/0x50 [ 506.419350][T10591] io_uring_add_tctx_node+0x1d4/0x2c0 [ 506.419375][T10591] io_uring_create+0x5cd/0x754 [ 506.419398][T10591] __x64_sys_io_uring_setup+0x118/0x130 [ 506.419420][T10591] do_syscall_64+0x44/0xd0 [ 506.419474][T10591] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 506.419497][T10591] RIP: 0033:0x7fb13ca1c059 [ 506.419537][T10591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 506.419683][T10591] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 506.419702][T10591] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 506.419716][T10591] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 00:03:39 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) getuid() 00:03:39 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/bluetooth', 0x4000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/bluetooth', 0x4000, 0x0) (async) [ 506.419728][T10591] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 506.419741][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.419754][T10591] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 506.419771][T10591] [ 506.461933][T10613] FAULT_INJECTION: forcing a failure. [ 506.461933][T10613] name failslab, interval 1, probability 0, space 0, times 0 [ 506.632683][T10613] CPU: 0 PID: 10613 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 00:03:39 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="94010000", @ANYRESHEX=r3, @ANYBLOB="04002abd7000fedbdf25130000002400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES64=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c0001801400ff0073797a6b616c6c6572300000000000001400020076657468305f746f5f626f6e6400000038000180080003000100000008000300020000001400020076657468315f746f5f626174616476000800030001000000080003000100000058000180140002006d61637365633000000040000000000014000200766c61e30000000000000000000008000300020014000200766972745f7769666930000000000000280003000200000008000100"/196, @ANYRES32=0x0, @ANYBLOB="5c0001800800030000000000140002006e72300000000000000000000000000008000300030000001400020076657468315f746f5f62617461647600080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800010070e3e4a6d506143383860b338a0ec05a12e784419119268df50df8457ac572222e71d8", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f3100000000140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x194}, 0x1, 0x0, 0x0, 0x24008044}, 0x8000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x124, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040}, 0x4) 00:03:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:39 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/srp_host', 0x204000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x420080) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac0000000307010300000000000000000500000508000540000000032c00800000000140000000080800024000000003080001400000000240000000032c0908b91dcfad63000000400c0002400000000000000a574c000780080002400000000208000140fffffeff08000240000007ff0800024000008001080000024000010000080002400000003f08000240000003e7000000000000000000000000f2680a"], 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) [ 506.643775][T10613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.643869][T10613] Call Trace: [ 506.643877][T10613] [ 506.643884][T10613] dump_stack_lvl+0xd6/0x122 [ 506.643916][T10613] dump_stack+0x11/0x1b [ 506.643946][T10613] should_fail+0x23c/0x250 [ 506.644014][T10613] ? xas_create+0x94b/0xb10 [ 506.644039][T10613] __should_failslab+0x81/0x90 [ 506.644132][T10613] should_failslab+0x5/0x20 [ 506.644155][T10613] kmem_cache_alloc+0x4f/0x320 [ 506.644177][T10613] ? xas_create+0x94b/0xb10 [ 506.644212][T10613] xas_create+0x94b/0xb10 [ 506.644269][T10613] xas_store+0x70/0xca0 [ 506.644284][T10613] ? io_wq_create+0x217/0x6f0 [ 506.644308][T10613] ? io_wq_create+0x4f8/0x6f0 [ 506.644331][T10613] __xa_store+0xdb/0x300 [ 506.644387][T10613] xa_store+0x30/0x50 [ 506.644404][T10613] io_uring_add_tctx_node+0x1d4/0x2c0 [ 506.644429][T10613] io_uring_create+0x5cd/0x754 [ 506.644498][T10613] __x64_sys_io_uring_setup+0x118/0x130 [ 506.644526][T10613] do_syscall_64+0x44/0xd0 [ 506.644546][T10613] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 506.644589][T10613] RIP: 0033:0x7fb13ca1c059 [ 506.644645][T10613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 506.644725][T10613] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 506.644744][T10613] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 506.644803][T10613] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 506.644817][T10613] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 506.644831][T10613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:03:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:40 executing program 1: r0 = io_uring_setup(0x27b4, &(0x7f0000000080)={0x0, 0x6db3, 0x0, 0x1, 0x2b8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0xfffffff8, 0x80000001, 0x4, 0x10}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) 00:03:40 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="94010000", @ANYRESHEX=r3, @ANYBLOB="04002abd7000fedbdf25130000002400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES64=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c0001801400ff0073797a6b616c6c6572300000000000001400020076657468305f746f5f626f6e6400000038000180080003000100000008000300020000001400020076657468315f746f5f626174616476000800030001000000080003000100000058000180140002006d61637365633000000040000000000014000200766c61e30000000000000000000008000300020014000200766972745f7769666930000000000000280003000200000008000100"/196, @ANYRES32=0x0, @ANYBLOB="5c0001800800030000000000140002006e72300000000000000000000000000008000300030000001400020076657468315f746f5f62617461647600080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800010070e3e4a6d506143383860b338a0ec05a12e784419119268df50df8457ac572222e71d8", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f3100000000140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x194}, 0x1, 0x0, 0x0, 0x24008044}, 0x8000) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x124, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040}, 0x4) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="94010000", @ANYRESHEX=r3, @ANYBLOB="04002abd7000fedbdf25130000002400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES64=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c0001801400ff0073797a6b616c6c6572300000000000001400020076657468305f746f5f626f6e6400000038000180080003000100000008000300020000001400020076657468315f746f5f626174616476000800030001000000080003000100000058000180140002006d61637365633000000040000000000014000200766c61e30000000000000000000008000300020014000200766972745f7769666930000000000000280003000200000008000100"/196, @ANYRES32=0x0, @ANYBLOB="5c0001800800030000000000140002006e72300000000000000000000000000008000300030000001400020076657468315f746f5f62617461647600080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800010070e3e4a6d506143383860b338a0ec05a12e784419119268df50df8457ac572222e71d8", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f3100000000140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x194}, 0x1, 0x0, 0x0, 0x24008044}, 0x8000) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x124, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040}, 0x4) (async) 00:03:40 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/srp_host', 0x204000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x420080) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac0000000307010300000000000000000500000508000540000000032c00800000000140000000080800024000000003080001400000000240000000032c0908b91dcfad63000000400c0002400000000000000a574c000780080002400000000208000140fffffeff08000240000007ff0800024000008001080000024000010000080002400000003f08000240000003e7000000000000000000000000f2680a"], 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/srp_host', 0x204000, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x420080) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac0000000307010300000000000000000500000508000540000000032c00800000000140000000080800024000000003080001400000000240000000032c0908b91dcfad63000000400c0002400000000000000a574c000780080002400000000208000140fffffeff08000240000007ff0800024000008001080000024000010000080002400000003f08000240000003e7000000000000000000000000f2680a"], 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) 00:03:40 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 38) 00:03:40 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) [ 506.644843][T10613] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 506.644906][T10613] 00:03:40 executing program 1: r0 = io_uring_setup(0x27b4, &(0x7f0000000080)={0x0, 0x6db3, 0x0, 0x1, 0x2b8}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0xfffffff8, 0x80000001, 0x4, 0x10}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) 00:03:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:40 executing program 1: r0 = io_uring_setup(0x27b4, &(0x7f0000000080)={0x0, 0x6db3, 0x0, 0x1, 0x2b8}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0xfffffff8, 0x80000001, 0x4, 0x10}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) [ 506.870138][T10641] FAULT_INJECTION: forcing a failure. [ 506.870138][T10641] name failslab, interval 1, probability 0, space 0, times 0 [ 506.882807][T10641] CPU: 1 PID: 10641 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 506.893908][T10641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.903979][T10641] Call Trace: [ 506.907274][T10641] [ 506.910291][T10641] dump_stack_lvl+0xd6/0x122 [ 506.914988][T10641] dump_stack+0x11/0x1b 00:03:40 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/srp_host', 0x204000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x420080) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac0000000307010300000000000000000500000508000540000000032c00800000000140000000080800024000000003080001400000000240000000032c0908b91dcfad63000000400c0002400000000000000a574c000780080002400000000208000140fffffeff08000240000007ff0800024000008001080000024000010000080002400000003f08000240000003e7000000000000000000000000f2680a"], 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/srp_host', 0x204000, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x420080) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac0000000307010300000000000000000500000508000540000000032c00800000000140000000080800024000000003080001400000000240000000032c0908b91dcfad63000000400c0002400000000000000a574c000780080002400000000208000140fffffeff08000240000007ff0800024000008001080000024000010000080002400000003f08000240000003e7000000000000000000000000f2680a"], 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) 00:03:40 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:03:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) [ 506.919152][T10641] should_fail+0x23c/0x250 [ 506.923588][T10641] ? xas_create+0x94b/0xb10 [ 506.928157][T10641] __should_failslab+0x81/0x90 [ 506.928189][T10641] should_failslab+0x5/0x20 [ 506.928244][T10641] kmem_cache_alloc+0x4f/0x320 [ 506.928266][T10641] ? xas_create+0x94b/0xb10 [ 506.928296][T10641] xas_create+0x94b/0xb10 [ 506.928321][T10641] xas_store+0x70/0xca0 [ 506.928337][T10641] ? io_wq_create+0x217/0x6f0 [ 506.928442][T10641] ? io_wq_create+0x4f8/0x6f0 [ 506.964928][T10641] __xa_store+0xdb/0x300 00:03:40 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="94010000", @ANYRESHEX=r3, @ANYBLOB="04002abd7000fedbdf25130000002400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES64=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2c0001801400ff0073797a6b616c6c6572300000000000001400020076657468305f746f5f626f6e6400000038000180080003000100000008000300020000001400020076657468315f746f5f626174616476000800030001000000080003000100000058000180140002006d61637365633000000040000000000014000200766c61e30000000000000000000008000300020014000200766972745f7769666930000000000000280003000200000008000100"/196, @ANYRES32=0x0, @ANYBLOB="5c0001800800030000000000140002006e72300000000000000000000000000008000300030000001400020076657468315f746f5f62617461647600080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800010070e3e4a6d506143383860b338a0ec05a12e784419119268df50df8457ac572222e71d8", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f3100000000140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x194}, 0x1, 0x0, 0x0, 0x24008044}, 0x8000) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x124, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040}, 0x4) 00:03:40 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 506.969189][T10641] xa_store+0x30/0x50 [ 506.973189][T10641] io_uring_add_tctx_node+0x1d4/0x2c0 [ 506.978599][T10641] io_uring_create+0x5cd/0x754 [ 506.983462][T10641] __x64_sys_io_uring_setup+0x118/0x130 [ 506.989030][T10641] do_syscall_64+0x44/0xd0 [ 506.989061][T10641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 506.989128][T10641] RIP: 0033:0x7fb13ca1c059 00:03:40 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x3, 0x6300) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000040}, 0x4000) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = io_uring_setup(0x5d85, &(0x7f00000004c0)={0x0, 0x2, 0x8, 0x2, 0x3c5, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000080)) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x400) 00:03:40 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 39) 00:03:40 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 506.989143][T10641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 506.989163][T10641] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 506.989233][T10641] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 00:03:40 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) 00:03:40 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50042c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) 00:03:40 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xe002) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') r4 = gettid() ptrace$setregset(0x4205, r4, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x845f18bc5d52b9f2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 506.989248][T10641] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 506.989261][T10641] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 506.989275][T10641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.989290][T10641] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 506.989307][T10641] [ 507.094945][T10697] FAULT_INJECTION: forcing a failure. [ 507.094945][T10697] name failslab, interval 1, probability 0, space 0, times 0 00:03:40 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50042c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) 00:03:40 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xe002) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') r4 = gettid() ptrace$setregset(0x4205, r4, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x845f18bc5d52b9f2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x27b0, &(0x7f0000000080)) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xe002) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') (async) gettid() (async) ptrace$setregset(0x4205, r4, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x845f18bc5d52b9f2) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) [ 507.131271][T10697] CPU: 1 PID: 10697 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 507.131365][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.152454][T10697] Call Trace: [ 507.152462][T10697] [ 507.152468][T10697] dump_stack_lvl+0xd6/0x122 [ 507.152499][T10697] dump_stack+0x11/0x1b [ 507.152570][T10697] should_fail+0x23c/0x250 00:03:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:40 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x3, 0x6300) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000040}, 0x4000) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = io_uring_setup(0x5d85, &(0x7f00000004c0)={0x0, 0x2, 0x8, 0x2, 0x3c5, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000080)) (async) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x400) 00:03:40 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50042c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) 00:03:40 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xe002) (rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, 0x0, 0x0) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') r4 = gettid() ptrace$setregset(0x4205, r4, 0x0, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x845f18bc5d52b9f2) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 507.171934][T10697] ? xas_create+0x94b/0xb10 [ 507.171974][T10697] __should_failslab+0x81/0x90 [ 507.172043][T10697] should_failslab+0x5/0x20 [ 507.172169][T10697] kmem_cache_alloc+0x4f/0x320 [ 507.172192][T10697] ? xas_create+0x94b/0xb10 [ 507.172262][T10697] xas_create+0x94b/0xb10 [ 507.172288][T10697] xas_store+0x70/0xca0 [ 507.172305][T10697] ? io_wq_create+0x217/0x6f0 00:03:40 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) 00:03:40 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 40) 00:03:40 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) [ 507.172366][T10697] ? io_wq_create+0x4f8/0x6f0 [ 507.172429][T10697] __xa_store+0xdb/0x300 [ 507.172447][T10697] xa_store+0x30/0x50 [ 507.172465][T10697] io_uring_add_tctx_node+0x1d4/0x2c0 [ 507.172570][T10697] io_uring_create+0x5cd/0x754 [ 507.172597][T10697] __x64_sys_io_uring_setup+0x118/0x130 [ 507.172623][T10697] do_syscall_64+0x44/0xd0 [ 507.172666][T10697] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 507.172694][T10697] RIP: 0033:0x7fb13ca1c059 [ 507.172711][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 507.172732][T10697] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 507.172755][T10697] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 507.172771][T10697] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 507.172843][T10697] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 507.172858][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.172872][T10697] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 507.172889][T10697] [ 507.302080][T10744] FAULT_INJECTION: forcing a failure. [ 507.302080][T10744] name failslab, interval 1, probability 0, space 0, times 0 [ 507.302106][T10744] CPU: 0 PID: 10744 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 507.302158][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.302170][T10744] Call Trace: [ 507.302176][T10744] [ 507.302183][T10744] dump_stack_lvl+0xd6/0x122 [ 507.302243][T10744] dump_stack+0x11/0x1b [ 507.302274][T10744] should_fail+0x23c/0x250 [ 507.302297][T10744] ? xas_create+0x94b/0xb10 [ 507.302324][T10744] __should_failslab+0x81/0x90 [ 507.302374][T10744] should_failslab+0x5/0x20 [ 507.302397][T10744] kmem_cache_alloc+0x4f/0x320 [ 507.302497][T10744] ? xas_create+0x94b/0xb10 [ 507.302525][T10744] xas_create+0x94b/0xb10 [ 507.302553][T10744] xas_store+0x70/0xca0 [ 507.302571][T10744] ? io_wq_create+0x217/0x6f0 [ 507.302674][T10744] ? io_wq_create+0x4f8/0x6f0 [ 507.302699][T10744] __xa_store+0xdb/0x300 [ 507.302718][T10744] xa_store+0x30/0x50 [ 507.302736][T10744] io_uring_add_tctx_node+0x1d4/0x2c0 [ 507.302792][T10744] io_uring_create+0x5cd/0x754 [ 507.302836][T10744] __x64_sys_io_uring_setup+0x118/0x130 [ 507.302860][T10744] do_syscall_64+0x44/0xd0 [ 507.302955][T10744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 507.303030][T10744] RIP: 0033:0x7fb13ca1c059 [ 507.303046][T10744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 507.303064][T10744] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 507.303083][T10744] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 507.303097][T10744] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 507.303151][T10744] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 00:03:40 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 00:03:40 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) 00:03:40 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 41) 00:03:40 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) io_uring_setup(0x1266, &(0x7f0000000100)={0x0, 0x6034, 0x1, 0x2, 0x1ca, 0x0, r1}) 00:03:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:40 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x3, 0x6300) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000040}, 0x4000) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) r3 = io_uring_setup(0x5d85, &(0x7f00000004c0)={0x0, 0x2, 0x8, 0x2, 0x3c5, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async, rerun: 64) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000080)) (async, rerun: 64) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x400) 00:03:40 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) io_uring_setup(0x1266, &(0x7f0000000100)={0x0, 0x6034, 0x1, 0x2, 0x1ca, 0x0, r1}) io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x10}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) (async) io_uring_setup(0x1266, &(0x7f0000000100)={0x0, 0x6034, 0x1, 0x2, 0x1ca, 0x0, r1}) (async) [ 507.303165][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.303179][T10744] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 507.303195][T10744] [ 507.620263][T10753] FAULT_INJECTION: forcing a failure. [ 507.620263][T10753] name failslab, interval 1, probability 0, space 0, times 0 00:03:40 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xdf5, 0x348, 0x10001, 0xffff}}}, ["", "", ""]}, 0x30}}, 0x30040041) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) 00:03:40 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) (fail_nth: 42) 00:03:40 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) io_uring_setup(0x1266, &(0x7f0000000100)={0x0, 0x6034, 0x1, 0x2, 0x1ca, 0x0, r1}) io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x10}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) (async) io_uring_setup(0x1266, &(0x7f0000000100)={0x0, 0x6034, 0x1, 0x2, 0x1ca, 0x0, r1}) (async) 00:03:40 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xdf5, 0x348, 0x10001, 0xffff}}}, ["", "", ""]}, 0x30}}, 0x30040041) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xdf5, 0x348, 0x10001, 0xffff}}}, ["", "", ""]}, 0x30}}, 0x30040041) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) (async) [ 507.632996][T10753] CPU: 0 PID: 10753 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 507.633025][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.633079][T10753] Call Trace: [ 507.633086][T10753] 00:03:40 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) [ 507.633092][T10753] dump_stack_lvl+0xd6/0x122 [ 507.633124][T10753] dump_stack+0x11/0x1b [ 507.633149][T10753] should_fail+0x23c/0x250 [ 507.633172][T10753] ? xas_create+0x94b/0xb10 [ 507.633238][T10753] __should_failslab+0x81/0x90 [ 507.633263][T10753] should_failslab+0x5/0x20 [ 507.633288][T10753] kmem_cache_alloc+0x4f/0x320 [ 507.633347][T10753] ? xas_create+0x94b/0xb10 [ 507.633371][T10753] xas_create+0x94b/0xb10 [ 507.633397][T10753] xas_store+0x70/0xca0 [ 507.633414][T10753] ? io_wq_create+0x217/0x6f0 [ 507.633523][T10753] ? io_wq_create+0x4f8/0x6f0 [ 507.633547][T10753] __xa_store+0xdb/0x300 [ 507.633565][T10753] xa_store+0x30/0x50 [ 507.633581][T10753] io_uring_add_tctx_node+0x1d4/0x2c0 [ 507.633607][T10753] io_uring_create+0x5cd/0x754 [ 507.633707][T10753] __x64_sys_io_uring_setup+0x118/0x130 [ 507.633757][T10753] do_syscall_64+0x44/0xd0 [ 507.633777][T10753] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 507.633809][T10753] RIP: 0033:0x7fb13ca1c059 [ 507.633831][T10753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 507.633870][T10753] RSP: 002b:00007fb13bb92168 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 507.633957][T10753] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13ca1c059 [ 507.633970][T10753] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000027b0 [ 507.634031][T10753] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 [ 507.634044][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.634056][T10753] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 507.634101][T10753] [ 507.685715][T10772] FAULT_INJECTION: forcing a failure. [ 507.685715][T10772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.685742][T10772] CPU: 0 PID: 10772 Comm: syz-executor.2 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 507.685766][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.685791][T10772] Call Trace: [ 507.685797][T10772] [ 507.685804][T10772] dump_stack_lvl+0xd6/0x122 [ 507.685834][T10772] dump_stack+0x11/0x1b [ 507.685858][T10772] should_fail+0x23c/0x250 [ 507.685931][T10772] should_fail_usercopy+0x16/0x20 [ 507.685954][T10772] _copy_to_user+0x1c/0x90 [ 507.685974][T10772] simple_read_from_buffer+0xab/0x120 [ 507.686029][T10772] proc_fail_nth_read+0x10d/0x150 [ 507.686059][T10772] ? proc_fault_inject_write+0x230/0x230 [ 507.686088][T10772] vfs_read+0x1e6/0x750 [ 507.686129][T10772] ? __fget_files+0x1d2/0x210 [ 507.686149][T10772] ksys_read+0xd9/0x190 [ 507.686167][T10772] __x64_sys_read+0x3e/0x50 [ 507.686186][T10772] do_syscall_64+0x44/0xd0 [ 507.686241][T10772] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 507.686267][T10772] RIP: 0033:0x7fb13c9cec0c [ 507.686282][T10772] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 507.686301][T10772] RSP: 002b:00007fb13bb92160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.686322][T10772] RAX: ffffffffffffffda RBX: 00007fb13cb2ef60 RCX: 00007fb13c9cec0c [ 507.686334][T10772] RDX: 000000000000000f RSI: 00007fb13bb921e0 RDI: 0000000000000003 [ 507.686428][T10772] RBP: 00007fb13bb921d0 R08: 0000000000000000 R09: 0000000000000000 00:03:41 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xdf5, 0x348, 0x10001, 0xffff}}}, ["", "", ""]}, 0x30}}, 0x30040041) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) 00:03:41 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000003c0)=""/241, 0xf1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x50000, 0x0) io_uring_setup(0x3eb, &(0x7f0000000200)={0x0, 0x120c, 0x0, 0x3, 0x223, 0x0, r1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f00000004c0), 0x4) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x3, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x101}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x200}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xdb}, @NFACCT_PKTS={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4e4ac56e2890e04e}, 0x8080) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040845}, 0x0) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x7}) 00:03:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:41 executing program 0: sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) [ 507.686442][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.686456][T10772] R13: 00007ffe34b55b4f R14: 00007fb13bb92300 R15: 0000000000022000 [ 507.686473][T10772] 00:03:41 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x100, 0x80) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) 00:03:41 executing program 3: socketpair(0x1a, 0x80000, 0x9, &(0x7f0000000000)) 00:03:41 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000003c0)=""/241, 0xf1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x50000, 0x0) io_uring_setup(0x3eb, &(0x7f0000000200)={0x0, 0x120c, 0x0, 0x3, 0x223, 0x0, r1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f00000004c0), 0x4) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x3, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x101}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x200}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xdb}, @NFACCT_PKTS={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4e4ac56e2890e04e}, 0x8080) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040845}, 0x0) io_uring_setup(0x27b0, &(0x7f0000000080)) (async) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000003c0)=""/241, 0xf1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x50000, 0x0) (async) io_uring_setup(0x3eb, &(0x7f0000000200)={0x0, 0x120c, 0x0, 0x3, 0x223, 0x0, r1}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f00000004c0), 0x4) (async) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x3, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x101}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x200}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xdb}, @NFACCT_PKTS={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4e4ac56e2890e04e}, 0x8080) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040845}, 0x0) (async) 00:03:41 executing program 0: sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async, rerun: 32) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) (rerun: 32) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x2, 0x7}) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x3, 0x7}) 00:03:41 executing program 0: sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) 00:03:41 executing program 3: socketpair(0x1a, 0x80000, 0x9, &(0x7f0000000000)) socketpair(0x1a, 0x80000, 0x9, &(0x7f0000000000)) (async) 00:03:41 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, &(0x7f00000003c0)=""/241, 0xf1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x50000, 0x0) io_uring_setup(0x3eb, &(0x7f0000000200)={0x0, 0x120c, 0x0, 0x3, 0x223, 0x0, r1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f00000004c0), 0x4) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0x3, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x101}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x200}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xdb}, @NFACCT_PKTS={0xc}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2e0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4e4ac56e2890e04e}, 0x8080) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040845}, 0x0) 00:03:41 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x100, 0x80) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x100, 0x80) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) (async) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x4, 0x7}) 00:03:41 executing program 3: socketpair(0x1a, 0x80000, 0x9, &(0x7f0000000000)) socketpair(0x1a, 0x80000, 0x9, &(0x7f0000000000)) (async) 00:03:41 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040860) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x40, 0x40, 0xa6, 0xab4, {{0x9, 0x4, 0x1, 0x14, 0x24, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @remote, {[@generic={0x7, 0x9, "1147bf2ec611a0"}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB="31032dbd7000fddbdf2509000000800001800800030001000000140002006272696467655f736c6176655f310000140002007465616d30000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="14000200726f7365755b354349425f300000000000000000000000140002007663616e300000000000000000000000080003000200000014000200697036677265300000000000000000003c0001801400020067656e65766530000000000000000000080003000200000014000200776c616e30000000000000000000000008000300020000004800018014000200626f6e645f736c6176655f300000000014000200766972745f77696669300000000000001400020076657468315f746f5f62617461", @ANYRES32=0x0, @ANYBLOB="3400018014000200776732000000000000000000000000001400020076657468315f6d61637674617000000008000300020000006400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e643000000000000000000000001400020076657468305f6d6163767461700000000800030001000000140002006970766c616e3100000000000000000014000200626f6e643000"/88], 0x1b0}}, 0x4040080) socketpair(0x6, 0x4, 0x4f, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000a00), 0x4) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0xfffffffffffffe1b}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x190, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40000004}, 0x4004c) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000040)) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x7, 0x7}) 00:03:41 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x100, 0x80) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) 00:03:41 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x5, 0x4) socketpair(0x23, 0x5, 0x80, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r4 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x4, 0x40000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="684ceb8ec9235aee000700", @ANYRES16=r5, @ANYBLOB="00020700000004000000010000000000000008410000004c00180001000075647000"/98], 0x68}}, 0x20000010) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="384e4980", @ANYRES16=r3, @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="1cb2a41657af8fd844531b0c506b984b30b7782bcd1b5a"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) 00:03:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x8, 0x7}) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r0, 0x5605) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000040)) 00:03:41 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040860) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x40, 0x40, 0xa6, 0xab4, {{0x9, 0x4, 0x1, 0x14, 0x24, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @remote, {[@generic={0x7, 0x9, "1147bf2ec611a0"}, @ra={0x94, 0x4}]}}}}}) (rerun: 32) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB="31032dbd7000fddbdf2509000000800001800800030001000000140002006272696467655f736c6176655f310000140002007465616d30000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="14000200726f7365755b354349425f300000000000000000000000140002007663616e300000000000000000000000080003000200000014000200697036677265300000000000000000003c0001801400020067656e65766530000000000000000000080003000200000014000200776c616e30000000000000000000000008000300020000004800018014000200626f6e645f736c6176655f300000000014000200766972745f77696669300000000000001400020076657468315f746f5f62617461", @ANYRES32=0x0, @ANYBLOB="3400018014000200776732000000000000000000000000001400020076657468315f6d61637674617000000008000300020000006400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e643000000000000000000000001400020076657468305f6d6163767461700000000800030001000000140002006970766c616e3100000000000000000014000200626f6e643000"/88], 0x1b0}}, 0x4040080) (async, rerun: 64) socketpair(0x6, 0x4, 0x4f, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000a00), 0x4) (async) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0xfffffffffffffe1b}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x190, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40000004}, 0x4004c) 00:03:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x32, 0x7}) 00:03:41 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x5, 0x4) (async) socketpair(0x23, 0x5, 0x80, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x4, 0x40000) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="684ceb8ec9235aee000700", @ANYRES16=r5, @ANYBLOB="00020700000004000000010000000000000008410000004c00180001000075647000"/98], 0x68}}, 0x20000010) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="384e4980", @ANYRES16=r3, @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="1cb2a41657af8fd844531b0c506b984b30b7782bcd1b5a"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) 00:03:41 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x134c, r0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x678}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%[-\'\\(\'!([\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38cd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.,\\])^$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c62}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xec\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "1941318097b193e4efd05c8e67b92ae065fb5000ee"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x10cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x29, 0x5, "8ac03344d4fb1790dfff7ce653ee81f4b47038074fc5584662ee3b5d49cf5e9d98f0a16c15"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xaf}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "448144c138214dcfe4f3b18052b94e8e5e695bdc3ac29daf500ac2db14fda7bb0f8a20969f38d979fd8545e080c7e15d1ce42c318521eb40f41d85b87d5b68b2d598284aa4cd088cc4944ae7622d8452ec7a132f21f6c1b4b3f51b1ba7888d4ae254ff6fb39b9dbd9816d7fce114a5a237847a6af6f0950f9026b299b2"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x134c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20020000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb1, 0x48}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9d3155313431ab560a7f4b5787"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9eece01bf41401626348272aad"}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9dec85cdd83f76dac35e45b189"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000084}, 0xd421234300a5894c) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VT_RELDISP(r0, 0x5605) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000040)) (async) 00:03:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) 00:03:41 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x134c, r0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x678}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%[-\'\\(\'!