9d3398d9a6dd7bba6ec4cb887938a4e76fe79f"}, {0xc, 0x7, {0x0, 0x9b4ba55e4c5bf78c}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x4d8, 0x14, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x101, 0xff5, 0x800, 0x9, 0x6, 0xffffffe1, 0x8, 0x831, 0x1000, 0x3f, 0x401, 0x4cd, 0x52, 0x20000, 0x7f, 0x2, 0x80000001, 0xd222, 0x40, 0x2f, 0x7fff, 0x7, 0x1, 0xfffffffd, 0xca, 0x1, 0x2, 0xfffffff7, 0x3ff, 0xfffffffe, 0x7ff, 0x707, 0x2, 0x1149b9b4, 0x4d, 0x5, 0x101, 0xe, 0x9, 0x4, 0x5ed9, 0x535, 0x0, 0x8, 0x9, 0x7, 0x9, 0x9, 0xffff0d5a, 0x9, 0xff, 0x0, 0xeefa, 0x2, 0xffffffff, 0x40, 0x2, 0xfffffffa, 0x9, 0x7f, 0x6b78, 0x8, 0x4, 0x10000, 0x5, 0x5, 0x3, 0x40, 0x9, 0xd5, 0x4, 0x8, 0x1, 0xcb6, 0x10000, 0xfffffff9, 0xe366, 0x6, 0x2, 0x8000, 0x0, 0x1000, 0x7, 0x9, 0x8000, 0x1c, 0x5, 0x0, 0xd1d2, 0x7110, 0x80000001, 0x3, 0x3f, 0x3ff, 0x80, 0x2, 0xff, 0x3, 0xfffff001, 0x0, 0x3f, 0x80, 0x3, 0x100, 0x1, 0xa021, 0x92d5, 0x6b, 0x1, 0x2b, 0x10001, 0x3, 0x0, 0x5, 0x3d, 0x3, 0x2, 0xb693, 0x0, 0x2, 0x5, 0x7, 0x61d, 0xb17, 0x1, 0x3, 0x1, 0x9, 0xf9d8, 0x4, 0x8000, 0x18000000, 0x800, 0x1, 0xd9a71d1, 0x1f00000, 0x5, 0xa1, 0x4bfd143a, 0x3, 0x1ff, 0x10000, 0x8, 0x400, 0x1000, 0x2d956836, 0x6, 0x6, 0x101, 0xffffffff, 0x2, 0x2, 0x40, 0x7fffffff, 0x10001, 0x790, 0x1, 0x9, 0x1, 0x0, 0x9c6, 0xfff, 0x7fffffff, 0x0, 0x81, 0x1, 0x2, 0x1, 0x9, 0x20, 0xffff54af, 0x7, 0x6, 0xe29a, 0x3, 0x6, 0x7b81, 0x1, 0x15, 0x7, 0x7, 0x7, 0x75d6, 0x8, 0x3, 0x558583bd, 0x1, 0x5, 0xfff, 0x417, 0x5, 0x9, 0x8000, 0x40, 0x7ff, 0x1, 0xd59, 0x8, 0x93, 0x9, 0x6, 0x5, 0x0, 0x9acf, 0x40, 0x5, 0xddb, 0x589, 0x3f, 0x40, 0xffff, 0x8000, 0x6b69, 0x147d, 0x5b, 0x5, 0x6, 0xb82, 0xffffff01, 0x9, 0x9, 0x0, 0xffffffb0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1, 0x5, 0x9, 0x6, 0x5, 0xfffffff9, 0x1, 0x8, 0x30, 0x3, 0x8c88, 0xb452, 0x3286, 0x4, 0x200, 0x5, 0x0, 0xffffffc0, 0x10001, 0x6, 0x8000, 0x5, 0x8, 0xff0, 0x9, 0x9, 0x6]}]]}, {0xa8, 0x6, "df21c0a4518b8d04729bef01947538a8a5e685495a10932ef863d2e76a0738edba43e282b4dc45a3d853d452037050477223554a67489e808a6eae9b5e9d0263994d01c1001242a56a72fabfa7257340b1d089d3591fea1531add318506deeafaca73685afe4241da131ad4784df7ce0ef2c3dbf872c34791aab611f93e1e3862bc0bc8a8e47fa90fcede0c5feb40f4f3da19e1543ccd865771adea6c79c84fe0d8ab2a1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0xb68, 0x1, [@m_skbedit={0x164, 0x3, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x3, 0x20000000, 0x2, 0x8823}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xffff}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffffff, 0x5, 0x6, 0x0, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x3}}]}, {0xef, 0x6, "771ea647af12d19e71b88940be00dffcccaf53e5dd105fb3e305eddb1fffbaa6bcfd6371059d00f8d47df11ed7a3dd83ba052fbfce1fe7676569d22af06bc21e3502dc0084ebdb911c4456a0913a1a83a55834911c45c3f6cc4a8534a2a1f9b581eee443f6918c05324c0d35c67027a8255447caea58e10c78bc2abbf1e92116ed287023ec4422c19d1aa6800526193a1f88c7a6c93308072f67dddbdcfd09c6d7df1856ad435297acda64b1b421a0dd19eda6a48609df32c08a66f8fe87dd111ab008b6d3ac597e0f806f71194e29ce5f9f6f6b274d1da7bdfc0598397624324c71b74da76b168ca1768a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x130, 0x9, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x800}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x9, 0x1, 0x5, 0x3ff}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x18bf6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88ca}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x401, 0x1, 0x4, 0x401}, 0x2}}]}, {0xa9, 0x6, "f56a0860502a03aaeed194c12c6746ad1c020ef26786bd964f29f8d9c8bdc2077be62e56f74c589564853fdccc93c7677a9decb42e39aa5c90ab4ddb4f3b3e705e8a04a3297dfcc71a8156379de5c14f79d5c832aa2dfa0751f5f0d0499d9c7bebfda1b6a25c909d4e4cbcd3b0bf2b9a15b9e413ae1db36907b2e3b491309b2a1774e88b5145df080b8700301ec68a26ece64351f23bd8bc0ac03820e8f2b83f4695de2237"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x13c, 0x9, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x6, 0x0, 0x0, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xfff1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb5fa}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0xc5, 0x6, "68d60c10452319bb673ec470512b99ceadf1e84b3f9ae2c1015c5eb71fe1d7407c9165b2352a6f2ed0cccd5263735a04534ff9f4f43d77b2fd71f4509c4588bb5e6b1c8e5074f36eaae13c6e42b5db202bbb37abc4ef897af8197e4794e9c55c526a9f0fe296b8105971970c2405b0fee3858e4e098234135cc04f3f7c567adcfd28408b2f300d22ca05b6ca6ffad5d36a49ec25d41cd391747695c2e05b9c9311dc8e309d0422c1646b70e84aa5467ca7953793f0125ad456601ef1af60104247"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1d8, 0xe, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc7f8, 0xfffffeff, 0x20000000, 0x20, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffff54b9, 0x4, 0x0, 0x1}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x7fffffff, 0x4, 0x6, 0x7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1f, 0x0, 0x0, 0x2, 0x10001}, 0x6a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x0, 0x3ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x20, 0x1, 0x5, 0x10001, 0x8000}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x3, 0x7, 0x1, 0x41}, 0x401}}]}, {0xe3, 0x6, "2869f8d6370871a173e77f2159feb41b28ba7b82dfb5647cf7ff8c9f5727521c85d08ce27c915ebc1aea95d690c733812d9cfc88bdbf04995cbe18012f7a29d70ce573de9c7e74ae906a8c78116b0f93ad295ab002835bfcd44f3d84ae41d0eddc6cc97dbedbbe3faa74d84b4c7d9deaeb039c86800e6a6fa6786fedd1aca077cf54a0723c104d1e206f4e3b1ff4aecec486625d75adf572a7e21455a1ad7ad65b6309cc62dc5c1cc0634d6eca0c399668e9a58ed214c97807cfa79979966753bab85a9bed3fdad009ae28944a8513fafda4b81ecd7859812ed88f1daa2d2e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xb8, 