([\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38cd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.,\\])^$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c62}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xec\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "1941318097b193e4efd05c8e67b92ae065fb5000ee"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x10cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x29, 0x5, "8ac03344d4fb1790dfff7ce653ee81f4b47038074fc5584662ee3b5d49cf5e9d98f0a16c15"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xaf}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "448144c138214dcfe4f3b18052b94e8e5e695bdc3ac29daf500ac2db14fda7bb0f8a20969f38d979fd8545e080c7e15d1ce42c318521eb40f41d85b87d5b68b2d598284aa4cd088cc4944ae7622d8452ec7a132f21f6c1b4b3f51b1ba7888d4ae254ff6fb39b9dbd9816d7fce114a5a237847a6af6f0950f9026b299b2"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x134c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20020000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb1, 0x48}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9d3155313431ab560a7f4b5787"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9eece01bf41401626348272aad"}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9dec85cdd83f76dac35e45b189"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000084}, 0xd421234300a5894c) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x34, 0x7}) 00:03:41 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040860) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x40, 0x40, 0xa6, 0xab4, {{0x9, 0x4, 0x1, 0x14, 0x24, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @remote, {[@generic={0x7, 0x9, "1147bf2ec611a0"}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB="31032dbd7000fddbdf2509000000800001800800030001000000140002006272696467655f736c6176655f310000140002007465616d30000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="14000200726f7365755b354349425f300000000000000000000000140002007663616e300000000000000000000000080003000200000014000200697036677265300000000000000000003c0001801400020067656e65766530000000000000000000080003000200000014000200776c616e30000000000000000000000008000300020000004800018014000200626f6e645f736c6176655f300000000014000200766972745f77696669300000000000001400020076657468315f746f5f62617461", @ANYRES32=0x0, @ANYBLOB="3400018014000200776732000000000000000000000000001400020076657468315f6d61637674617000000008000300020000006400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e643000000000000000000000001400020076657468305f6d6163767461700000000800030001000000140002006970766c616e3100000000000000000014000200626f6e643000"/88], 0x1b0}}, 0x4040080) socketpair(0x6, 0x4, 0x4f, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000a00), 0x4) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0xfffffffffffffe1b}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x190, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40000004}, 0x4004c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040860) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x40, 0x40, 0xa6, 0xab4, {{0x9, 0x4, 0x1, 0x14, 0x24, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @remote, {[@generic={0x7, 0x9, "1147bf2ec611a0"}, @ra={0x94, 0x4}]}}}}}) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB="31032dbd7000fddbdf2509000000800001800800030001000000140002006272696467655f736c6176655f310000140002007465616d30000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="14000200726f7365755b354349425f300000000000000000000000140002007663616e300000000000000000000000080003000200000014000200697036677265300000000000000000003c0001801400020067656e65766530000000000000000000080003000200000014000200776c616e30000000000000000000000008000300020000004800018014000200626f6e645f736c6176655f300000000014000200766972745f77696669300000000000001400020076657468315f746f5f62617461", @ANYRES32=0x0, @ANYBLOB="3400018014000200776732000000000000000000000000001400020076657468315f6d61637674617000000008000300020000006400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e643000000000000000000000001400020076657468305f6d6163767461700000000800030001000000140002006970766c616e3100000000000000000014000200626f6e643000"/88], 0x1b0}}, 0x4040080) (async) socketpair(0x6, 0x4, 0x4f, &(0x7f0000000300)) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000a00), 0x4) (async) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0xfffffffffffffe1b}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg1\x00'}) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x190, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40000004}, 0x4004c) (async) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x42, 0x7}) 00:03:41 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x5, 0x4) socketpair(0x23, 0x5, 0x80, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r4 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x4, 0x40000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="684ceb8ec9235aee000700", @ANYRES16=r5, @ANYBLOB="00020700000004000000010000000000000008410000004c00180001000075647000"/98], 0x68}}, 0x20000010) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="384e4980", @ANYRES16=r3, @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="1cb2a41657af8fd844531b0c506b984b30b7782bcd1b5a"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x5, 0x4) (async) socketpair(0x23, 0x5, 0x80, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async) syz_open_dev$vcsa(&(0x7f00000001c0), 0x4, 0x40000) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="684ceb8ec9235aee000700", @ANYRES16=r5, @ANYBLOB="00020700000004000000010000000000000008410000004c00180001000075647000"/98], 0x68}}, 0x20000010) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="384e4980", @ANYRES16=r3, @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="1cb2a41657af8fd844531b0c506b984b30b7782bcd1b5a"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) (async) 00:03:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x6) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x101641) ioctl$TIOCCONS(r2, 0x541d) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x6, 0x3f, "c1c2a9cd8da4d62fe0340903015847f90abecf", 0x8, 0xef77}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dib3000mb', 0x801, 0x80) sendmmsg$nfc_llcp(r3, &(0x7f0000002b00)=[{&(0x7f0000000140)={0x27, 0x1, 0x2, 0x4, 0x1, 0x0, "db126c51838332000b3400503ade3fe923da25b1d9cefa4bd32d7fcc9acd479076041fb3d6bf20adeff7d17a045f3b2c18b396362a59360ff018d442028b9e", 0x3f}, 0x60, &(0x7f0000000340)=[{&(0x7f00000001c0)="24d15a7d1ec95389adbdb6c94672bf35c34d0622a0c731ceb79006d22606fed456f23370f582f267d78ccfcaf92422e7be34fa5cc45ca732e26e27749eac66d10d817a3cf5bfc58bf9de91936a1daf3f879d3d28c90250241e2f1426c3339c4724d8788cdd485dc10323e5da3e8aefb787c62cd54d95d2e768a13d6778c0551829cd015dae8c7c41faaa36240041afa42a39d8bc86e583876016820a9af1fd8fc3688e", 0xa3}, {&(0x7f0000000280)="f8ecb7d0e4ee3e3cad1942979567edb59bfc06efacad35552fc7b0d9bca594887f261fcab4313ef51ea3c358557d723082790bfab4a14c413275ca7b49a05ba60856d665889b0cd6ae4b8d61d5319ed3b50ad70c8296ea01261e7799752b3b41c6f1bfbe14bb3122c1e9320bb7f96e05f16ffbbc11f5", 0x76}], 0x2, 0x0, 0x0, 0xd0}, {&(0x7f0000000380)={0x27, 0x1, 0x0, 0x5, 0xfa, 0x1f, "e1f9bb1e2ff4122424d2c014e36bd6c62c50b6a54b309e859010a8b0c6eb1c669e182d21ac5a317f75adcdfc222988f681c5d0db547fe784b9edd0f626a460", 0x16}, 0x60, &(0x7f0000001a00)=[{&(0x7f0000000400)="883e44cd6b48074941ad8b1acc1487fefe65a5188342ce7eeda9685017a04385908effc422473faf718a90a025bd84e5f0848b8bd9cb08dbef249c11caa4fd7ac31b41da674fe3b46e00423b81ff9f06f7631685752c8051ebedf484ee601efc7f9dcddaba796a86ee233b4dc3ae268f1c0687824c5532ab07170d503da8934a75f2bf1ff03172fbc772f5dad493b7cb3df507e4236c615c9320e9ca7dc948d51dce", 0xa2}, {&(0x7f00000004c0)="bcc35f20c63624e5df7564eeb30ac5e82893f7e6bc69c522d5f37ae1eb8b9728e8ca05ca169b4dbe66aed19077de29dd95fbf09ebcc7ebf7d05348a0ae83ecf21a3af40b6091a2dc23e74c399dc71c4eaade40faca3719db8fb69c5cf86bc551c74f076c7980a617806130801ad2aeea1b888fe77fd6541d1d39a52d138c694c1f89f35765364698756246a975683d4e11ffc7759e5fde36f8a5ec862eeb044b2ee331a8f1814b9d46e6f724fa40411b17f30ded46bcc8210486001d796db07773bb43b97942ebfb", 0xc8}, {&(0x7f00000005c0)="cd638b0c166893ad1e848a29025fab2c7fc8b3bdd87b1de384c3bda1d8bcceb3142923fd150ed535531cef670a570dc2c6f297542655e22cd7dcc0457185201e3aa56a51fd760851c1f6f7d4f79bea4d70714af5c70f460a905be7a507e8c6b339f5a6bcb9e9d1fc1182100a53b0d5a98da16dcbbf9f5bd449f3347180f62d02dfd77f6d364ddbc4fe1792dae116b964480e6d1b6d4305fc7f6de27aa4564d8d2259aee2ec32c00b259c6d93cb3b5322446485a874176c3e3532af75daad2de155f3ffa8cfea38b71403bf67c60d232f43cc9ff034", 0xd5}, {&(0x7f00000006c0)="a2c91d4762efe576e3add34c824519e27659493d21d3e96f3668c7ab89226034bb786188dda8028565c292f0f346f2a8ed22ca5a8b3e6cdc63cc27ad5456170537ae24b0e686449bb10a548c88e1570c0820d48746d63692cf55038b4cf8c2433596587167aa5e0425dc780d80a6a6cd19cb61afa58f829fbc078025ca68fdf674fc43ba831d2a0653f7f3964af9ba4d219eab244d9a323ba5f81597ee2ce4986f065de59e0a7b139f9586903721fceff533bdb13bc9cc4bd023ff472afaacfc8a353b77ba577ba81852d35643003beb", 0xd0}, {&(0x7f00000007c0)="044f98d02f78aef1d6cab6388b22c1ea2cf97a0de399228e633e6f080afbfc1da7452ef6cd90d9e0f1c20adf4318a5a69c8b", 0x32}, {&(0x7f0000000800)="cd0be8ed9b1310d09adae3f8d7198c426e4e732413d14d865bf60060be82036a890816b2c711b247b392cd7ea6164d3099f12cde107d39490e236962cfee851552cb0976bf531d8ca3978d5aa88c73caca9d0fa0ba6c1200fe8a6b71ce", 0x5d}, {&(0x7f0000000880)="8d0f971fa33f06b08af25e7a76eeaa7b7e938def813bea60475bb65c96f1644f024714968d5e161b7afe25461a2e4aa9cf06b4cc1268dd3e11df3f84e11c4e4765c9f62aa5c36238b55f6d683cabcd420537eaace51a4dd4cbb578", 0x5b}, {&(0x7f0000000900)="e706f13b75fdbe324b6df382093312a4a4eb1962489a658a0acc46a08f39ec164c0a251f6babbf9bb34a0d32cc3ddccf239a8406ee4d039a4451fe2f6e9e9e7330d5a51047163e9ecfde5bab8088b34412a26b3a265530a00f903e", 0x5b}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="fead7af23c780c99d8ee704f916dd7325387202a3d81f6d110a0da4bfd302677632dd924611b6d9aad2f0eefcc324448aee90de1667d2b99b8cc3d46fbd7b9b564a27a6353139ac853a970954df4f4d1f83105c86cf0481ec699d159f2", 0x5d}], 0xa, &(0x7f0000001ac0)={0x1010, 0x111, 0x8, "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"}, 0x1010, 0x4002}], 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x4, 0x0, 0x3}}, 0x14) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000040)) 00:03:41 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x134c, r0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x678}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%[-\'\\(\'!([\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38cd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.,\\])^$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c62}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xec\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "1941318097b193e4efd05c8e67b92ae065fb5000ee"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x10cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x29, 0x5, "8ac03344d4fb1790dfff7ce653ee81f4b47038074fc5584662ee3b5d49cf5e9d98f0a16c15"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xaf}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "448144c138214dcfe4f3b18052b94e8e5e695bdc3ac29daf500ac2db14fda7bb0f8a20969f38d979fd8545e080c7e15d1ce42c318521eb40f41d85b87d5b68b2d598284aa4cd088cc4944ae7622d8452ec7a132f21f6c1b4b3f51b1ba7888d4ae254ff6fb39b9dbd9816d7fce114a5a237847a6af6f0950f9026b299b2"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x134c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20020000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb1, 0x48}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9d3155313431ab560a7f4b5787"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9eece01bf41401626348272aad"}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9dec85cdd83f76dac35e45b189"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000084}, 0xd421234300a5894c) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x64, 0x7}) 00:03:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x6) (async, rerun: 64) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x101641) (rerun: 64) ioctl$TIOCCONS(r2, 0x541d) (async, rerun: 32) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) (rerun: 32) 00:03:41 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop4', 0x4a00, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120a044}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x6, 0x3f, "c1c2a9cd8da4d62fe0340903015847f90abecf", 0x8, 0xef77}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dib3000mb', 0x801, 0x80) sendmmsg$nfc_llcp(r3, &(0x7f0000002b00)=[{&(0x7f0000000140)={0x27, 0x1, 0x2, 0x4, 0x1, 0x0, "db126c51838332000b3400503ade3fe923da25b1d9cefa4bd32d7fcc9acd479076041fb3d6bf20adeff7d17a045f3b2c18b396362a59360ff018d442028b9e", 0x3f}, 0x60, &(0x7f0000000340)=[{&(0x7f00000001c0)="24d15a7d1ec95389adbdb6c94672bf35c34d0622a0c731ceb79006d22606fed456f23370f582f267d78ccfcaf92422e7be34fa5cc45ca732e26e27749eac66d10d817a3cf5bfc58bf9de91936a1daf3f879d3d28c90250241e2f1426c3339c4724d8788cdd485dc10323e5da3e8aefb787c62cd54d95d2e768a13d6778c0551829cd015dae8c7c41faaa36240041afa42a39d8bc86e583876016820a9af1fd8fc3688e", 0xa3}, {&(0x7f0000000280)="f8ecb7d0e4ee3e3cad1942979567edb59bfc06efacad35552fc7b0d9bca594887f261fcab4313ef51ea3c358557d723082790bfab4a14c413275ca7b49a05ba60856d665889b0cd6ae4b8d61d5319ed3b50ad70c8296ea01261e7799752b3b41c6f1bfbe14bb3122c1e9320bb7f96e05f16ffbbc11f5", 0x76}], 0x2, 0x0, 0x0, 0xd0}, {&(0x7f0000000380)={0x27, 0x1, 0x0, 0x5, 0xfa, 0x1f, "e1f9bb1e2ff4122424d2c014e36bd6c62c50b6a54b309e859010a8b0c6eb1c669e182d21ac5a317f75adcdfc222988f681c5d0db547fe784b9edd0f626a460", 0x16}, 0x60, &(0x7f0000001a00)=[{&(0x7f0000000400)="883e44cd6b48074941ad8b1acc1487fefe65a5188342ce7eeda9685017a04385908effc422473faf718a90a025bd84e5f0848b8bd9cb08dbef249c11caa4fd7ac31b41da674fe3b46e00423b81ff9f06f7631685752c8051ebedf484ee601efc7f9dcddaba796a86ee233b4dc3ae268f1c0687824c5532ab07170d503da8934a75f2bf1ff03172fbc772f5dad493b7cb3df507e4236c615c9320e9ca7dc948d51dce", 0xa2}, {&(0x7f00000004c0)="bcc35f20c63624e5df7564eeb30ac5e82893f7e6bc69c522d5f37ae1eb8b9728e8ca05ca169b4dbe66aed19077de29dd95fbf09ebcc7ebf7d05348a0ae83ecf21a3af40b6091a2dc23e74c399dc71c4eaade40faca3719db8fb69c5cf86bc551c74f076c7980a617806130801ad2aeea1b888fe77fd6541d1d39a52d138c694c1f89f35765364698756246a975683d4e11ffc7759e5fde36f8a5ec862eeb044b2ee331a8f1814b9d46e6f724fa40411b17f30ded46bcc8210486001d796db07773bb43b97942ebfb", 0xc8}, {&(0x7f00000005c0)="cd638b0c166893ad1e848a29025fab2c7fc8b3bdd87b1de384c3bda1d8bcceb3142923fd150ed535531cef670a570dc2c6f297542655e22cd7dcc0457185201e3aa56a51fd760851c1f6f7d4f79bea4d70714af5c70f460a905be7a507e8c6b339f5a6bcb9e9d1fc1182100a53b0d5a98da16dcbbf9f5bd449f3347180f62d02dfd77f6d364ddbc4fe1792dae116b964480e6d1b6d4305fc7f6de27aa4564d8d2259aee2ec32c00b259c6d93cb3b5322446485a874176c3e3532af75daad2de155f3ffa8cfea38b71403bf67c60d232f43cc9ff034", 0xd5}, {&(0x7f00000006c0)="a2c91d4762efe576e3add34c824519e27659493d21d3e96f3668c7ab89226034bb786188dda8028565c292f0f346f2a8ed22ca5a8b3e6cdc63cc27ad5456170537ae24b0e686449bb10a548c88e1570c0820d48746d63692cf55038b4cf8c2433596587167aa5e0425dc780d80a6a6cd19cb61afa58f829fbc078025ca68fdf674fc43ba831d2a0653f7f3964af9ba4d219eab244d9a323ba5f81597ee2ce4986f065de59e0a7b139f9586903721fceff533bdb13bc9cc4bd023ff472afaacfc8a353b77ba577ba81852d35643003beb", 0xd0}, {&(0x7f00000007c0)="044f98d02f78aef1d6cab6388b22c1ea2cf97a0de399228e633e6f080afbfc1da7452ef6cd90d9e0f1c20adf4318a5a69c8b", 0x32}, {&(0x7f0000000800)="cd0be8ed9b1310d09adae3f8d7198c426e4e732413d14d865bf60060be82036a890816b2c711b247b392cd7ea6164d3099f12cde107d39490e236962cfee851552cb0976bf531d8ca3978d5aa88c73caca9d0fa0ba6c1200fe8a6b71ce", 0x5d}, {&(0x7f0000000880)="8d0f971fa33f06b08af25e7a76eeaa7b7e938def813bea60475bb65c96f1644f024714968d5e161b7afe25461a2e4aa9cf06b4cc1268dd3e11df3f84e11c4e4765c9f62aa5c36238b55f6d683cabcd420537eaace51a4dd4cbb578", 0x5b}, {&(0x7f0000000900)="e706f13b75fdbe324b6df382093312a4a4eb1962489a658a0acc46a08f39ec164c0a251f6babbf9bb34a0d32cc3ddccf239a8406ee4d039a4451fe2f6e9e9e7330d5a51047163e9ecfde5bab8088b34412a26b3a265530a00f903e", 0x5b}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="fead7af23c780c99d8ee704f916dd7325387202a3d81f6d110a0da4bfd302677632dd924611b6d9aad2f0eefcc324448aee90de1667d2b99b8cc3d46fbd7b9b564a27a6353139ac853a970954df4f4d1f83105c86cf0481ec699d159f2", 0x5d}], 0xa, &(0x7f0000001ac0)={0x1010, 0x111, 0x8, "57279286135ac49c8ae5c22794d7068814640cb5c2a57929c5aec40a256ed5b9f16696a8a87a3423830dffb3356d068a6dedec92b1e96c6d95a64e4ce975317085bdf6c37d4b7aeb1d023fd273ce5377475efec4d5ad9a83056dffca90d566669155e900d5fe601c956b1d5f1e8c074d43349ab1100c09e21648e7afc2e758e31c33e8a6df097dc4f748bbd092624b981340a66142301909a68eb6cc1697c5465a8726c6b57192631b3fac143ff665b5883722ab1a27b71bcff77cc19476faed023f8280ea4241e76d0dd0873ac67440eca41881e9391e68ef4017a31310198e6481511895bb6012a729e6b9e05878f734713b7d2aadf2b67ab2e74fd55aaa124509888e7eb4fbb84942bf5de9a80c2ef3060f64867d4b27f7a61421215cf0155317d92800bbd8a0489ded3be0ef1605d164664c876494e4947b008ccd06f6142ec0cabe4ee81cb234eab071b8742742c72dd179ea57e254493c611c3711e5bd3a32c2c682799bfec75220a7062db421d22a0f2583c8f9f915844eb8ab6847ca453a9ca730029bcf5d8782b55894772f1c96d722d9c23acafea6b4c27585f21fffbe42c0b95a8c0f1ff217d9ded1b9a9ed41e9a383958fb7ce08fa9d216d3024a83a047aa27170a06e8e90e6904966dc2e63e253769163a4fbe3d97833994bc8b778af8c5080db0cce0b978a412cf9089aeb1d5310f2ba0d8c9a655ec67a3066688303a8555d0079d6a5f06945a66a4aec9007b9b4f51829926da3daca84563b3de3d241a9cf2b3535d80c924cbb14bc529913b1e1b61f7b1aacf000d5a942bf7667b25b40585cc6ea5de8f0d4eccc90e687b3a6055320be5b0bb342c8dd267e6959b4e4d3aff36c3a0b63f5f33d99f92246e7856cfca260ad8c5d4515dbe6a58868d2b8a0b7ec7c0715388425b2f3b5b832cd4d909c703175abd36c2a8a04fcec1359556d53ad58cc3e792790c9fd397efe83176d53dd927d1ebca8af45384afed642bfa2e3b22423eb67192a29ba735943eb1586ac5486e9563d52cde92d8210170ac25cf3565bedb6b46cda7f315f095ddaf2bd6989819b85d7ad2207735490c0b1d2c4a255d64d39afa5552c2fb99e8a2e1ecf0c79d071536684e040946c8a6e11f1fbf6dd853662f5dea13ec443e05564bc7bc7371b754c7c20a36649783ea4b2a86d41c8c7a40066d1594da07630b1e4dc08330fd779d1acbd4a7efe12996e16325b010b69011b689dead50b198478be3a611ed7eb134f2c8551e453ec11fc6ee840459cebfd9ac73d342be0b80aefb5591c349c80f807a2058a1cc7217682f01b36ad4fa51b261d8be151cccc2abe8c44ad50a8f6952d5bb0387586376b40c406910952a5e49ec5c3d663670b750efcc5879bddc8a972a4138171f400aef5eb1c17227bb10e6c0b96e645194919e839e48497be5401a1782af1cc9f311e4b1d934c4979a873b35fb67fdbb0609679633468545a24de48d6d1128550d8f4a204d18f40ade75e013af7cd461cc2d06cc187835f9ad86910da2878ed077bbc90e2b53c56d406260cd6be4d9c6ee3635bf8c29b274f55610a5f2d4b89b409fa3459393a08ace67c693bf263b4c9eaa2a028cb28742b9dd7a4f53321411148fc57ba67098d540cc41fe1794066a1a58624ad509e60c0b698ee9b9de777ea571fbc4af6b279fb86dde0f876f157acada92929f66e566caab0cf68e66807cf3525dea25ff4a1bde302f8234feed26fa97e53c631033469ff3141e3db9fbc09ef7447c69c7d7318e5dee1f6cac67526ac337b427cb98853f15de2d83520eb42055c723da73832f08b927bc809f3ee061d2fa2638be72adcf7c7305b0efbb726ae37d83806181a797d10466101facdf9a91be0b78b7de3c7973d9c5307e1fac92cdadb2f1e7bd9bb888e1e7cb4a8a94c10d896829f1fc6d86f8bfdb9f8c5c0f0fea4142ebc64f0fd9c8e10afb5597a43529329522946b3d81e39e2ed1b32f7215359b49224c105fa61ffcc829672e684f19e6113352e41a8c959403f84df8adfdf4938cd1a91672764b7ffbff4eb88ee1b0803995329c15075588a9d42f5ef6a461cc05b85f87ac06dc5186c53bb742054ade319047ecb8cd0322e7d753341be80a5ed3c07769f1f679af97f1807807413de29a1e3d119f410ec80e681e68d969c2f23967829082d6e177b6db987ecb76cc3e8b7eaf8e12985b9ee2b017e7a26725ef3a9f49439cfc1958df3317263c39bbc339ec0a1f5e322efb45ae272efcea79e07fccfadf995d50349323a4cfa44e21414bfb4b63a2ebd2907496e8147db6b5cf62acfe9986f4c22eab338d47521867808499611bf15dce465e1c13aa95337f598fae269f39a371f73dabb624fbaf1c01b3b15845bde6472d9f5fa847962418281164f8c0347ced530fe8d214e6e423a41fb6941e1bd886e172c0b7d9f91e850613cd35cd6a7cdde937c01f7bfda0de7448b84f923179811bb4b8e95cdbc1dab684b2392d2d850f014a7bedcd4e645a5523dda673656b8553596668ff2d793d02920535ccca0d2f0e4f7d8d9933b40c6591a05cf96b3de3d8061d6c05722dd4b6648ab8bb5c52b7edd3d19d3ee24a4c52425ac28fe380103786892ee7b5337e383cf1c33badac103e67e2058999c0122e183b65800eaf2b7db7f53258e00a05452bbf8e6a6c5c038f2103c5d88640a0dbf8211f9c590367c7ef9aff0fb24595fb10e61b18a3d25224666dc8f33536f17ac2378c6308ad8d3737bbbb62b7c94ccf03ab7ef3fe46d82ef8e9da4d08a3bd7042035156572