0x19, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3ff, 0x5, 0x20, 0x10001}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x5e, 0x6, "aaff1846f920b53a5ebd4a0c7332c1538e3c6384af791b5eb12b90ad338c2644673f21abf623db5d0381b63d1a9eeced9996a53bcb239f00b4b25a0455811f3717f75317ed6bf6ff3d4f51016c6ea13dff042e1d1b9897669914"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x5}}}}, @m_csum={0x1cc, 0x13, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x1, 0x1, 0x5}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x5, 0x20}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x81, 0x6, 0x3f, 0x7fffffff}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x2, 0xfed9, 0x7cc}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x7fff, 0x2, 0x80000001, 0x8}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfff, 0x7, 0x80000001, 0x3f}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x8, 0x8, 0x9}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0xfffffffb, 0x3, 0x4, 0x24000}, 0x14}}]}, {0xc0, 0x6, "78f37572f257a7a9dd4381c77285032000f1db9d883134e54669a9d5afc254585485bb9ce6193bab8c56a9cf7c9a17ade8bb0402a54656bc91e2c50204ad5fef27a8bef39a156e37596e2cc2ff78948de97d7f61fc153b45a3554865acd77e2d935f00ac0be09ad50e39ed7d068c09e07f1c70eb31d7d08314b07e8902019959daa9f008cedf14ad318d15b47b6af246686947936bc1972ee30b1acf7d2b4d10471e12c1476f3eae8e602071b637248236f0bc981568a2d87b6b1f36"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xc8, 0x12, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x75, 0x6, "9b41302d03d677d1d767911a884e31e5b2311b1e40157d4f58b1e01de3267e8f633b926c272f182a21c45886a8e024367297421bc3827e600d82541e28f01ca33c0550908749f50d010213396c9d4aadd9695c8268c5bf1e63760ec9598c54572751420dee7819df7a5f88506a7434fc2b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x270, 0x13, 0x0, 0x0, {{0x8}, {0x148, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xc2, 0x6, {0x6, 'security\x00', 0xfd, 0x7f, "5184174d4d229d9b535e8858b4c48eeb30bf96a32edb4cc59a33cb938a5f738926e62d08d10f9b52e9a052116900ad074122b66e7d0e20f2c5dc143137bb30d63d56b852c7468dd842885b81694f54603e9d85a959b7e70e5e7824cdd6e9b96d4eb9fb2dbc90692aec0f81023d892c774cbcb525e0e042c9ebb37122ba0eb2b828ad9596b27742e82ef2d35182ca86be70bd4b9fb407e5b3"}}, @TCA_IPT_TARG={0x4c, 0x6, {0xc1, 'filter\x00', 0x80, 0xdd, "1cb72f811892bc38adf877860989ee5fb422e93148a0321baea5db584a5eecdaf734"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}]}, {0x101, 0x6, "cdd98610d20d0948a658bcf343e83223a1d4b323da0aa4eb7f6553e465e5b59d6ccd8a98ed8095e08e5e32824294728442b9394106b5b6f023bb0448c22bb3fb16aaaea81c1dc4692504f4c11bbe30a0ebb608b63629aaa4308fa4e9acea2c2df906a86fbc5d89766a219b7a8e571f662d17e5443ddbda6ee0f0fe800ae966ecb8f956ce801ca4d3e1afbdd566720548d8f0f898b18ec3b917f542ed17907d73cdfed09a48d6c7df7a195fffc93ae29d53d5f055707cbad248fa31ec02b767292fe50a3c48e46f4e16584054466a8eaad7e40fb894b4fa4b449b111c462f4c95affaa6919cba7379b891953f1cb0b915c5e7a99ab46190636c6fa197b6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1290}, 0x1, 0x0, 0x0, 0x48861}, 0x4000000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x3}) (async) socket(0x1, 0x3, 0x2) 14:53:02 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48005}, 0x4000004) 14:53:02 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f00000001c0)={'stack ', '/sys/kernel/debug/binder/failed_transaction_log\x00'}, 0x36) write$apparmor_exec(r2, 0x0, 0xf) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)={0x1}) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x5d, &(0x7f0000000180)=0x2) 14:53:02 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r1, &(0x7f0000000040)={'stack ', '\xab#%@\x00'}, 0xb) 14:53:02 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000180)={[0x100000, 0x5000, 0x5000, 0xf000], 0x4, 0x20, 0xfffffffffffffff8}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0xf) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000140)={0x2000000000000000, 0x3000, 0x3, 0x8, 0xf}) 14:53:02 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'stack ', '\'I\xf4\xf6Ji\x01\x00'}, 0xe) 14:53:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_setlink={0x74, 0x13, 0x200, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1008, 0x480}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ff39}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xffff0001}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_CARRIER={0x5, 0x21, 0x7f}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000090}, 0x20048001) ioctl$TIOCNXCL(r0, 0x540d) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[], 0xf) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x4, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 32) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000c00)=@newtaction={0x1290, 0x30, 0x100, 0x70bd25, 0x25dfdbff, {}, [{0xf8, 0x1, [@m_nat={0xf4, 0x1a, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x9, 0x3, 0x6c42, 0x6119}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xffff60f1, 0x1, 0x40, 0x1ff}, @loopback, @rand_addr=0x64010101, 0xff, 0x2e}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3fc, 0x5ec8, 0x4, 0x9ca7, 0x80}, @loopback, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x62, 0x3f, 0x10000000, 0x2, 0xffffff7f}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x8, 0xffffffffffffffff, 0x9c5, 0x7}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x61c, 0x1, [@m_ipt={0x140, 0x1, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0x9, 'raw\x00', 0x46, 0x0, "16b5471bb2edf60e6e6f9bbd78879c5b058f3b"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x55e9}, @TCA_IPT_INDEX={0x8, 0x3, 0x49f3}]}, {0x9a, 0x6, "3ed40285069fd259a18e03dff0c5dd24bb49363f5ba77e30b2e963bc693c22041f521f51a0a3103eb43ef4c7185800234991c76b53973827c536cee60c3cd33a7a5a8317ca1e05cbc81e0b4f988a4768f85fe93548377eaa97edf62f0ffa8e40b3bd389033a4090964294d95abaa3dbc1408699bc9f16a4944adae5bcb4b4bdf7c45c29d3398d9a6dd7bba6ec4cb887938a4e76fe79f"}, {0xc, 0x7, {0x0, 0x9b4ba55e4c5bf78c}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x4d8, 0x14, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x101, 0xff5, 0x800, 0x9, 0x6, 0xffffffe1, 0x8, 0x831, 0x1000, 0x3f, 0x401, 0x4cd, 0x52, 0x20000, 0x7f, 0x2, 0x80000001, 0xd222, 0x40, 0x2f, 0x7fff, 0x7, 0x1, 0xfffffffd, 0xca, 0x1, 0x2, 0xfffffff7, 0x3ff, 0xfffffffe, 0x7ff, 0x707, 0x2, 0x1149b9b4, 0x4d, 0x5, 0x101, 0xe, 0x9, 0x4, 0x5ed9, 0x535, 0x0, 0x8, 0x9, 0x7, 0x9, 0x9, 0xffff0d5a, 0x9, 0xff, 0x0, 0xeefa, 0x2, 0xffffffff, 0x40, 0x2, 0xfffffffa, 0x9, 0x7f, 0x6b78, 0x8, 0x4, 0x10000, 0x5, 0x5, 0x3, 0x40, 0x9, 0xd5, 0x4, 0x8, 0x1, 0xcb6, 0x10000, 0xfffffff9, 0xe366, 0x6, 0x2, 0x8000, 0x0, 0x1000, 0x7, 0x9, 0x8000, 0x1c, 0x5, 0x0, 0xd1d2, 0x7110, 0x80000001, 0x3, 0x3f, 0x3ff, 0x80, 0x2, 0xff, 0x3, 0xfffff001, 0x0, 0x3f, 0x80, 0x3, 0x100, 0x1, 0xa021, 0x92d5, 0x6b, 0x1, 0x2b, 0x10001, 0x3, 0x0, 0x5, 0x3d, 0x3, 0x2, 0xb693, 0x0, 0x2, 0x5, 0x7, 0x61d, 0xb17, 0x1, 0x3, 0x1, 0x9, 0xf9d8, 0x4, 0x8000, 0x18000000, 0x800, 0x1, 0xd9a71d1, 0x1f00000, 0x5, 0xa1, 0x4bfd143a, 0x3, 0x1ff, 0x10000, 0x8, 0x400, 0x1000, 0x2d956836, 0x6, 0x6, 0x101, 0xffffffff, 0x2, 0x2, 0x40, 0x7fffffff, 0x10001, 0x790, 0x1, 0x9, 0x1, 0x0, 0x9c6, 0xfff, 0x7fffffff, 0x0, 0x81, 0x1, 0x2, 0x1, 0x9, 0x20, 0xffff54af, 0x7, 0x6, 0xe29a, 0x3, 0x6, 0x7b81, 0x1, 0x15, 0x7, 0x7, 0x7, 0x75d6, 0x8, 0x3, 0x558583bd, 0x1, 0x5, 0xfff, 0x417, 0x5, 0x9, 0x8000, 0x40, 0x7ff, 0x1, 0xd59, 0x8, 0x93, 0x9, 0x6, 0x5, 0x0, 0x9acf, 0x40, 0x5, 0xddb, 0x589, 0x3f, 0x40, 0xffff, 0x8000, 0x6b69, 0x147d, 0x5b, 0x5, 0x6, 0xb82, 0xffffff01, 0x9, 0x9, 0x0, 0xffffffb0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1, 0x5, 0x9, 0x6, 0x5, 0xfffffff9, 0x1, 0x8, 0x30, 0x3, 0x8c88, 0xb452, 0x3286, 0x4, 0x200, 0x5, 0x0, 0xffffffc0, 0x10001, 0x6, 0x8000, 0x5, 0x8, 0xff0, 0x9, 0x9, 0x6]}]]}, {0xa8, 0x6, "df21c0a4518b8d04729bef01947538a8a5e685495a10932ef863d2e76a0738edba43e282b4dc45a3d853d452037050477223554a67489e808a6eae9b5e9d0263994d01c1001242a56a72fabfa7257340b1d089d3591fea1531add318506deeafaca73685afe4241da131ad4784df7ce0ef2c3dbf872c34791aab611f93e1e3862bc0bc8a8e47fa90fcede0c5feb40f4f3da19e1543ccd865771adea6c79c84fe0d8ab2a1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0xb68, 0x1, [@m_skbedit={0x164, 0x3, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x3, 0x20000000, 0x2, 0x8823}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xffff}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffffff, 0x5, 0x6, 0x0, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x3}}]}, {0xef, 0x6, "771ea647af12d19e71b88940be00dffcccaf53e5dd105fb3e305eddb1fffbaa6bcfd6371059d00f8d47df11ed7a3dd83ba052fbfce1fe7676569d22af06bc21e3502dc0084ebdb911c4456a0913a1a83a55834911c45c3f6cc4a8534a2a1f9b581eee443f6918c05324c0d35c67027a8255447caea58e10c78bc2abbf1e92116ed287023ec4422c19d1aa6800526193a1f88c7a6c93308072f67dddbdcfd09c6d7df1856ad435297acda64b1b421a0dd19eda6a48609df32c08a66f8fe87dd111ab008b6d3ac597e0f806f71194e29ce5f9f6f6b274d1da7bdfc0598397624324c71b74da76b168ca1768a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x130, 0x9, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x800}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x9, 0x1, 0x5, 0x3ff}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x18bf6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88ca}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x401, 0x1, 0x4, 0x401}, 0x2}}]}, {0xa9, 0x6, "f56a0860502a03aaeed194c12c6746ad1c020ef26786bd964f29f8d9c8bdc2077be62e56f74c589564853fdccc93c7677a9decb42e39aa5c90ab4ddb4f3b3e705e8a04a3297dfcc71a8156379de5c14f79d5c832aa2dfa0751f5f0d0499d9c7bebfda1b6a25c909d4e4cbcd3b0bf2b9a15b9e413ae1db36907b2e3b491309b2a1774e88b5145df080b8700301ec68a26ece64351f23bd8bc0ac03820e8f2b83f4695de2237"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x13c, 0x9, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x6, 0x0, 0x0, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xfff1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb5fa}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0xc5, 0x6, "68d60c10452319bb673ec470512b99ceadf1e84b3f9ae2c1015c5eb71fe1d7407c9165b2352a6f2ed0cccd5263735a04534ff9f4f43d77b2fd71f4509c4588bb5e6b1c8e5074f36eaae13c6e42b5db202bbb37abc4ef897af8197e4794e9c55c526a9f0fe296b8105971970c2405b0fee3858e4e098234135cc04f3f7c567adcfd28408b2f300d22ca05b6ca6ffad5d36a49ec25d41cd391747695c2e05b9c9311dc8e309d0422c1646b70e84aa5467ca7953793f0125ad456601ef1af60104247"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1d8, 0xe, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc7f8, 0xfffffeff, 0x20000000, 0x20, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffff54b9, 0x4, 0x0, 0x1}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x7fffffff, 0x4, 0x6, 0x7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1f, 0x0, 0x0, 0x2, 0x10001}, 0x6a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x0, 0x3ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x20, 0x1, 0x5, 0x10001, 0x8000}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x3, 0x7, 0x1, 0x41}, 0x401}}]}, {0xe3, 0x6, "2869f8d6370871a173e77f2159feb41b28ba7b82dfb5647cf7ff8c9f5727521c85d08ce27c915ebc1aea95d690c733812d9cfc88bdbf04995cbe18012f7a29d70ce573de9c7e74ae906a8c78116b0f93ad295ab002835bfcd44f3d84ae41d0eddc6cc97dbedbbe3faa74d84b4c7d9deaeb039c86800e6a6fa6786fedd1aca077cf54a0723c104d1e206f4e3b1ff4aecec486625d75adf572a7e21455a1ad7ad65b6309cc62dc5c1cc0634d6eca0c399668e9a58ed214c97807cfa79979966753bab85a9bed3fdad009ae28944a8513fafda4b81ecd7859812ed88f1daa2d2e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xb8, 