d2cc8f29c44e114d125768fe605a3f7e4b991ecc8586c1f22411a28a828735f4e1b0ccafaff8191334c179694c89f48517649452bd741abe5b7ebe9d7a643b9c329130998748bbb3307e736dcf428e9b0eb7152981ef7d0edf976a7d4915ad42f85c8e27ecc843d9580122de127f8f0379f6aad41d4be1acd0c1646bc7771885f85afc52705a926fc991012c9b4c4865d2fa82917013638f31618466a13628cac741ea6765aeef36cc25b95aacbe866f026e25940640ddfbc4890b3db3d90f2b7fae64f48fb783fac2feb6b4174bc88725c370b06c13b497e08dfd71b05794ac2dda7c29d9cc5ddaf276147cd1715b068e2206aec7b5fa0d90a88ca4f0f11dfd0e74cb5d10e57f3ce63102d30ace85b195bd80c8fe396f98c51aa1ff0f1f6f1c63b17be0062fd9f8e7bd0c85f476216c14548a8811ffb30bd34ffc8feda86858f7f15a8fd637d75b41dc950e2a7dac09726290bdbad5b6feed7279dcafb0ff170a25e420a72080665e41d33ed920bc7a218bd98f1faba250c09c8ca6d83697271534423969ea07fe57380c88fd994f69760c02ba2e4441d7141ccfdc93d2a301bb0890e92062eaf6605b81d8c36dd6fabaac38c241f8ea2ffd253fbe29437164ad82cffc545e62ba462ad1b7c8699e3baa5cec7dc77ddb28bfe72363dd1584ca8a9e2c039ee766eb7b645c19a56a3255b013599d8173685efdd3f9cbd4d15b4ebe69a15ad356b59b62e364848a96b7de36008508bb984a8949a5b414cdd05ebb2d14b72fb8f95dc9f7772902b0995c943fa917586f3a82481094e1844b2501fa3f87cf453f3c7b48d8c489b47e2d8cd5dae67ff834a7c1123345fdca248ff07fd6018b540bcc22c9555671d936ee2f4bb028f169a66813a57800cb56c50e149d2aee3b898839bed6123a06d830ccbbae8caa86ffae83a9637d16d686ed383681fba6a68903e9f77255888a9e1e216eb1b9d03112d89e70ca8ecbd8cbed71b0ce5748d4258b84d242301f03523eb947ea5a5756ed47360a327bab96982ee1ee9696a6ae5cd85aeda5bac113beaf267b57c40c2f9c160177974d00cbfd50cd34f9979a7bbe4b70a93484b72ea6895b415ebce3fda89ab05279246e20185e9ac2368d9af514bf3f930c87005acb5f9557847f9dc423436c913e56f4e8d9594446896fbcd2f124cd1575be2510b2f5a72b8f1c463697fa3a4a0cf165687aa59b2a9a4aa64490ddb4e3a74335190799a941853d56ca898e7b64e8e3f65581f8a50b92fc2c09f8998061fa628486c0cce77a28f2b5764c883b4492260fc9f3819824b2a0e63a5d3785dfea3f122500049942a8e38b63615fb9e7e5e5cf64394f1e3978d79df0d9335905ce0b6209b2ebaaecd15a31d8f4d12dd593dfbdc6dc88d5e15c1f9d91c0d84e34626a873494327d4b65a39860dda01a3202c1899da7915227365f55f650fe00f8d7f3cfd88e6b26c8efa5cf5dbcb735a0a659c37557e9fbbfeee08cdf5206fd6a99a4f625e981fcd66d937917bc929b6752f4ab6337e0e45fe123aba0620ba9580ca3b30e8e438b9af69dc85953648d2c1348b7f0e58451f6e9f8bea009eeb0d5adef56e9f3105d7a609bcfaeff29273e2c4df749e6d8f7656e99f4868283eb445c5f0df9061b553a4a3b148478321bc8718e4409d1e5cee2bab0c1fab68904841d56b0c348200d6eff981fde6e04f89712303ddd4990f41819aa6fe06f2d81823d3c56a89a287e69e9a1c806974246fe7dcfd7b8cfc0004717bf96ba602d9004e7cee595f6a843846e07a69c3f4481b2b278410e21cd68ff460b492264c7988c888a4c27bcc8ff04e0069168cfef6fca86a3cc9bc6001bf51f387af5e8418977d0c65d15b41130e61a45377926881030e6443a8e53ca70936c1342d5ef1780402114086a125d5c3b24ee5348b7648241a60c6eb15e5b778531911886a5c30ec1b0ca765d7a41c5afb2cdf6663bba402afa1b0f6e478ed39307fa90e46e3ebc34c62ca7c3a97c2f7ce40c5e18c9ef142a9a5148e6534b61dea9060e05a945489186979ff6ff79105dff00e659f5f0d4107582bf2a68e44ba8b8a5dcb0bc22e7a0db474a4576f3d17a557074f86eea926a663492d8a04033106615abc19f17a3416002559785b73b2939cc36e2439b72232bf697d8168ecdf524554103d3c4236cf2c49e4112ba1011e3d26faa811daf7e7157ee8577db0178db7df76a9b28f53ed6e8ac7e8770eced5050106ec616161d568e8c399e8af38d05b7d6f85175bd739b6d79cfc1d116d53605741f760a498202abb1affb6484929a7ae5a447b75d5a3476e5fd1d8523672b01efd53dda63b41b7340ce477500b3903fad496c3825d9cef041f8f04464402780124d7709a60f28718fdea48ddc119f90acc023724821cd4d5fd629dee5587b725f616a36715bd93e87857b516ffa55bda1f048a6c681ffcb6bb23bc65eac448854dcd9e36013eed290311d6e5840134af6f77b592feec9732e98f3f57b7d4c7a9a23f4bbe015cfa40b277c5399f6dafbc6ec6c471f8f7adbbae0f924fdcc8e4434b007cc5b359d2fa2e7d207d329bc52b2ded803a0ecbac8ff89adf545eb1aa4848face226730dada17c3f87b803ace60a709b571bfeeb3b2382e2e10e6194ac54163cd3286febdc7c9a9c2ad15ce17f27d8e70e96d20c4ed26e77fb6865992be2b493b682e3fd0111abfd397a439fa5f7d816c752347b7989f4e0785b1bf9c8b9d4d27d690b1e097f95c360d7d15469560265f74ac82330dba23c00c80100f2d86325a6b3ef2d3bffbe32a16416ea94f8042578f82225509c01c6410021c84c23dcab88d0c19d0f3ab3400e5a65a6d56dc31a9518264095963aae4cea3d4c7162c0e78f84c93f125981e355d425835a8043693c4c67ac6f9b0ba08db198f6c155bcdd40579511390523c444cdb5726bf4f0d2ef6d367ce77418dba3812899304a20c96a6d07214ca0a0cae106ab01c56523a65023877563"}, 0x1010, 0x4002}], 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) (async) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x4, 0x0, 0x3}}, 0x14) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000040)) 00:03:41 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x14}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 00:03:41 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:41 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop4', 0x4a00, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120a044}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 00:03:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x4) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x6) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x101641) ioctl$TIOCCONS(r2, 0x541d) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000040)) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x185, 0x7}) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async, rerun: 32) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x6, 0x3f, "c1c2a9cd8da4d62fe0340903015847f90abecf", 0x8, 0xef77}) (rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dib3000mb', 0x801, 0x80) sendmmsg$nfc_llcp(r3, &(0x7f0000002b00)=[{&(0x7f0000000140)={0x27, 0x1, 0x2, 0x4, 0x1, 0x0, "db126c51838332000b3400503ade3fe923da25b1d9cefa4bd32d7fcc9acd479076041fb3d6bf20adeff7d17a045f3b2c18b396362a59360ff018d442028b9e", 0x3f}, 0x60, &(0x7f0000000340)=[{&(0x7f00000001c0)="24d15a7d1ec95389adbdb6c94672bf35c34d0622a0c731ceb79006d22606fed456f23370f582f267d78ccfcaf92422e7be34fa5cc45ca732e26e27749eac66d10d817a3cf5bfc58bf9de91936a1daf3f879d3d28c90250241e2f1426c3339c4724d8788cdd485dc10323e5da3e8aefb787c62cd54d95d2e768a13d6778c0551829cd015dae8c7c41faaa36240041afa42a39d8bc86e583876016820a9af1fd8fc3688e", 0xa3}, {&(0x7f0000000280)="f8ecb7d0e4ee3e3cad1942979567edb59bfc06efacad35552fc7b0d9bca594887f261fcab4313ef51ea3c358557d723082790bfab4a14c413275ca7b49a05ba60856d665889b0cd6ae4b8d61d5319ed3b50ad70c8296ea01261e7799752b3b41c6f1bfbe14bb3122c1e9320bb7f96e05f16ffbbc11f5", 0x76}], 0x2, 0x0, 0x0, 0xd0}, {&(0x7f0000000380)={0x27, 0x1, 0x0, 0x5, 0xfa, 0x1f, "e1f9bb1e2ff4122424d2c014e36bd6c62c50b6a54b309e859010a8b0c6eb1c669e182d21ac5a317f75adcdfc222988f681c5d0db547fe784b9edd0f626a460", 0x16}, 0x60, &(0x7f0000001a00)=[{&(0x7f0000000400)="883e44cd6b48074941ad8b1acc1487fefe65a5188342ce7eeda9685017a04385908effc422473faf718a90a025bd84e5f0848b8bd9cb08dbef249c11caa4fd7ac31b41da674fe3b46e00423b81ff9f06f7631685752c8051ebedf484ee601efc7f9dcddaba796a86ee233b4dc3ae268f1c0687824c5532ab07170d503da8934a75f2bf1ff03172fbc772f5dad493b7cb3df507e4236c615c9320e9ca7dc948d51dce", 0xa2}, {&(0x7f00000004c0)="bcc35f20c63624e5df7564eeb30ac5e82893f7e6bc69c522d5f37ae1eb8b9728e8ca05ca169b4dbe66aed19077de29dd95fbf09ebcc7ebf7d05348a0ae83ecf21a3af40b6091a2dc23e74c399dc71c4eaade40faca3719db8fb69c5cf86bc551c74f076c7980a617806130801ad2aeea1b888fe77fd6541d1d39a52d138c694c1f89f35765364698756246a975683d4e11ffc7759e5fde36f8a5ec862eeb044b2ee331a8f1814b9d46e6f724fa40411b17f30ded46bcc8210486001d796db07773bb43b97942ebfb", 0xc8}, {&(0x7f00000005c0)="cd638b0c166893ad1e848a29025fab2c7fc8b3bdd87b1de384c3bda1d8bcceb3142923fd150ed535531cef670a570dc2c6f297542655e22cd7dcc0457185201e3aa56a51fd760851c1f6f7d4f79bea4d70714af5c70f460a905be7a507e8c6b339f5a6bcb9e9d1fc1182100a53b0d5a98da16dcbbf9f5bd449f3347180f62d02dfd77f6d364ddbc4fe1792dae116b964480e6d1b6d4305fc7f6de27aa4564d8d2259aee2ec32c00b259c6d93cb3b5322446485a874176c3e3532af75daad2de155f3ffa8cfea38b71403bf67c60d232f43cc9ff034", 0xd5}, {&(0x7f00000006c0)="a2c91d4762efe576e3add34c824519e27659493d21d3e96f3668c7ab89226034bb786188dda8028565c292f0f346f2a8ed22ca5a8b3e6cdc63cc27ad5456170537ae24b0e686449bb10a548c88e1570c0820d48746d63692cf55038b4cf8c2433596587167aa5e0425dc780d80a6a6cd19cb61afa58f829fbc078025ca68fdf674fc43ba831d2a0653f7f3964af9ba4d219eab244d9a323ba5f81597ee2ce4986f065de59e0a7b139f9586903721fceff533bdb13bc9cc4bd023ff472afaacfc8a353b77ba577ba81852d35643003beb", 0xd0}, {&(0x7f00000007c0)="044f98d02f78aef1d6cab6388b22c1ea2cf97a0de399228e633e6f080afbfc1da7452ef6cd90d9e0f1c20adf4318a5a69c8b", 0x32}, {&(0x7f0000000800)="cd0be8ed9b1310d09adae3f8d7198c426e4e732413d14d865bf60060be82036a890816b2c711b247b392cd7ea6164d3099f12cde107d39490e236962cfee851552cb0976bf531d8ca3978d5aa88c73caca9d0fa0ba6c1200fe8a6b71ce", 0x5d}, {&(0x7f0000000880)="8d0f971fa33f06b08af25e7a76eeaa7b7e938def813bea60475bb65c96f1644f024714968d5e161b7afe25461a2e4aa9cf06b4cc1268dd3e11df3f84e11c4e4765c9f62aa5c36238b55f6d683cabcd420537eaace51a4dd4cbb578", 0x5b}, {&(0x7f0000000900)="e706f13b75fdbe324b6df382093312a4a4eb1962489a658a0acc46a08f39ec164c0a251f6babbf9bb34a0d32cc3ddccf239a8406ee4d039a4451fe2f6e9e9e7330d5a51047163e9ecfde5bab8088b34412a26b3a265530a00f903e", 0x5b}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="fead7af23c780c99d8ee704f916dd7325387202a3d81f6d110a0da4bfd302677632dd924611b6d9aad2f0eefcc324448aee90de1667d2b99b8cc3d46fbd7b9b564a27a6353139ac853a970954df4f4d1f83105c86cf0481ec699d159f2", 0x5d}], 0xa, &(0x7f0000001ac0)={0x1010, 0x111, 0x8, "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"}, 0x1010, 0x4002}], 0x2, 0x0) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (rerun: 64) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) (async, rerun: 32) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x4, 0x0, 0x3}}, 0x14) (async, rerun: 32) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000040)) 00:03:41 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:41 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x14}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x14}, 0x10) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) (async) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x204, 0x7}) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x80000001, 0xc000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f00000000c0)) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x2) 00:03:41 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x14}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 00:03:41 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop4', 0x4a00, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120a044}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop4', 0x4a00, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120a044}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) 00:03:41 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x10}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x10}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x80000001, 0xc000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f00000000c0)) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x80000001, 0xc000) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f00000000c0)) (async) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x2) (async) 00:03:41 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffff000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ata_port', 0x400000, 0x144) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x408, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x16c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001800000008002580040001800400258008000300", @ANYRES32=0x0, @ANYBLOB="a95a3643b5e65418e74756b1156fba61955fcd1fc08458b5c0ec89544a631b4ccbe21640c5c4", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x70, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008004}, 0x80) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x214, 0x7}) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x80000001, 0xc000) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f00000000c0)) (async) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x2) 00:03:41 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffff000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ata_port', 0x400000, 0x144) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x408, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x16c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001800000008002580040001800400258008000300", @ANYRES32=0x0, @ANYBLOB="a95a3643b5e65418e74756b1156fba61955fcd1fc08458b5c0ec89544a631b4ccbe21640c5c4", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x70, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008004}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffff000, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ata_port', 0x400000, 0x144) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x408, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x16c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001800000008002580040001800400258008000300", @ANYRES32=0x0, @ANYBLOB="a95a3643b5e65418e74756b1156fba61955fcd1fc08458b5c0ec89544a631b4ccbe21640c5c4", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4001) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x70, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008004}, 0x80) (async) [ 508.647839][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:03:41 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) socketpair(0x2a, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x11, 0x5, 0x5, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x17, 0xa, 0x507, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xa59d43f548ce55c) write$P9_RSTATFS(r4, &(0x7f0000000480)={0x43, 0x9, 0x1, {0x1, 0x4c, 0xe300, 0x9, 0x5, 0x9, 0x100000000, 0x6, 0x3}}, 0x43) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x5c, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x5c}}, 0x20000004) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x216, 0x7}) 00:03:41 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfff, 0x202000) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/11}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0x402) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x401, 0x842040) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x480000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x204100, 0x0) ioctl$KDGKBTYPE(r2, 0x4b31, &(0x7f0000000080)) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0x402) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x401, 0x842040) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x480000) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x204100, 0x0) ioctl$KDGKBTYPE(r2, 0x4b31, &(0x7f0000000080)) 00:03:41 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async, rerun: 32) socketpair(0x2a, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) socketpair(0x11, 0x5, 0x5, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) (async) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x17, 0xa, 0x507, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xa59d43f548ce55c) write$P9_RSTATFS(r4, &(0x7f0000000480)={0x43, 0x9, 0x1, {0x1, 0x4c, 0xe300, 0x9, 0x5, 0x9, 0x100000000, 0x6, 0x3}}, 0x43) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x5c, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x5c}}, 0x20000004) 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x2e2, 0x7}) 00:03:41 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfff, 0x202000) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/11}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 508.723916][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:03:41 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x300, 0x7}) 00:03:41 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7f, 0x3, 0x200, 0x101}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4002}, 0x80) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/bluetooth', 0x101000, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f8, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x800}, 0x4840) 00:03:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r0, 0x402) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x401, 0x842040) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x480000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x204100, 0x0) ioctl$KDGKBTYPE(r2, 0x4b31, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x402) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x401, 0x842040) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x480000) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x204100, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b31, &(0x7f0000000080)) (async) 00:03:41 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffff000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ata_port', 0x400000, 0x144) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x408, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x16c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001800000008002580040001800400258008000300", @ANYRES32=0x0, @ANYBLOB="a95a3643b5e65418e74756b1156fba61955fcd1fc08458b5c0ec89544a631b4ccbe21640c5c4", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x70, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008004}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffff000, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ata_port', 0x400000, 0x144) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x408, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x16c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001800000008002580040001800400258008000300", @ANYRES32=0x0, @ANYBLOB="a95a3643b5e65418e74756b1156fba61955fcd1fc08458b5c0ec89544a631b4ccbe21640c5c4", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x4001) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x70, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008004}, 0x80) (async) 00:03:41 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfff, 0x202000) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/11}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:41 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) socketpair(0x2a, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x11, 0x5, 0x5, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x17, 0xa, 0x507, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xa59d43f548ce55c) (async) write$P9_RSTATFS(r4, &(0x7f0000000480)={0x43, 0x9, 0x1, {0x1, 0x4c, 0xe300, 0x9, 0x5, 0x9, 0x100000000, 0x6, 0x3}}, 0x43) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x5c, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x5c}}, 0x20000004) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x402, 0x7}) 00:03:42 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7f, 0x3, 0x200, 0x101}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4002}, 0x80) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/bluetooth', 0x101000, 0x4) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f8, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x800}, 0x4840) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x4a6c, &(0x7f0000000000)={0x0, 0x29d1, 0x10, 0x3, 0xd0, 0x0, r0}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x245c0, 0x0) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCCONS(r1, 0x541d) 00:03:42 