0x19, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3ff, 0x5, 0x20, 0x10001}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x5e, 0x6, "aaff1846f920b53a5ebd4a0c7332c1538e3c6384af791b5eb12b90ad338c2644673f21abf623db5d0381b63d1a9eeced9996a53bcb239f00b4b25a0455811f3717f75317ed6bf6ff3d4f51016c6ea13dff042e1d1b9897669914"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x5}}}}, @m_csum={0x1cc, 0x13, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x1, 0x1, 0x5}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0xffffffffffffffff, 0x5, 0x20}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x81, 0x6, 0x3f, 0x7fffffff}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x2, 0xfed9, 0x7cc}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x7fff, 0x2, 0x80000001, 0x8}, 0x6b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfff, 0x7, 0x80000001, 0x3f}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x8, 0x8, 0x9}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0xfffffffb, 0x3, 0x4, 0x24000}, 0x14}}]}, {0xc0, 0x6, "78f37572f257a7a9dd4381c77285032000f1db9d883134e54669a9d5afc254585485bb9ce6193bab8c56a9cf7c9a17ade8bb0402a54656bc91e2c50204ad5fef27a8bef39a156e37596e2cc2ff78948de97d7f61fc153b45a3554865acd77e2d935f00ac0be09ad50e39ed7d068c09e07f1c70eb31d7d08314b07e8902019959daa9f008cedf14ad318d15b47b6af246686947936bc1972ee30b1acf7d2b4d10471e12c1476f3eae8e602071b637248236f0bc981568a2d87b6b1f36"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xc8, 0x12, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x75, 0x6, "9b41302d03d677d1d767911a884e31e5b2311b1e40157d4f58b1e01de3267e8f633b926c272f182a21c45886a8e024367297421bc3827e600d82541e28f01ca33c0550908749f50d010213396c9d4aadd9695c8268c5bf1e63760ec9598c54572751420dee7819df7a5f88506a7434fc2b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x270, 0x13, 0x0, 0x0, {{0x8}, {0x148, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xc2, 0x6, {0x6, 'security\x00', 0xfd, 0x7f, "5184174d4d229d9b535e8858b4c48eeb30bf96a32edb4cc59a33cb938a5f738926e62d08d10f9b52e9a052116900ad074122b66e7d0e20f2c5dc143137bb30d63d56b852c7468dd842885b81694f54603e9d85a959b7e70e5e7824cdd6e9b96d4eb9fb2dbc90692aec0f81023d892c774cbcb525e0e042c9ebb37122ba0eb2b828ad9596b27742e82ef2d35182ca86be70bd4b9fb407e5b3"}}, @TCA_IPT_TARG={0x4c, 0x6, {0xc1, 'filter\x00', 0x80, 0xdd, "1cb72f811892bc38adf877860989ee5fb422e93148a0321baea5db584a5eecdaf734"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1290}, 0x1, 0x0, 0x0, 0x48861}, 0x4000000) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x3}) (async) socket(0x1, 0x3, 0x2) 14:53:02 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f00000001c0)={'stack ', '/sys/kernel/debug/binder/failed_transaction_log\x00'}, 0x36) write$apparmor_exec(r2, 0x0, 0xf) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)={0x1}) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x5d, &(0x7f0000000180)=0x2) 14:53:02 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000180)={[0x100000, 0x5000, 0x5000, 0xf000], 0x4, 0x20, 0xfffffffffffffff8}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) (async, rerun: 32) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$apparmor_exec(r2, 0x0, 0xf) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000140)={0x2000000000000000, 0x3000, 0x3, 0x8, 0xf}) 14:53:02 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14:53:02 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'stack ', '\'I\xf4\xf6Ji\x01\x00'}, 0xe) 14:53:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_setlink={0x74, 0x13, 0x200, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1008, 0x480}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ff39}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xffff0001}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_CARRIER={0x5, 0x21, 0x7f}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000090}, 0x20048001) ioctl$TIOCNXCL(r0, 0x540d) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[], 0xf) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_setlink={0x74, 0x13, 0x200, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1008, 0x480}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ff39}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xffff0001}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_CARRIER={0x5, 0x21, 0x7f}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000090}, 0x20048001) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[], 0xf) (async) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 14:53:02 executing program 4: ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0xa200000000000000, 0x5000, 0x2, 0xf, 0x11}) socket(0x1, 0x3, 0x0) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 14:53:02 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f00000001c0)={'stack ', '/sys/kernel/debug/binder/failed_transaction_log\x00'}, 0x36) write$apparmor_exec(r2, 0x0, 0xf) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)={0x1}) 14:53:02 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14:53:02 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000080)={'stack ', '\'I\xf4\xf6Ji\x01\x00'}, 0xe) 14:53:02 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000180)={[0x100000, 0x5000, 0x5000, 0xf000], 0x4, 0x20, 0xfffffffffffffff8}) (async) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000180)={[0x100000, 0x5000, 0x5000, 0xf000], 0x4, 0x20, 0xfffffffffffffff8}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) (async) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0xf) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000140)={0x2000000000000000, 0x3000, 0x3, 0x8, 0xf}) 14:53:02 executing program 4: ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0xa200000000000000, 0x5000, 0x2, 0xf, 0x11}) socket(0x1, 0x3, 0x0) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0xa200000000000000, 0x5000, 0x2, 0xf, 0x11}) (async) socket(0x1, 0x3, 0x0) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) 14:53:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_setlink={0x74, 0x13, 0x200, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1008, 0x480}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ff39}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xffff0001}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_CARRIER={0x5, 0x21, 0x7f}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000090}, 0x20048001) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_setlink={0x74, 0x13, 0x200, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1008, 0x480}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ff39}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xffff0001}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_CARRIER={0x5, 0x21, 0x7f}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000090}, 0x20048001) ioctl$TIOCNXCL(r0, 0x540d) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[], 0xf) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[], 0xf) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:02 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f00000001c0)={'stack ', '/sys/kernel/debug/binder/failed_transaction_log\x00'}, 0x36) write$apparmor_exec(r2, 0x0, 0xf) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 14:53:02 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 14:53:02 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14:53:02 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x3ff, 0x1}) 14:53:02 executing program 4: ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0xa200000000000000, 0x5000, 0x2, 0xf, 0x11}) (async) socket(0x1, 0x3, 0x0) (async) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 14:53:02 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f00000001c0)={'stack ', '/sys/kernel/debug/binder/failed_transaction_log\x00'}, 0x36) write$apparmor_exec(r2, 0x0, 0xf) 14:53:02 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x1, 0x80}, 0x2) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) socket$inet6_udp(0xa, 0x2, 0x0) 14:53:02 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 14:53:02 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000c22a4cc76d33f3e827d900000000000000"], 0x9) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000140)) 14:53:02 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x3ff, 0x1}) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x3ff, 0x1}) 14:53:02 executing program 4: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 14:53:02 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f00000001c0)={'stack ', '/sys/kernel/debug/binder/failed_transaction_log\x00'}, 0x36) 14:53:02 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x1, 0x80}, 0x2) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) socket$inet6_udp(0xa, 0x2, 0x0) 14:53:02 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async, rerun: 64) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x3ff, 0x1}) (rerun: 64) 14:53:02 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000c22a4cc76d33f3e827d900000000000000"], 0x9) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000140)) 14:53:02 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 14:53:02 executing program 4: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 14:53:02 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x1, 0x80}, 0x2) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) socket$inet6_udp(0xa, 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) (async) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x1, 0x80}, 0x2) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 14:53:03 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) 14:53:03 executing program 4: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 14:53:03 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f00000001c0)={'stack ', '/sys/kernel/debug/binder/failed_transaction_log\x00'}, 0x36) write$apparmor_exec(r2, 0x0, 0xf) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)={0x1}) 14:53:03 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="b3ae59d7c24245076b7caccc7800fc61cdaf40ab862c1c5da5f815478e61eb996d96a9c10c2ebbdb7d2bea3995e027ee8d5d103920a327850761c12a4524f2f6315ad72629f2b32b7205b27ecc144fa31dfda3f2babe14ff803c0f05ae1bc4cdcf46f0e1d1686e74b568087bbe98b807bc86753cf905db6dbd10c601d6fba31a4e07638b3895d468fac3818578946800370e096dd18a2e418934e65ee4f1a822a53486807a46ea73fbbe22ce8c59e088814954607e7d5a047ca2"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x6c, 0x66, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0xfffe}, {0xfff3, 0x5}, {0x7, 0x8}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x40}, {0x8}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xad84}, {0x8}, {0x8, 0xb, 0x7ed}, {0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000091}, 0x40010) 14:53:03 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000c22a4cc76d33f3e827d900000000000000"], 0x9) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000140)) 14:53:03 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:53:03 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x40, 0x4, 0xfffd, 0x0, 0x1b, "f02b0fe62ec6242c"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/106) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:03 executing program 4: r0 = socket(0x2b, 0x7, 0x9) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, 0xffffffffffffff73) 14:53:03 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) [ 978.267221] kauditd_printk_skb: 94 callbacks suppressed [ 978.267232] audit: type=1400 audit(1676818383.185:1320): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="/sys/kernel/debug/binder/failed_transaction_log" pid=17625 comm="syz-executor.1" 14:53:03 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', ':z\x8f\x13\x00\x00.