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x40000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x20040054) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0xc0) [ 508.833246][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:03:42 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7f, 0x3, 0x200, 0x101}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4002}, 0x80) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/bluetooth', 0x101000, 0x4) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f8, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x800}, 0x4840) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x406, 0x7}) 00:03:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCCONS(r1, 0x541d) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_setup(0x4a6c, &(0x7f0000000000)={0x0, 0x29d1, 0x10, 0x3, 0xd0, 0x0, r0}) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x245c0, 0x0) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x604, 0x7}) 00:03:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:42 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0xdc4550451de5f1d6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000200)=@setlink={0x4dc, 0x13, 0x31e, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x220}, [@IFLA_VFINFO_LIST={0x470, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x24da, 0x1f}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3, @multicast}}]}, {0x168, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x80000001}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xc23, 0x9, 0x88a8}}, {0x14, 0x1, {0xfc7f, 0x0, 0xff, 0x88a8}}, {0x14, 0x1, {0x4, 0x6ef, 0x9, 0x8100}}, {0x14, 0x1, {0x1, 0xcdc, 0x54d0, 0x8100}}, {0x14, 0x1, {0x6, 0x51e, 0x2, 0x8100}}, {0x14, 0x1, {0x800, 0xebb, 0x0, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0xfffff000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x3f}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x9a4, 0x5, 0xc180}}, {0x14, 0x1, {0x3, 0x26d, 0x10001, 0x88a8}}, {0x14, 0x1, {0x0, 0x76, 0x800, 0x88a8}}, {0x14, 0x1, {0x0, 0xd66, 0x5244, 0x88a8}}, {0x14, 0x1, {0x81, 0x92b, 0x0, 0x88a8}}, {0x14, 0x1, {0x6f, 0xb7, 0x6, 0x88a8}}, {0x14, 0x1, {0x7, 0xfd9, 0xe68, 0x88a8}}, {0x14, 0x1, {0x8, 0x1d1, 0x8, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x408e, 0xb80, 0xa3}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x400, 0x200}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0xffffffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x90b, 0xdd5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xf31}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x6}}]}, {0x130, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x1f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5ab, 0x5cd}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7f, 0xfd8, 0x7fffffff}}, {0x14, 0x1, {0x8, 0x322, 0x2, 0x88a8}}, {0x14, 0x1, {0x3f, 0x514, 0x8, 0x88a8}}, {0x14, 0x1, {0x7, 0x71, 0x1, 0x8100}}, {0x14, 0x1, {0x0, 0x331, 0x80, 0x8100}}, {0x14, 0x1, {0xf01, 0x2fe, 0xb5a, 0x88a8}}, {0x14, 0x1, {0x6, 0x85f, 0x1, 0x88a8}}, {0x14, 0x1, {0xbf, 0x54d, 0x0, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x1, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3a, 0xf44}}, @IFLA_VF_MAC={0x28, 0x1, {0x42403a8c, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80, 0x9ca, 0x7f, 0x88a8}}, {0x14, 0x1, {0x60a, 0xab8, 0x8, 0x8100}}]}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffc, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x55, 0x3, 0x800}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffffc, 0xd0f, 0x8000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x75d0}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xe2, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x36b, 0x7fb, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x1}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x9095d74}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}]}]}, @IFLA_PHYS_PORT_ID={0x8, 0x22, "1c277f33"}, @IFLA_LINKMODE={0x5, 0x11, 0x5}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d6371e57625a085bd8ad87d7f9b4460c"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cd7d4d48c7dd00feb1bfb0c8fbec486b"}, @IFLA_PORT_VF={0x8, 0x1, 0x1ff}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x8a'}]}]}, 0x4dc}}, 0x40001) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004041) 00:03:42 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x40000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x20040054) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0xc0) (rerun: 32) 00:03:42 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0xdc4550451de5f1d6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000200)=@setlink={0x4dc, 0x13, 0x31e, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x220}, [@IFLA_VFINFO_LIST={0x470, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x24da, 0x1f}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3, @multicast}}]}, {0x168, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x80000001}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xc23, 0x9, 0x88a8}}, {0x14, 0x1, {0xfc7f, 0x0, 0xff, 0x88a8}}, {0x14, 0x1, {0x4, 0x6ef, 0x9, 0x8100}}, {0x14, 0x1, {0x1, 0xcdc, 0x54d0, 0x8100}}, {0x14, 0x1, {0x6, 0x51e, 0x2, 0x8100}}, {0x14, 0x1, {0x800, 0xebb, 0x0, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0xfffff000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x3f}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x9a4, 0x5, 0xc180}}, {0x14, 0x1, {0x3, 0x26d, 0x10001, 0x88a8}}, {0x14, 0x1, {0x0, 0x76, 0x800, 0x88a8}}, {0x14, 0x1, {0x0, 0xd66, 0x5244, 0x88a8}}, {0x14, 0x1, {0x81, 0x92b, 0x0, 0x88a8}}, {0x14, 0x1, {0x6f, 0xb7, 0x6, 0x88a8}}, {0x14, 0x1, {0x7, 0xfd9, 0xe68, 0x88a8}}, {0x14, 0x1, {0x8, 0x1d1, 0x8, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x408e, 0xb80, 0xa3}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x400, 0x200}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0xffffffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x90b, 0xdd5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xf31}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x6}}]}, {0x130, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x1f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5ab, 0x5cd}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7f, 0xfd8, 0x7fffffff}}, {0x14, 0x1, {0x8, 0x322, 0x2, 0x88a8}}, {0x14, 0x1, {0x3f, 0x514, 0x8, 0x88a8}}, {0x14, 0x1, {0x7, 0x71, 0x1, 0x8100}}, {0x14, 0x1, {0x0, 0x331, 0x80, 0x8100}}, {0x14, 0x1, {0xf01, 0x2fe, 0xb5a, 0x88a8}}, {0x14, 0x1, {0x6, 0x85f, 0x1, 0x88a8}}, {0x14, 0x1, {0xbf, 0x54d, 0x0, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x1, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3a, 0xf44}}, @IFLA_VF_MAC={0x28, 0x1, {0x42403a8c, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80, 0x9ca, 0x7f, 0x88a8}}, {0x14, 0x1, {0x60a, 0xab8, 0x8, 0x8100}}]}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffc, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x55, 0x3, 0x800}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffffc, 0xd0f, 0x8000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x75d0}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xe2, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x36b, 0x7fb, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x1}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x9095d74}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}]}]}, @IFLA_PHYS_PORT_ID={0x8, 0x22, "1c277f33"}, @IFLA_LINKMODE={0x5, 0x11, 0x5}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d6371e57625a085bd8ad87d7f9b4460c"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cd7d4d48c7dd00feb1bfb0c8fbec486b"}, @IFLA_PORT_VF={0x8, 0x1, 0x1ff}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x8a'}]}]}, 0x4dc}}, 0x40001) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004041) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0xdc4550451de5f1d6, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000200)=@setlink={0x4dc, 0x13, 0x31e, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x220}, [@IFLA_VFINFO_LIST={0x470, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x24da, 0x1f}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3, @multicast}}]}, {0x168, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x80000001}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xc23, 0x9, 0x88a8}}, {0x14, 0x1, {0xfc7f, 0x0, 0xff, 0x88a8}}, {0x14, 0x1, {0x4, 0x6ef, 0x9, 0x8100}}, {0x14, 0x1, {0x1, 0xcdc, 0x54d0, 0x8100}}, {0x14, 0x1, {0x6, 0x51e, 0x2, 0x8100}}, {0x14, 0x1, {0x800, 0xebb, 0x0, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0xfffff000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x3f}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x9a4, 0x5, 0xc180}}, {0x14, 0x1, {0x3, 0x26d, 0x10001, 0x88a8}}, {0x14, 0x1, {0x0, 0x76, 0x800, 0x88a8}}, {0x14, 0x1, {0x0, 0xd66, 0x5244, 0x88a8}}, {0x14, 0x1, {0x81, 0x92b, 0x0, 0x88a8}}, {0x14, 0x1, {0x6f, 0xb7, 0x6, 0x88a8}}, {0x14, 0x1, {0x7, 0xfd9, 0xe68, 0x88a8}}, {0x14, 0x1, {0x8, 0x1d1, 0x8, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x408e, 0xb80, 0xa3}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x400, 0x200}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0xffffffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x90b, 0xdd5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xf31}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x6}}]}, {0x130, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x1f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5ab, 0x5cd}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7f, 0xfd8, 0x7fffffff}}, {0x14, 0x1, {0x8, 0x322, 0x2, 0x88a8}}, {0x14, 0x1, {0x3f, 0x514, 0x8, 0x88a8}}, {0x14, 0x1, {0x7, 0x71, 0x1, 0x8100}}, {0x14, 0x1, {0x0, 0x331, 0x80, 0x8100}}, {0x14, 0x1, {0xf01, 0x2fe, 0xb5a, 0x88a8}}, {0x14, 0x1, {0x6, 0x85f, 0x1, 0x88a8}}, {0x14, 0x1, {0xbf, 0x54d, 0x0, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x1, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3a, 0xf44}}, @IFLA_VF_MAC={0x28, 0x1, {0x42403a8c, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80, 0x9ca, 0x7f, 0x88a8}}, {0x14, 0x1, {0x60a, 0xab8, 0x8, 0x8100}}]}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffc, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x55, 0x3, 0x800}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffffc, 0xd0f, 0x8000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x75d0}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xe2, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x36b, 0x7fb, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x1}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x9095d74}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}]}]}, @IFLA_PHYS_PORT_ID={0x8, 0x22, "1c277f33"}, @IFLA_LINKMODE={0x5, 0x11, 0x5}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d6371e57625a085bd8ad87d7f9b4460c"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cd7d4d48c7dd00feb1bfb0c8fbec486b"}, @IFLA_PORT_VF={0x8, 0x1, 0x1ff}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x8a'}]}]}, 0x4dc}}, 0x40001) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) (async) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004041) (async) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async, rerun: 64) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) (rerun: 64) ioctl$TIOCCONS(r1, 0x541d) 00:03:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x4a6c, &(0x7f0000000000)={0x0, 0x29d1, 0x10, 0x3, 0xd0, 0x0, r0}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x245c0, 0x0) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x700, 0x7}) 00:03:42 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x40000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x20040054) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0xc0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x40000) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x20040054) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0xc0) (async) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x1402, 0x7}) 00:03:42 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000040)) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x24048000) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x8, 0x700, 0x0, 0x1, {{0x2f, 0x4, 0x3, 0x7, 0xbc, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x41, 0x2, [{0x2, 0x11, "706ff61b85741d5fbda0a43bc492dd"}, {0x6, 0xc, "84c6b001ca5bf7dbd1bb"}, {0x6, 0x2}, {0x7, 0x6, "18b177f2"}, {0x6, 0xf, "32472f0c56e2da96613b82b8f9"}, {0x0, 0x7, "e39b2154db"}]}, @timestamp_addr={0x44, 0x24, 0x3c, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2}, {@broadcast, 0x6}]}, @generic={0x82, 0xd, "9bfe9071119ba98abcb061"}, @rr={0x7, 0x13, 0xd2, [@multicast2, @local, @private=0xa010101, @loopback]}, @ssrr={0x89, 0x17, 0x59, [@multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @private=0xa010102]}, @end, @timestamp={0x44, 0x8, 0xe9, 0x0, 0x2, [0xe4f]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5535c003e14c32f0}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x8c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="3cd312bf3b901dce7cf6f61c000000030701020000000000000000034fff8483205a7f6eb37d2149952187becb214c32cde360c5bd535ee25e8844b984710224887ba77bf2308004bc292840426813af2e7f8440462bce681fb37290042bc52c09d2c3f2f324764230bfe1138917b19c635d4810258ada529dfd27cb367d788435329eced3d44e60cebcca6bc00270d6409f2a696b"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000700)={'wg2\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:42 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/scsi_disk', 0x0, 0x0) 00:03:42 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0xdc4550451de5f1d6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000200)=@setlink={0x4dc, 0x13, 0x31e, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x220}, [@IFLA_VFINFO_LIST={0x470, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x24da, 0x1f}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3, @multicast}}]}, {0x168, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x80000001}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xc23, 0x9, 0x88a8}}, {0x14, 0x1, {0xfc7f, 0x0, 0xff, 0x88a8}}, {0x14, 0x1, {0x4, 0x6ef, 0x9, 0x8100}}, {0x14, 0x1, {0x1, 0xcdc, 0x54d0, 0x8100}}, {0x14, 0x1, {0x6, 0x51e, 0x2, 0x8100}}, {0x14, 0x1, {0x800, 0xebb, 0x0, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0xfffff000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x3f}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x9a4, 0x5, 0xc180}}, {0x14, 0x1, {0x3, 0x26d, 0x10001, 0x88a8}}, {0x14, 0x1, {0x0, 0x76, 0x800, 0x88a8}}, {0x14, 0x1, {0x0, 0xd66, 0x5244, 0x88a8}}, {0x14, 0x1, {0x81, 0x92b, 0x0, 0x88a8}}, {0x14, 0x1, {0x6f, 0xb7, 0x6, 0x88a8}}, {0x14, 0x1, {0x7, 0xfd9, 0xe68, 0x88a8}}, {0x14, 0x1, {0x8, 0x1d1, 0x8, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x408e, 0xb80, 0xa3}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x400, 0x200}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0xffffffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x90b, 0xdd5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xf31}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x6}}]}, {0x130, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x1f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5ab, 0x5cd}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7f, 0xfd8, 0x7fffffff}}, {0x14, 0x1, {0x8, 0x322, 0x2, 0x88a8}}, {0x14, 0x1, {0x3f, 0x514, 0x8, 0x88a8}}, {0x14, 0x1, {0x7, 0x71, 0x1, 0x8100}}, {0x14, 0x1, {0x0, 0x331, 0x80, 0x8100}}, {0x14, 0x1, {0xf01, 0x2fe, 0xb5a, 0x88a8}}, {0x14, 0x1, {0x6, 0x85f, 0x1, 0x88a8}}, {0x14, 0x1, {0xbf, 0x54d, 0x0, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x1, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3a, 0xf44}}, @IFLA_VF_MAC={0x28, 0x1, {0x42403a8c, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80, 0x9ca, 0x7f, 0x88a8}}, {0x14, 0x1, {0x60a, 0xab8, 0x8, 0x8100}}]}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffc, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x55, 0x3, 0x800}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffffc, 0xd0f, 0x8000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x75d0}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xe2, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x36b, 0x7fb, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x1}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x9095d74}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}]}]}, @IFLA_PHYS_PORT_ID={0x8, 0x22, "1c277f33"}, @IFLA_LINKMODE={0x5, 0x11, 0x5}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d6371e57625a085bd8ad87d7f9b4460c"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cd7d4d48c7dd00feb1bfb0c8fbec486b"}, @IFLA_PORT_VF={0x8, 0x1, 0x1ff}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x8a'}]}]}, 0x4dc}}, 0x40001) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004041) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0xdc4550451de5f1d6, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000200)=@setlink={0x4dc, 0x13, 0x31e, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x220}, [@IFLA_VFINFO_LIST={0x470, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x24da, 0x1f}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x4}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x2}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x3, @multicast}}]}, {0x168, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x80000001}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xc23, 0x9, 0x88a8}}, {0x14, 0x1, {0xfc7f, 0x0, 0xff, 0x88a8}}, {0x14, 0x1, {0x4, 0x6ef, 0x9, 0x8100}}, {0x14, 0x1, {0x1, 0xcdc, 0x54d0, 0x8100}}, {0x14, 0x1, {0x6, 0x51e, 0x2, 0x8100}}, {0x14, 0x1, {0x800, 0xebb, 0x0, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0xfffff000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x3f}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x9a4, 0x5, 0xc180}}, {0x14, 0x1, {0x3, 0x26d, 0x10001, 0x88a8}}, {0x14, 0x1, {0x0, 0x76, 0x800, 0x88a8}}, {0x14, 0x1, {0x0, 0xd66, 0x5244, 0x88a8}}, {0x14, 0x1, {0x81, 0x92b, 0x0, 0x88a8}}, {0x14, 0x1, {0x6f, 0xb7, 0x6, 0x88a8}}, {0x14, 0x1, {0x7, 0xfd9, 0xe68, 0x88a8}}, {0x14, 0x1, {0x8, 0x1d1, 0x8, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x408e, 0xb80, 0xa3}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x400, 0x200}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0xffffffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x90b, 0xdd5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xf31}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0x6}}]}, {0x130, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x1f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5ab, 0x5cd}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7f, 0xfd8, 0x7fffffff}}, {0x14, 0x1, {0x8, 0x322, 0x2, 0x88a8}}, {0x14, 0x1, {0x3f, 0x514, 0x8, 0x88a8}}, {0x14, 0x1, {0x7, 0x71, 0x1, 0x8100}}, {0x14, 0x1, {0x0, 0x331, 0x80, 0x8100}}, {0x14, 0x1, {0xf01, 0x2fe, 0xb5a, 0x88a8}}, {0x14, 0x1, {0x6, 0x85f, 0x1, 0x88a8}}, {0x14, 0x1, {0xbf, 0x54d, 