\xf1\xff'}, 0xe) 14:53:03 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:53:03 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="b3ae59d7c24245076b7caccc7800fc61cdaf40ab862c1c5da5f815478e61eb996d96a9c10c2ebbdb7d2bea3995e027ee8d5d103920a327850761c12a4524f2f6315ad72629f2b32b7205b27ecc144fa31dfda3f2babe14ff803c0f05ae1bc4cdcf46f0e1d1686e74b568087bbe98b807bc86753cf905db6dbd10c601d6fba31a4e07638b3895d468fac3818578946800370e096dd18a2e418934e65ee4f1a822a53486807a46ea73fbbe22ce8c59e088814954607e7d5a047ca2"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x6c, 0x66, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0xfffe}, {0xfff3, 0x5}, {0x7, 0x8}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x40}, {0x8}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xad84}, {0x8}, {0x8, 0xb, 0x7ed}, {0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000091}, 0x40010) [ 978.312406] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:03 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x40, 0x4, 0xfffd, 0x0, 0x1b, "f02b0fe62ec6242c"}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/106) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r1, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:03 executing program 4: r0 = socket(0x2b, 0x7, 0x9) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, 0xffffffffffffff73) 14:53:03 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="b3ae59d7c24245076b7caccc7800fc61cdaf40ab862c1c5da5f815478e61eb996d96a9c10c2ebbdb7d2bea3995e027ee8d5d103920a327850761c12a4524f2f6315ad72629f2b32b7205b27ecc144fa31dfda3f2babe14ff803c0f05ae1bc4cdcf46f0e1d1686e74b568087bbe98b807bc86753cf905db6dbd10c601d6fba31a4e07638b3895d468fac3818578946800370e096dd18a2e418934e65ee4f1a822a53486807a46ea73fbbe22ce8c59e088814954607e7d5a047ca2"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x6c, 0x66, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0xfffe}, {0xfff3, 0x5}, {0x7, 0x8}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x40}, {0x8}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xad84}, {0x8}, {0x8, 0xb, 0x7ed}, {0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000091}, 0x40010) 14:53:03 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="b3ae59d7c24245076b7caccc7800fc61cdaf40ab862c1c5da5f815478e61eb996d96a9c10c2ebbdb7d2bea3995e027ee8d5d103920a327850761c12a4524f2f6315ad72629f2b32b7205b27ecc144fa31dfda3f2babe14ff803c0f05ae1bc4cdcf46f0e1d1686e74b568087bbe98b807bc86753cf905db6dbd10c601d6fba31a4e07638b3895d468fac3818578946800370e096dd18a2e418934e65ee4f1a822a53486807a46ea73fbbe22ce8c59e088814954607e7d5a047ca2"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x6c, 0x66, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0xfffe}, {0xfff3, 0x5}, {0x7, 0x8}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x40}, {0x8}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xad84}, {0x8}, {0x8, 0xb, 0x7ed}, {0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000091}, 0x40010) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="b3ae59d7c24245076b7caccc7800fc61cdaf40ab862c1c5da5f815478e61eb996d96a9c10c2ebbdb7d2bea3995e027ee8d5d103920a327850761c12a4524f2f6315ad72629f2b32b7205b27ecc144fa31dfda3f2babe14ff803c0f05ae1bc4cdcf46f0e1d1686e74b568087bbe98b807bc86753cf905db6dbd10c601d6fba31a4e07638b3895d468fac3818578946800370e096dd18a2e418934e65ee4f1a822a53486807a46ea73fbbe22ce8c59e088814954607e7d5a047ca2"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x6c, 0x66, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x10, 0xfffe}, {0xfff3, 0x5}, {0x7, 0x8}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x40}, {0x8}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xad84}, {0x8}, {0x8, 0xb, 0x7ed}, {0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000091}, 0x40010) (async) [ 978.415667] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:03 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:03 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', ':z\x8f\x13\x00\x00.\xf1\xff'}, 0xe) 14:53:03 executing program 4: r0 = socket(0x2b, 0x7, 0x9) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, 0xffffffffffffff73) socket(0x2b, 0x7, 0x9) (async) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, 0xffffffffffffff73) (async) [ 978.478694] audit: type=1400 audit(1676818383.395:1321): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A7A8F13 pid=17648 comm="syz-executor.0" 14:53:03 executing program 3: syz_open_pts(0xffffffffffffffff, 0x40000) (async) r0 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x40, 0x4, 0xfffd, 0x0, 0x1b, "f02b0fe62ec6242c"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/106) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:03 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', ':z\x8f\x13\x00\x00.\xf1\xff'}, 0xe) [ 978.537501] PF_BRIDGE: RTM_NEWNEIGH with invalid address [ 978.568628] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:03 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:03 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', ':z\x8f\x13\x00\x00.\xf1\xff'}, 0xe) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', ':z\x8f\x13\x00\x00.\xf1\xff'}, 0xe) (async) 14:53:03 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000010c0)) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)={0x32, 0x89, 0x1, 0x0, 0x7, 0x5, 0x8, 0xff, 0x4, 0x30, 0x4, 0x2, 0x0, 0x5, 0x80000001, 0xfd, 0x6, 0xc5, 0x7f, '\x00', 0x0, 0x5}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000080)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000001080)={0x40}, 0x2) ioctl$TIOCNXCL(r3, 0x540d) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000001040)={0x1, 0x81, [{0x0, 0x0, 0x6b}]}) socket(0x1, 0x3, 0x0) 14:53:03 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000140)) write$apparmor_exec(r0, 0x0, 0xf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x6, 0x6a, 0x0, 0x10}}) 14:53:03 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:03 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:53:03 executing program 3: ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0x6400000000000000, 0x2, 0x5, 0x1, 0x9}) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) [ 978.705447] audit: type=1400 audit(1676818383.615:1322): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A7A8F13 pid=17671 comm="syz-executor.1" 14:53:03 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000140)) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) (async, rerun: 32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$TIOCNXCL(r3, 0x540d) (async) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x6, 0x6a, 0x0, 0x10}}) 14:53:03 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000010c0)) (async) ioctl$KVM_SMI(r0, 0xaeb7) (async) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)={0x32, 0x89, 0x1, 0x0, 0x7, 0x5, 0x8, 0xff, 0x4, 0x30, 0x4, 0x2, 0x0, 0x5, 0x80000001, 0xfd, 0x6, 0xc5, 0x7f, '\x00', 0x0, 0x5}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000080)) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) (async) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000001080)={0x40}, 0x2) ioctl$TIOCNXCL(r3, 0x540d) (async) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000001040)={0x1, 0x81, [{0x0, 0x0, 0x6b}]}) (async) socket(0x1, 0x3, 0x0) 14:53:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newtfilter={0x6c, 0x2c, 0xf11, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0xffe0, 0xffec}, {0xfff1, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x33f2}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0x7}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9, 0xfff3}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x80}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008010}, 0x8080) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000240)) write$apparmor_exec(r1, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) [ 978.789011] audit: type=1400 audit(1676818383.705:1323): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A7A8F13 pid=17689 comm="syz-executor.0" 14:53:03 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 14:53:03 executing program 3: ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0x6400000000000000, 0x2, 0x5, 0x1, 0x9}) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:03 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:03 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:03 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000140)) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x6, 0x6a, 0x0, 0x10}}) 14:53:03 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000010c0)) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)={0x32, 0x89, 0x1, 0x0, 0x7, 0x5, 0x8, 0xff, 0x4, 0x30, 0x4, 0x2, 0x0, 0x5, 0x80000001, 0xfd, 0x6, 0xc5, 0x7f, '\x00', 0x0, 0x5}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000080)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000001080)={0x40}, 0x2) ioctl$TIOCNXCL(r3, 0x540d) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000001040)={0x1, 0x81, [{0x0, 0x0, 0x6b}]}) socket(0x1, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000010c0)) (async) ioctl$KVM_SMI(r0, 0xaeb7) (async) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)={0x32, 0x89, 0x1, 0x0, 0x7, 0x5, 0x8, 0xff, 0x4, 0x30, 0x4, 0x2, 0x0, 0x5, 0x80000001, 0xfd, 0x6, 0xc5, 0x7f, '\x00', 0x0, 0x5}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000080)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r4, 0x540d) (async) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000001080)={0x40}, 0x2) (async) ioctl$TIOCNXCL(r3, 0x540d) (async) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000001040)={0x1, 0x81, [{0x0, 0x0, 0x6b}]}) (async) socket(0x1, 0x3, 0x0) (async) 14:53:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newtfilter={0x6c, 0x2c, 0xf11, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0xffe0, 0xffec}, {0xfff1, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x33f2}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0x7}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9, 0xfff3}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x80}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008010}, 0x8080) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000240)) write$apparmor_exec(r1, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) [ 978.961757] audit: type=1400 audit(1676818383.875:1324): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=17715 comm="syz-executor.0" 14:53:03 executing program 3: ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0x6400000000000000, 0x2, 0x5, 0x1, 0x9}) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:03 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:03 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000100)) ioctl$TIOCNXCL(r3, 