0x0, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x1, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3a, 0xf44}}, @IFLA_VF_MAC={0x28, 0x1, {0x42403a8c, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80, 0x9ca, 0x7f, 0x88a8}}, {0x14, 0x1, {0x60a, 0xab8, 0x8, 0x8100}}]}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffffc, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x55, 0x3, 0x800}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffffc, 0xd0f, 0x8000}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x75d0}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xe2, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x36b, 0x7fb, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x1}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x9095d74}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}]}]}, @IFLA_PHYS_PORT_ID={0x8, 0x22, "1c277f33"}, @IFLA_LINKMODE={0x5, 0x11, 0x5}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d6371e57625a085bd8ad87d7f9b4460c"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cd7d4d48c7dd00feb1bfb0c8fbec486b"}, @IFLA_PORT_VF={0x8, 0x1, 0x1ff}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x8a'}]}]}, 0x4dc}}, 0x40001) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) (async) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004041) (async) 00:03:42 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000040)) 00:03:42 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/scsi_disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/scsi_disk', 0x0, 0x0) (async) 00:03:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x24048000) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}}, 0x40000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x8, 0x700, 0x0, 0x1, {{0x2f, 0x4, 0x3, 0x7, 0xbc, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x41, 0x2, [{0x2, 0x11, "706ff61b85741d5fbda0a43bc492dd"}, {0x6, 0xc, "84c6b001ca5bf7dbd1bb"}, {0x6, 0x2}, {0x7, 0x6, "18b177f2"}, {0x6, 0xf, "32472f0c56e2da96613b82b8f9"}, {0x0, 0x7, "e39b2154db"}]}, @timestamp_addr={0x44, 0x24, 0x3c, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2}, {@broadcast, 0x6}]}, @generic={0x82, 0xd, "9bfe9071119ba98abcb061"}, @rr={0x7, 0x13, 0xd2, [@multicast2, @local, @private=0xa010101, @loopback]}, @ssrr={0x89, 0x17, 0x59, [@multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @private=0xa010102]}, @end, @timestamp={0x44, 0x8, 0xe9, 0x0, 0x2, [0xe4f]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5535c003e14c32f0}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x8c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000000) (async) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="3cd312bf3b901dce7cf6f61c000000030701020000000000000000034fff8483205a7f6eb37d2149952187becb214c32cde360c5bd535ee25e8844b984710224887ba77bf2308004bc292840426813af2e7f8440462bce681fb37290042bc52c09d2c3f2f324764230bfe1138917b19c635d4810258ada529dfd27cb367d788435329eced3d44e60cebcca6bc00270d6409f2a696b"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000700)={'wg2\x00'}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:42 executing program 3: socketpair(0x5, 0xa, 0xfffffffd, &(0x7f0000000000)) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x1602, 0x7}) 00:03:42 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000040)) (async) 00:03:42 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/scsi_disk', 0x0, 0x0) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x3200, 0x7}) 00:03:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x24048000) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x8, 0x700, 0x0, 0x1, {{0x2f, 0x4, 0x3, 0x7, 0xbc, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x41, 0x2, [{0x2, 0x11, "706ff61b85741d5fbda0a43bc492dd"}, {0x6, 0xc, "84c6b001ca5bf7dbd1bb"}, {0x6, 0x2}, {0x7, 0x6, "18b177f2"}, {0x6, 0xf, "32472f0c56e2da96613b82b8f9"}, {0x0, 0x7, "e39b2154db"}]}, @timestamp_addr={0x44, 0x24, 0x3c, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2}, {@broadcast, 0x6}]}, @generic={0x82, 0xd, "9bfe9071119ba98abcb061"}, @rr={0x7, 0x13, 0xd2, [@multicast2, @local, @private=0xa010101, @loopback]}, @ssrr={0x89, 0x17, 0x59, [@multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @private=0xa010102]}, @end, @timestamp={0x44, 0x8, 0xe9, 0x0, 0x2, [0xe4f]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5535c003e14c32f0}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x8c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000000) (async) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="3cd312bf3b901dce7cf6f61c000000030701020000000000000000034fff8483205a7f6eb37d2149952187becb214c32cde360c5bd535ee25e8844b984710224887ba77bf2308004bc292840426813af2e7f8440462bce681fb37290042bc52c09d2c3f2f324764230bfe1138917b19c635d4810258ada529dfd27cb367d788435329eced3d44e60cebcca6bc00270d6409f2a696b"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000700)={'wg2\x00'}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:42 executing program 3: socketpair(0x5, 0xa, 0xfffffffd, &(0x7f0000000000)) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair(0x3, 0x5, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4c89}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x3) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x3400, 0x7}) 00:03:42 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/252) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vcsa(&(0x7f0000000040), 0x100000000, 0x14000) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r4, 0x4b3b, &(0x7f00000000c0)) 00:03:42 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x20a40, 0x100) 00:03:42 executing program 3: socketpair(0x5, 0xa, 0xfffffffd, &(0x7f0000000000)) socketpair(0x5, 0xa, 0xfffffffd, &(0x7f0000000000)) (async) 00:03:42 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x20a40, 0x100) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0xfffffe7d) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 00:03:42 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/252) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x100000000, 0x14000) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r4, 0x4b3b, &(0x7f00000000c0)) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair(0x3, 0x5, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4c89}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) socketpair(0x3, 0x5, 0x5, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4c89}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x3) (async) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x4000, 0x7}) 00:03:42 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/drm_kms_helper', 0x20a40, 0x100) (rerun: 32) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0xfffffe7d) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 00:03:42 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/252) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x100000000, 0x14000) (async, rerun: 64) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x80) (async, rerun: 64) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r4, 0x4b3b, &(0x7f00000000c0)) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x4200, 0x7}) 00:03:42 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair(0x3, 0x5, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4c89}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) socketpair(0x3, 0x5, 0x5, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4c89}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b31, &(0x7f0000000000)) (async) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x3) (async) 00:03:42 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4802, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0xfffffebf, 0x0, 0x108, 0x70bd2b, 0x25dfdc00, {{}, {}, {0x14, 0x18, {0x400, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20044011) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="000204ff0000050070d1aaff010000", @ANYRES32=r3, @ANYBLOB="0c00990009000000040000000500d2000b0000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000500d200020000000500d2000e0000000500d200020000000a000600ffffffffffff00000500d2000e000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x6400, 0x7}) 00:03:42 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4802, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0xfffffebf, 0x0, 0x108, 0x70bd2b, 0x25dfdc00, {{}, {}, {0x14, 0x18, {0x400, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20044011) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="000204ff0000050070d1aaff010000", @ANYRES32=r3, @ANYBLOB="0c00990009000000040000000500d2000b0000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000500d200020000000500d2000e0000000500d200020000000a000600ffffffffffff00000500d2000e000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4802, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0xfffffebf, 0x0, 0x108, 0x70bd2b, 0x25dfdc00, {{}, {}, {0x14, 0x18, {0x400, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20044011) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="000204ff0000050070d1aaff010000", @ANYRES32=r3, @ANYBLOB="0c00990009000000040000000500d2000b0000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000500d200020000000500d2000e0000000500d200020000000a000600ffffffffffff00000500d2000e000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0xfffffe7d) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 00:03:42 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) [ 509.324854][T13595] ================================================================== [ 509.332966][T13595] BUG: KCSAN: data-race in io_sq_thread / io_sq_thread_park [ 509.340270][T13595] [ 509.342596][T13595] write to 0xffff888119326ab8 of 8 bytes by task 11295 on cpu 0: [ 509.350320][T13595] io_sq_thread+0xb19/0xc00 [ 509.354836][T13595] ret_from_fork+0x1f/0x30 [ 509.359266][T13595] [ 509.361591][T13595] read to 0xffff888119326ab8 of 8 bytes by task 13595 on cpu 1: [ 509.369216][T13595] io_sq_thread_park+0x17/0x70 00:03:42 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x8501, 0x7}) 00:03:42 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4802, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0xfffffebf, 0x0, 0x108, 0x70bd2b, 0x25dfdc00, {{}, {}, {0x14, 0x18, {0x400, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20044011) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="000204ff0000050070d1aaff010000", @ANYRES32=r3, @ANYBLOB="0c00990009000000040000000500d2000b0000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000500d200020000000500d2000e0000000500d200020000000a000600ffffffffffff00000500d2000e000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4802, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0xfffffebf, 0x0, 0x108, 0x70bd2b, 0x25dfdc00, {{}, {}, {0x14, 0x18, {0x400, @bearer=@udp='udp:syz2\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20044011) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="000204ff0000050070d1aaff010000", @ANYRES32=r3, @ANYBLOB="0c00990009000000040000000500d2000b0000000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000500d200020000000500d2000e0000000500d200020000000a000600ffffffffffff00000500d2000e000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) [ 509.373994][T13595] io_ring_exit_work+0x9c/0x3c7 [ 509.378852][T13595] process_one_work+0x3f6/0x960 [ 509.383714][T13595] worker_thread+0x616/0xa70 [ 509.388315][T13595] kthread+0x1bf/0x1e0 [ 509.392390][T13595] ret_from_fork+0x1f/0x30 [ 509.396810][T13595] [ 509.399134][T13595] value changed: 0xffff88811adde8c0 -> 0x0000000000000000 [ 509.406247][T13595] [ 509.408566][T13595] Reported by Kernel Concurrency Sanitizer on: 00:03:42 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc', 0x10100, 0x90) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000080)) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0xe202, 0x7}) 00:03:42 executing program 1: r0 = shmget(0x3, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = gettid() ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={&(0x7f0000000000)="c1630b74de5a4764f375e9b46f056062d7d03861e4dbd5ec4b15ee82e24a935a7c9a18228ab6a29f8cc7fe5870fab40fedae83", 0x33}) [ 509.414708][T13595] CPU: 1 PID: 13595 Comm: kworker/u4:12 Not tainted 5.17.0-rc1-syzkaller-00316-gdf0001545b27-dirty #0 [ 509.425644][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.435718][T13595] Workqueue: events_unbound io_ring_exit_work [ 509.441812][T13595] ================================================================== 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x74, 0x28, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x9, 0x1305d043bfd735d2}, {0x10, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9a2c}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 00:03:42 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf25130000000c00018008000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="9c00018008b77fe52600030001000000", @ANYRES32=0x0, @ANYBLOB="140002007465616d300000000000000000000000080003000200000014000200766c616e310000000000000000000000140002007866726d30000000000000000000000014000200697036677265746170300000000000008800018014000200726f73653000000000000000000000001400020069705f7674693000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200726f7365300000000000000000000000080003000000000014000200626f6e64300000000000000000000000080003000300000008000300748df9221400020076657468305f6d616376746170000000"], 0x120}, 0x1, 0x0, 0x0, 0x4005}, 0x14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) io_uring_setup(0x0, &(0x7f0000000000)) r3 = gettid() ptrace$setregset(0x4205, r3, 0x0, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x22, 0x37, 0x1, {0x0, 0x6, 0x4, r3, 0x4, '))]Q'}}, 0x22) 00:03:42 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f1120000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fedbdf250600000020000180140002006d6163767461703000000000000000000800030001000000"], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x24040095) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x400000, 0x7}) 00:03:42 executing program 1: r0 = shmget(0x3, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = gettid() ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={&(0x7f0000000000)="c1630b74de5a4764f375e9b46f056062d7d03861e4dbd5ec4b15ee82e24a935a7c9a18228ab6a29f8cc7fe5870fab40fedae83", 0x33}) 00:03:42 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f1120000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fedbdf250600000020000180140002006d6163767461703000000000000000000800030001000000"], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x24040095) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f1120000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fedbdf250600000020000180140002006d6163767461703000000000000000000800030001000000"], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x24040095) (async) 00:03:42 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc', 0x10100, 0x90) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000080)) 00:03:42 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf25130000000c00018008000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="9c00018008b77fe52600030001000000", @ANYRES32=0x0, @ANYBLOB="140002007465616d300000000000000000000000080003000200000014000200766c616e310000000000000000000000140002007866726d30000000000000000000000014000200697036677265746170300000000000008800018014000200726f73653000000000000000000000001400020069705f7674693000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200726f7365300000000000000000000000080003000000000014000200626f6e64300000000000000000000000080003000300000008000300748df9221400020076657468305f6d616376746170000000"], 0x120}, 0x1, 0x0, 0x0, 0x4005}, 0x14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async, rerun: 64) io_uring_setup(0x0, &(0x7f0000000000)) (async, rerun: 64) r3 = gettid() ptrace$setregset(0x4205, r3, 0x0, 0x0) (async) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x22, 0x37, 0x1, {0x0, 0x6, 0x4, r3, 0x4, '))]Q'}}, 0x22) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x74, 0x28, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x9, 0x1305d043bfd735d2}, {0x10, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9a2c}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 00:03:42 executing program 1: r0 = shmget(0x3, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x6000) (async) r1 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = gettid() ptrace$setregset(0x4205, r2, 0x201, &(0x7f0000000040)={&(0x7f0000000000)="c1630b74de5a4764f375e9b46f056062d7d03861e4dbd5ec4b15ee82e24a935a7c9a18228ab6a29f8cc7fe5870fab40fedae83", 0x33}) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000000)=0xfffffffd) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x5251, &(0x7f0000000100)={0x0, 0x3c1, 0x1, 0x3, 0x1b1, 0x0, r1}) 00:03:42 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf25130000000c00018008000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="9c00018008b77fe52600030001000000", @ANYRES32=0x0, @ANYBLOB="140002007465616d300000000000000000000000080003000200000014000200766c616e310000000000000000000000140002007866726d30000000000000000000000014000200697036677265746170300000000000008800018014000200726f73653000000000000000000000001400020069705f7674693000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200726f7365300000000000000000000000080003000000000014000200626f6e64300000000000000000000000080003000300000008000300748df9221400020076657468305f6d616376746170000000"], 0x120}, 0x1, 0x0, 0x0, 0x4005}, 0x14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) io_uring_setup(0x0, &(0x7f0000000000)) r3 = gettid() ptrace$setregset(0x4205, r3, 0x0, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x22, 0x37, 0x1, {0x0, 0x6, 0x4, r3, 0x4, '))]Q'}}, 0x22) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf25130000000c00018008000300030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="9c00018008b77fe52600030001000000", @ANYRES32=0x0, @ANYBLOB="140002007465616d300000000000000000000000080003000200000014000200766c616e310000000000000000000000140002007866726d30000000000000000000000014000200697036677265746170300000000000008800018014000200726f73653000000000000000000000001400020069705f7674693000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="14000200726f7365300000000000000000000000080003000000000014000200626f6e64300000000000000000000000080003000300000008000300748df9221400020076657468305f6d616376746170000000"], 0x120}, 0x1, 0x0, 0x0, 0x4005}, 0x14) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) io_uring_setup(0x0, &(0x7f0000000000)) (async) gettid() (async) ptrace$setregset(0x4205, r3, 0x0, 0x0) (async) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x22, 0x37, 0x1, {0x0, 0x6, 0x4, r3, 0x4, '))]Q'}}, 0x22) (async) 00:03:42 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f1120000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fedbdf250600000020000180140002006d6163767461703000000000000000000800030001000000"], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x24040095) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x74, 0x28, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x9, 0x1305d043bfd735d2}, {0x10, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9a2c}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x74, 0x28, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x9, 0x1305d043bfd735d2}, {0x10, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9a2c}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) (async) 00:03:42 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x3) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sunrpc', 0x10100, 0x90) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000080)) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x80ffff, 0x7}) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000000)=0xfffffffd) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x5251, &(0x7f0000000100)={0x0, 0x3c1, 0x1, 0x3, 0x1b1, 0x0, r1}) io_uring_setup(0x27b0, &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000000)=0xfffffffd) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_setup(0x5251, &(0x7f0000000100)={0x0, 0x3c1, 0x1, 0x3, 0x1b1, 0x0, r1}) (async) 00:03:42 executing program 3: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) socketpair(0x10, 0x2, 0x7ffffffd, &(0x7f0000000000)) 00:03:42 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x4) 00:03:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x670, 0x2000) write$P9_RREADDIR(r1, &(0x7f0000000080)={0xc5, 0x29, 0x2, {0x4, [{{0x10, 0x0, 0x8}, 0x621, 0x4, 0x7, './file0'}, {{0x10, 0x3}, 0x1, 0x9, 0x7, './file0'}, {{0x10, 0x0, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x8, 0x4, 0x6}, 0xe500000000000000, 0x0, 0x7, './file0'}, {{0x8, 0x1, 0x7}, 0x9, 0xff, 0x7, './file0'}, {{0x80, 0x2}, 0x3, 0xe1, 0x7, './file0'}]}}, 0xc5) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) write$P9_ROPEN(r2, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x20, 0x2, 0x5}, 0xad35}}, 0x18) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:42 executing program 3: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) (async) socketpair(0x10, 0x2, 0x7ffffffd, &(0x7f0000000000)) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x1000000, 0x7}) 00:03:42 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x4) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000000)=0xfffffffd) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_setup(0x5251, &(0x7f0000000100)={0x0, 0x3c1, 0x1, 0x3, 0x1b1, 0x0, r1}) 00:03:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) 00:03:42 executing program 3: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) socketpair(0x10, 0x2, 0x7ffffffd, &(0x7f0000000000)) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000040)) (async) socketpair(0x10, 0x2, 0x7ffffffd, &(0x7f0000000000)) (async) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x670, 0x2000) write$P9_RREADDIR(r1, &(0x7f0000000080)={0xc5, 0x29, 0x2, {0x4, [{{0x10, 0x0, 0x8}, 0x621, 0x4, 0x7, './file0'}, {{0x10, 0x3}, 0x1, 0x9, 0x7, './file0'}, {{0x10, 0x0, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x8, 0x4, 0x6}, 0xe500000000000000, 0x0, 0x7, './file0'}, {{0x8, 0x1, 0x7}, 0x9, 0xff, 0x7, './file0'}, {{0x80, 0x2}, 0x3, 0xe1, 0x7, './file0'}]}}, 0xc5) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) write$P9_ROPEN(r2, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x20, 0x2, 0x5}, 0xad35}}, 0x18) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000000)={0x0, 0x4002}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x2000000, 0x7}) 00:03:42 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x0, 0x4) 00:03:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000000)={0x0, 0x4002}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:42 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc410048}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09f427cb7000f5313ac200"/23, @ANYRES32=0x0, @ANYBLOB="08001f0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c081}, 0x200080d1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/tm6000', 0x1, 0x1c4) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x2040000, 0x7}) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x670, 0x2000) write$P9_RREADDIR(r1, &(0x7f0000000080)={0xc5, 0x29, 0x2, {0x4, [{{0x10, 0x0, 0x8}, 0x621, 0x4, 0x7, './file0'}, {{0x10, 0x3}, 0x1, 0x9, 0x7, './file0'}, {{0x10, 0x0, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x8, 0x4, 0x6}, 0xe500000000000000, 0x0, 0x7, './file0'}, {{0x8, 0x1, 0x7}, 0x9, 0xff, 0x7, './file0'}, {{0x80, 0x2}, 0x3, 0xe1, 0x7, './file0'}]}}, 0xc5) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) write$P9_ROPEN(r2, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x20, 0x2, 0x5}, 0xad35}}, 0x18) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x670, 0x2000) (async) write$P9_RREADDIR(r1, &(0x7f0000000080)={0xc5, 0x29, 0x2, {0x4, [{{0x10, 0x0, 0x8}, 0x621, 0x4, 0x7, './file0'}, {{0x10, 0x3}, 0x1, 0x9, 0x7, './file0'}, {{0x10, 0x0, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x8, 0x4, 0x6}, 0xe500000000000000, 0x0, 0x7, './file0'}, {{0x8, 0x1, 0x7}, 0x9, 0xff, 0x7, './file0'}, {{0x80, 0x2}, 0x3, 0xe1, 0x7, './file0'}]}}, 0xc5) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) write$P9_ROPEN(r2, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x20, 0x2, 0x5}, 0xad35}}, 0x18) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) 00:03:42 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2d, 0x5, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x884c) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) 00:03:42 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc410048}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09f427cb7000f5313ac200"/23, @ANYRES32=0x0, @ANYBLOB="08001f0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c081}, 0x200080d1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/tm6000', 0x1, 0x1c4) 00:03:42 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000000)={0x0, 0x4002}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:42 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x3000000, 0x7}) 00:03:42 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/kovaplus', 0x400, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf25110000005000018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300000000006c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="140002007767320000000000000000000000000014000200766972745f776966693000000000000014000200776c616e30000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="1400020069703665727370616e300000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007866726d300000000000000000000000080003000000000008000100", @ANYRES32=r7, @ANYBLOB="9000018014000200627269646765300000000000000000000800030006fcffff070003000000000014000200000000000000000000000000100000009cb33499f3ca7d6356140002780fe88c006261746164765f736c6176655f3000001400020076657468301f6d61637674", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002006d61637365633000000000000000000008000300000000005400018008000300020000001400020076657468315f746f5f6272696467650008000300020000001400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000"], 0x1ec}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 00:03:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x2, 0x4, 0x200}) 00:03:43 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc410048}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09f427cb7000f5313ac200"/23, @ANYRES32=0x0, @ANYBLOB="08001f0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c081}, 0x200080d1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/tm6000', 0x1, 0x1c4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc410048}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="09f427cb7000f5313ac200"/23, @ANYRES32=0x0, @ANYBLOB="08001f0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c081}, 0x200080d1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/tm6000', 0x1, 0x1c4) (async) 00:03:43 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2d, 0x5, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x884c) (async, rerun: 32) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) (rerun: 32) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x4000000, 0x7}) 00:03:43 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/kovaplus', 0x400, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf25110000005000018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300000000006c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="140002007767320000000000000000000000000014000200766972745f776966693000000000000014000200776c616e30000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="1400020069703665727370616e300000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007866726d300000000000000000000000080003000000000008000100", @ANYRES32=r7, @ANYBLOB="9000018014000200627269646765300000000000000000000800030006fcffff070003000000000014000200000000000000000000000000100000009cb33499f3ca7d6356140002780fe88c006261746164765f736c6176655f3000001400020076657468301f6d61637674", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002006d61637365633000000000000000000008000300000000005400018008000300020000001400020076657468315f746f5f6272696467650008000300020000001400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000"], 0x1ec}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 00:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x2, 0x4, 0x200}) 00:03:43 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@mmap}], [{@measure}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x31, 0x38, 0x0, 0x62, 0x30, 0x31, 0x30], 0x2d, [0x39, 0x38, 0x63, 0x39], 0x2d, [0x33, 0x61, 0x61, 0x65], 0x2d, [0x32, 0x62, 0x35, 0x64], 0x2d, [0x32, 0x30, 0x61, 0x38, 0x66, 0x61, 0x37, 0x32]}}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/nvram\x00'}}, {@obj_user}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@obj_type={'obj_type', 0x3d, '\x80\xa4+-{%-+@/*.:--\xcb,\x00'}}]}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x124, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "899b3010f8eac8d79b4c1e2e459eb9a0b0b43afa35b254003974651246901caf787ff19638444db682b44cf2810aaa5a8bb518e1277dff66"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '\x80\xa4+-{%-+@/*.:--\xcb,\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xbb\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) r3 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 00:03:43 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2d, 0x5, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x884c) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2d, 0x5, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x884c) (async) ioctl$KDGKBTYPE(r1, 0x4b3b, &(0x7f0000000000)) (async) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x6040000, 0x7}) 00:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x2, 0x4, 0x200}) 00:03:43 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/kovaplus', 0x400, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf25110000005000018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468315f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300000000006c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="140002007767320000000000000000000000000014000200766972745f776966693000000000000014000200776c616e30000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="1400020069703665727370616e300000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007866726d300000000000000000000000080003000000000008000100", @ANYRES32=r7, @ANYBLOB="9000018014000200627269646765300000000000000000000800030006fcffff070003000000000014000200000000000000000000000000100000009cb33499f3ca7d6356140002780fe88c006261746164765f736c6176655f3000001400020076657468301f6d61637674", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002006d61637365633000000000000000000008000300000000005400018008000300020000001400020076657468315f746f5f6272696467650008000300020000001400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000"], 0x1ec}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) 00:03:43 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@mmap}], [{@measure}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x31, 0x38, 0x0, 0x62, 0x30, 0x31, 0x30], 0x2d, [0x39, 0x38, 0x63, 0x39], 0x2d, [0x33, 0x61, 0x61, 0x65], 0x2d, [0x32, 0x62, 0x35, 0x64], 0x2d, [0x32, 0x30, 0x61, 0x38, 0x66, 0x61, 0x37, 0x32]}}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/nvram\x00'}}, {@obj_user}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@obj_type={'obj_type', 0x3d, '\x80\xa4+-{%-+@/*.:--\xcb,\x00'}}]}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x124, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "899b3010f8eac8d79b4c1e2e459eb9a0b0b43afa35b254003974651246901caf787ff19638444db682b44cf2810aaa5a8bb518e1277dff66"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '\x80\xa4+-{%-+@/*.:--\xcb,\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xbb\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) r3 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@mmap}], [{@measure}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x31, 0x38, 0x0, 0x62, 0x30, 0x31, 0x30], 0x2d, [0x39, 0x38, 0x63, 0x39], 0x2d, [0x33, 0x61, 0x61, 0x65], 0x2d, [0x32, 0x62, 0x35, 0x64], 0x2d, [0x32, 0x30, 0x61, 0x38, 0x66, 0x61, 0x37, 0x32]}}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/nvram\x00'}}, {@obj_user}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@obj_type={'obj_type', 0x3d, '\x80\xa4+-{%-+@/*.:--\xcb,\x00'}}]}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x124, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "899b3010f8eac8d79b4c1e2e459eb9a0b0b43afa35b254003974651246901caf787ff19638444db682b44cf2810aaa5a8bb518e1277dff66"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '\x80\xa4+-{%-+@/*.:--\xcb,\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xbb\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) (async) io_uring_setup(0x27b0, &(0x7f0000000080)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) 00:03:43 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x5c0c3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44010000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xe0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20048880}, 0x4040000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3) 00:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x7000000, 0x7}) 00:03:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x10000) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) io_uring_setup(0x6960, &(0x7f00000000c0)={0x0, 0x1a04, 0x4, 0x3, 0x1fb}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x3, 0x3, 0xdec7, 0x9, 0xfd, "7466f517ab09a7ccaaf9af12151de1297a1282", 0x7, 0x5}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000340), 0x4, 0x410080) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc000}, 0x40004) write$P9_RATTACH(r3, &(0x7f00000002c0)={0x14, 0x69, 0x2, {0x20, 0x2}}, 0x14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) syz_open_pts(r2, 0x440001) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c004c43a0187c5cee8a2d441ea3905a5e9d6a0a7bd44250da042d23e88d3e2807f314d4b5bb7b40bb9108ccc32c338ed7f3adaf57340517d62b541448a5a2ae49b38948eeba7207a8f8c809a5b3b9e38f450d763e3794ed8b", @ANYRES16=0x0, @ANYBLOB="200026bd7000fb000008000100290000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c094}, 0x20040095) 00:03:43 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x5c0c3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44010000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xe0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20048880}, 0x4040000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x5c0c3, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44010000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xe0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20048880}, 0x4040000) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3) (async) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x8000000, 0x7}) 00:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x10000) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) io_uring_setup(0x6960, &(0x7f00000000c0)={0x0, 0x1a04, 0x4, 0x3, 0x1fb}) (async, rerun: 32) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x3, 0x3, 0xdec7, 0x9, 0xfd, "7466f517ab09a7ccaaf9af12151de1297a1282", 0x7, 0x5}) (rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) (async, rerun: 32) r4 = syz_open_dev$vcsn(&(0x7f0000000340), 0x4, 0x410080) (rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc000}, 0x40004) write$P9_RATTACH(r3, &(0x7f00000002c0)={0x14, 0x69, 0x2, {0x20, 0x2}}, 0x14) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) syz_open_pts(r2, 0x440001) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c004c43a0187c5cee8a2d441ea3905a5e9d6a0a7bd44250da042d23e88d3e2807f314d4b5bb7b40bb9108ccc32c338ed7f3adaf57340517d62b541448a5a2ae49b38948eeba7207a8f8c809a5b3b9e38f450d763e3794ed8b", @ANYRES16=0x0, @ANYBLOB="200026bd7000fb000008000100290000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c094}, 0x20040095) 00:03:43 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@mmap}], [{@measure}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x31, 0x38, 0x0, 0x62, 0x30, 0x31, 0x30], 0x2d, [0x39, 0x38, 0x63, 0x39], 0x2d, [0x33, 0x61, 0x61, 0x65], 0x2d, [0x32, 0x62, 0x35, 0x64], 0x2d, [0x32, 0x30, 0x61, 0x38, 0x66, 0x61, 0x37, 0x32]}}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/nvram\x00'}}, {@obj_user}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@obj_type={'obj_type', 0x3d, '\x80\xa4+-{%-+@/*.:--\xcb,\x00'}}]}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x124, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xb8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "899b3010f8eac8d79b4c1e2e459eb9a0b0b43afa35b254003974651246901caf787ff19638444db682b44cf2810aaa5a8bb518e1277dff66"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '\x80\xa4+-{%-+@/*.:--\xcb,\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xbb\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) (async) r3 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 00:03:43 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x5c0c3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44010000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xe0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20048880}, 0x4040000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3) 00:03:43 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x6bf, &(0x7f0000000000)={0x0, 0x97c7, 0x20, 0x0, 0x293, 0x0, r0}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:43 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x1, 0x81000, 0x3, {{0x1a, 0x4, 0x1, 0x2a, 0x68, 0x64, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xa, [@remote, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010101, @broadcast]}, @generic={0x7, 0x9, "3080fa22515410"}, @noop, @noop, @noop, @timestamp_addr={0x44, 0x2c, 0xb4, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x7fff}, {@local, 0x8001}, {@loopback, 0x18}, {@multicast1, 0x200}, {@local, 0x80}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x5, 0x9, {{0xf, 0x4, 0x1, 0x6, 0x3c, 0x66, 0x0, 0x9, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@lsrr={0x83, 0x27, 0x9c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @empty, @private=0xa010102, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x15}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x6, 0x1, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @noop, @noop, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0x5, [0x7, 0x1, 0x6e4, 0xffffff48, 0x35, 0x6]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000480)={0x544, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0xa1, 0x9, 0xfff}, {0x0, 0x0, 0x8, 0x10000}, {0x7f, 0xe, 0x1f, 0x5}, {0x509, 0x7c, 0x4, 0x7f}, {0xf312, 0x9, 0x3, 0xc4a4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe55}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x81, 0x40, 0x20, 0xfffffff9}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x544}, 0x1, 0x0, 0x0, 0x41}, 0xc880) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x14020000, 0x7}) 00:03:43 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x3e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/spi_transport', 0xe940, 0x20) 00:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:43 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x1, 0x81000, 0x3, {{0x1a, 0x4, 0x1, 0x2a, 0x68, 0x64, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xa, [@remote, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010101, @broadcast]}, @generic={0x7, 0x9, "3080fa22515410"}, @noop, @noop, @noop, @timestamp_addr={0x44, 0x2c, 0xb4, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x7fff}, {@local, 0x8001}, {@loopback, 0x18}, {@multicast1, 0x200}, {@local, 0x80}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x5, 0x9, {{0xf, 0x4, 0x1, 0x6, 0x3c, 0x66, 0x0, 0x9, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@lsrr={0x83, 0x27, 0x9c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @empty, @private=0xa010102, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x15}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x6, 0x1, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @noop, @noop, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0x5, [0x7, 0x1, 0x6e4, 0xffffff48, 0x35, 0x6]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000480)={0x544, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0xa1, 0x9, 0xfff}, {0x0, 0x0, 0x8, 0x10000}, {0x7f, 0xe, 0x1f, 0x5}, {0x509, 0x7c, 0x4, 0x7f}, {0xf312, 0x9, 0x3, 0xc4a4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe55}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x81, 0x40, 0x20, 0xfffffff9}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x544}, 0x1, 0x0, 0x0, 0x41}, 0xc880) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:43 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x3e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/spi_transport', 0xe940, 0x20) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x3e) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/spi_transport', 0xe940, 0x20) (async) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x16020000, 0x7}) 00:03:43 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x1, 0x81000, 0x3, {{0x1a, 0x4, 0x1, 0x2a, 0x68, 0x64, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xa, [@remote, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010101, @broadcast]}, @generic={0x7, 0x9, "3080fa22515410"}, @noop, @noop, @noop, @timestamp_addr={0x44, 0x2c, 0xb4, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x7fff}, {@local, 0x8001}, {@loopback, 0x18}, {@multicast1, 0x200}, {@local, 0x80}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x5, 0x9, {{0xf, 0x4, 0x1, 0x6, 0x3c, 0x66, 0x0, 0x9, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@lsrr={0x83, 0x27, 0x9c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @empty, @private=0xa010102, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x15}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x6, 0x1, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @noop, @noop, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0x5, [0x7, 0x1, 0x6e4, 0xffffff48, 0x35, 0x6]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000480)={0x544, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0xa1, 0x9, 0xfff}, {0x0, 0x0, 0x8, 0x10000}, {0x7f, 0xe, 0x1f, 0x5}, {0x509, 0x7c, 0x4, 0x7f}, {0xf312, 0x9, 0x3, 0xc4a4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe55}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x81, 0x40, 0x20, 0xfffffff9}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x544}, 0x1, 0x0, 0x0, 0x41}, 0xc880) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x1, 0x81000, 0x3, {{0x1a, 0x4, 0x1, 0x2a, 0x68, 0x64, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xa, [@remote, @rand_addr=0x64010101, @broadcast, @rand_addr=0x64010101, @broadcast]}, @generic={0x7, 0x9, "3080fa22515410"}, @noop, @noop, @noop, @timestamp_addr={0x44, 0x2c, 0xb4, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x7fff}, {@local, 0x8001}, {@loopback, 0x18}, {@multicast1, 0x200}, {@local, 0x80}]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x5, 0x9, {{0xf, 0x4, 0x1, 0x6, 0x3c, 0x66, 0x0, 0x9, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@lsrr={0x83, 0x27, 0x9c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @empty, @private=0xa010102, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x15}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x6, 0x1, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @noop, @noop, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0x5, [0x7, 0x1, 0x6e4, 0xffffff48, 0x35, 0x6]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000480)={0x544, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0xa1, 0x9, 0xfff}, {0x0, 0x0, 0x8, 0x10000}, {0x7f, 0xe, 0x1f, 0x5}, {0x509, 0x7c, 0x4, 0x7f}, {0xf312, 0x9, 0x3, 0xc4a4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe55}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x81, 0x40, 0x20, 0xfffffff9}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x544}, 0x1, 0x0, 0x0, 0x41}, 0xc880) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) 00:03:43 executing program 5: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x3e) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/spi_transport', 0xe940, 0x20) 00:03:43 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x6bf, &(0x7f0000000000)={0x0, 0x97c7, 0x20, 0x0, 0x293, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x10000) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x1) (async) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) io_uring_setup(0x6960, &(0x7f00000000c0)={0x0, 0x1a04, 0x4, 0x3, 0x1fb}) (async, rerun: 64) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x3, 0x3, 0xdec7, 0x9, 0xfd, "7466f517ab09a7ccaaf9af12151de1297a1282", 0x7, 0x5}) (async, rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000340), 0x4, 0x410080) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc000}, 0x40004) write$P9_RATTACH(r3, &(0x7f00000002c0)={0x14, 0x69, 0x2, {0x20, 0x2}}, 0x14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) syz_open_pts(r2, 0x440001) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c004c43a0187c5cee8a2d441ea3905a5e9d6a0a7bd44250da042d23e88d3e2807f314d4b5bb7b40bb9108ccc32c338ed7f3adaf57340517d62b541448a5a2ae49b38948eeba7207a8f8c809a5b3b9e38f450d763e3794ed8b", @ANYRES16=0x0, @ANYBLOB="200026bd7000fb000008000100290000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c094}, 0x20040095) 00:03:43 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x720, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ecb70bcc4c"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x32000000, 0x7}) 00:03:43 executing program 3: socketpair(0x1f, 0x2, 0x10001, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/bonding', 0x10200, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r2) accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 00:03:43 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x6bf, &(0x7f0000000000)={0x0, 0x97c7, 0x20, 0x0, 0x293, 0x0, r0}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:43 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x720, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ecb70bcc4c"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 00:03:43 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/4096) wait4(0x0, &(0x7f0000000000), 0x20000000, 0x0) r1 = gettid() ptrace$setregset(0x4205, r1, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000001080)) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x34000000, 0x7}) 00:03:43 executing program 3: socketpair(0x1f, 0x2, 0x10001, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/bonding', 0x10200, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r2) accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) socketpair(0x1f, 0x2, 0x10001, &(0x7f0000000000)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/bonding', 0x10200, 0x10) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r2) (async) accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) (async) 00:03:43 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) (async, rerun: 32) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x720, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ecb70bcc4c"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 00:03:43 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/4096) wait4(0x0, &(0x7f0000000000), 0x20000000, 0x0) r1 = gettid() ptrace$setregset(0x4205, r1, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000001080)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/4096) (async) wait4(0x0, &(0x7f0000000000), 0x20000000, 0x0) (async) gettid() (async) ptrace$setregset(0x4205, r1, 0x0, 0x0) (async) sched_rr_get_interval(r1, &(0x7f0000001080)) (async) 00:03:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0x1, 0xfffffffb, 0x0, 0x80000001, 0xd01a}) 00:03:43 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x101800) io_uring_setup(0x37b7, &(0x7f0000000100)={0x0, 0x2106, 0x8, 0x3, 0x2d6, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@deltclass={0x90, 0x29, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x0, 0x5}, {0x7, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x6}}, @tclass_kind_options=@c_atm={{0x8}, {0x54, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x30, 0x3, "715a1419760879515404efccc7780193efa49155f247477639e3b14cf55ab73a8acf783af8da27e1915f1c53"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x2}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0xf2}}]}, 0x90}, 0x1, 0x0, 0x0, 0x810}, 0x4000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x40000000, 0x7}) 00:03:43 executing program 3: socketpair(0x1f, 0x2, 0x10001, &(0x7f0000000000)) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/bonding', 0x10200, 0x10) (async, rerun: 64) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r2) (async, rerun: 64) accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 00:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x46000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x4) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:43 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing', 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/4096) wait4(0x0, &(0x7f0000000000), 0x20000000, 0x0) r1 = gettid() ptrace$setregset(0x4205, r1, 0x0, 0x0) sched_rr_get_interval(r1, &(0x7f0000001080)) 00:03:43 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2000c2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x7fff) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd25, 0x25dfdbfe, {0x80, 0x0, 0x20, 0x2, 0xfe, 0x3, 0x1cb, 0x3, 0x1000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4c014) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, 0x2, 0x8, 0x6679bd861170a6df, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xdbec}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3df3e2f7}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x74b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x42000000, 0x7}) 00:03:43 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x101800) io_uring_setup(0x37b7, &(0x7f0000000100)={0x0, 0x2106, 0x8, 0x3, 0x2d6, 0x0, r1}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@deltclass={0x90, 0x29, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x0, 0x5}, {0x7, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x6}}, @tclass_kind_options=@c_atm={{0x8}, {0x54, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x30, 0x3, "715a1419760879515404efccc7780193efa49155f247477639e3b14cf55ab73a8acf783af8da27e1915f1c53"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x2}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0xf2}}]}, 0x90}, 0x1, 0x0, 0x0, 0x810}, 0x4000) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) 00:03:43 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x46000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x4) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x46000, 0x0) (async) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x4) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x64000000, 0x7}) 00:03:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0x1, 0xfffffffb, 0x0, 0x80000001, 0xd01a}) 00:03:43 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2000c2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x7fff) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd25, 0x25dfdbfe, {0x80, 0x0, 0x20, 0x2, 0xfe, 0x3, 0x1cb, 0x3, 0x1000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4c014) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, 0x2, 0x8, 0x6679bd861170a6df, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xdbec}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3df3e2f7}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x74b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2000c2, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$VT_ACTIVATE(r1, 0x5606, 0x7fff) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd25, 0x25dfdbfe, {0x80, 0x0, 0x20, 0x2, 0xfe, 0x3, 0x1cb, 0x3, 0x1000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4c014) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, 0x2, 0x8, 0x6679bd861170a6df, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xdbec}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3df3e2f7}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x74b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) 00:03:43 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x101800) io_uring_setup(0x37b7, &(0x7f0000000100)={0x0, 0x2106, 0x8, 0x3, 0x2d6, 0x0, r1}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@deltclass={0x90, 0x29, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xb}, {0x0, 0x5}, {0x7, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x6}}, @tclass_kind_options=@c_atm={{0x8}, {0x54, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x30, 0x3, "715a1419760879515404efccc7780193efa49155f247477639e3b14cf55ab73a8acf783af8da27e1915f1c53"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x2}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0xf2}}]}, 0x90}, 0x1, 0x0, 0x0, 0x810}, 0x4000) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) 00:03:43 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) (async) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x85010000, 0x7}) 00:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x46000, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x4) (async) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) 00:03:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) (async) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0x1, 0xfffffffb, 0x0, 0x80000001, 0xd01a}) 00:03:43 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2000c2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x7fff) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd25, 0x25dfdbfe, {0x80, 0x0, 0x20, 0x2, 0xfe, 0x3, 0x1cb, 0x3, 0x1000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4c014) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, 0x2, 0x8, 0x6679bd861170a6df, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xdbec}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3df3e2f7}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x74b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0xe2020000, 0x7}) 00:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 00:03:43 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 00:03:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/4096) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 00:03:43 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pnp', 0x2c4602, 0x0) socketpair(0x27, 0x800, 0x22, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001200), &(0x7f0000001240)=0x4) bind$phonet(r1, &(0x7f00000011c0)={0x23, 0x9, 0x4, 0xb8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)=@ipmr_delroute={0x1044, 0x19, 0x20, 0x70bd2a, 0x25dfdbfd, {0x80, 0x0, 0x10, 0x9b, 0xfe, 0x4, 0x0, 0x1, 0x3000}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_FLOW={0x8, 0xb, 0x2}, @RTA_SRC={0x8, 0x2, @loopback}, @RTA_NH_ID={0x8, 0x1e, 0x6}, @RTA_METRICS={0x4}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}]}, 0x1044}, 0x1, 0x0, 0x0, 0x6480f3ebacdf6327}, 0x24048040) 00:03:43 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000000)) 00:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 00:03:43 executing program 1: r0 = io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) 00:03:43 executing program 2: io_uring_setup(0x27b0, &(0x7f0000000080)={0x0, 0xfeffffff, 0x7}) 00:03:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBTYPE(r0, 0x4b31, &(0x7f0000000000)) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 00:03:43 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pnp', 0x2c4602, 0x0) socketpair(0x27, 0x800, 0x22, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001200), &(0x7f0000001240)=0x4) bind$phonet(r1, &(0x7f00000011c0)={0x23, 0x9, 0x4, 0xb8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)=@ipmr_delroute={0x1044, 0x19, 0x20, 0x70bd2a, 0x25dfdbfd, {0x80, 0x0, 0x10, 0x9b, 0xfe, 0x4, 0x0, 0x1, 0x3000}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_FLOW={0x8, 0xb, 0x2}, @RTA_SRC={0x8, 0x2, @loopback}, @RTA_NH_ID={0x8, 0x1e, 0x6}, @RTA_METRICS={0x4}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}]}, 0x1044}, 0x1, 0x0, 0x0, 0x6480f3ebacdf6327}, 0x24048040) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pnp', 0x2c4602, 0x0) (async) socketpair(0x27, 0x800, 0x22, &(0x7f0000000000)) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001200), &(0x7f0000001240)=0x4) (async) bind$phonet(r1, &(0x7f00000011c0)={0x23, 0x9, 0x4, 0xb8}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)=@ipmr_delroute={0x1044, 0x19, 0x20, 0x70bd2a, 0x25dfdbfd, {0x80, 0x0, 0x10, 0x9b, 0xfe, 0x4, 0x0, 0x1, 0x3000}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_FLOW={0x8, 0xb, 0x2}, @RTA_SRC={0x8, 0x2, @loopback}, @RTA_NH_ID={0x8, 0x1e, 0x6}, @RTA_METRICS={0x4}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "2e38ea665ac265ebf1b4fee6e75fed368f79b66d8a26f5b002a0373ade2779451daef933ea3b0f7b016b4b897a0fd4a819672667f0f71cbc076e7198bedc4601b0d4bbfd5a10cef7ab7407b5099aa1769d2b34965bf61ff26f78c1345655df67492f4bb980f120