0x540d) write$apparmor_exec(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="d10f388731a51c005daf349ffd7d2f20d857a6d8d1b52d7e51ded3702088d97116f8f0de81213a0c3f8f2c6dc3bed758b2a1181ce46e730ac2adacc7f3a716e57ec3c9fd9e525095a4ca7f44e820d60a49744576f10053e10aafe6ddd82c90ac1151ee4d351474cdf2a12d297368f966374311c413ebbfce02509fc30d98e3c50b9a395f88c7fd8caeda602c2a71e87e4527803322ba7269da929c9037f7ae88fb4d8e81d08b3d5d3d8030dbd62b10351b1f3304c48ac4b7af14e860d78f49f0de577515580ff39c278e49bf0e4ea0ea9f7ff5e1d088175a", @ANYRESDEC=r3], 0xf) 14:53:04 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]}) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0xf) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x9, 0x10000}) 14:53:04 executing program 4: socket(0x1, 0x3, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x300, 0x3fffc, 0xfd1}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:53:04 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newtfilter={0x6c, 0x2c, 0xf11, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0xffe0, 0xffec}, {0xfff1, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x33f2}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0x7}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9, 0xfff3}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x80}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008010}, 0x8080) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000240)) write$apparmor_exec(r1, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14:53:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000100)) ioctl$TIOCNXCL(r3, 0x540d) write$apparmor_exec(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="d10f388731a51c005daf349ffd7d2f20d857a6d8d1b52d7e51ded3702088d97116f8f0de81213a0c3f8f2c6dc3bed758b2a1181ce46e730ac2adacc7f3a716e57ec3c9fd9e525095a4ca7f44e820d60a49744576f10053e10aafe6ddd82c90ac1151ee4d351474cdf2a12d297368f966374311c413ebbfce02509fc30d98e3c50b9a395f88c7fd8caeda602c2a71e87e4527803322ba7269da929c9037f7ae88fb4d8e81d08b3d5d3d8030dbd62b10351b1f3304c48ac4b7af14e860d78f49f0de577515580ff39c278e49bf0e4ea0ea9f7ff5e1d088175a", @ANYRESDEC=r3], 0xf) 14:53:04 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:04 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]}) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0xf) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x9, 0x10000}) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x9, 0x10000}) 14:53:04 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:04 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000100)) ioctl$TIOCNXCL(r3, 0x540d) write$apparmor_exec(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="d10f388731a51c005daf349ffd7d2f20d857a6d8d1b52d7e51ded3702088d97116f8f0de81213a0c3f8f2c6dc3bed758b2a1181ce46e730ac2adacc7f3a716e57ec3c9fd9e525095a4ca7f44e820d60a49744576f10053e10aafe6ddd82c90ac1151ee4d351474cdf2a12d297368f966374311c413ebbfce02509fc30d98e3c50b9a395f88c7fd8caeda602c2a71e87e4527803322ba7269da929c9037f7ae88fb4d8e81d08b3d5d3d8030dbd62b10351b1f3304c48ac4b7af14e860d78f49f0de577515580ff39c278e49bf0e4ea0ea9f7ff5e1d088175a", @ANYRESDEC=r3], 0xf) 14:53:04 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) 14:53:04 executing program 4: socket(0x1, 0x3, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x300, 0x3fffc, 0xfd1}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:53:04 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]}) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0xf) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x9, 0x10000}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)={0x3, 0x0, [{}, {}, {}]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r1, 0x0, 0xf) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x9, 0x10000}) (async) 14:53:04 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:04 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) (async) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) 14:53:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000100)) ioctl$TIOCNXCL(r2, 0x540d) 14:53:04 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 979.388650] audit: type=1400 audit(1676818384.305:1325): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=17785 comm="syz-executor.0" 14:53:04 executing program 4: socket(0x1, 0x3, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x300, 0x3fffc, 0xfd1}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket(0x1, 0x3, 0x0) (async) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x300, 0x3fffc, 0xfd1}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 14:53:04 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000000)={'stack ', '\x00'}, 0x7) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) write$apparmor_exec(r0, 0x0, 0xf) 14:53:04 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000100)) 14:53:04 executing program 4: socket(0x2a, 0x5, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) [ 979.520651] audit: type=1400 audit(1676818384.435:1326): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=17803 comm="syz-executor.0" 14:53:04 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r1, &(0x7f0000000000)={'stack ', '\x00'}, 0x7) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) (async) write$apparmor_exec(r0, 0x0, 0xf) 14:53:04 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) 14:53:04 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000200000000000000"], 0x9) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000080)={{0x4000, 0xd000, 0xd, 0x3, 0xff, 0x3, 0x5, 0x2d, 0xe4, 0x5, 0x7, 0xff}, {0x10000, 0x10000, 0x10, 0x4, 0x1f, 0x6, 0x5, 0x4, 0x3, 0x3f, 0x8, 0x1f}, {0x16000, 0xd000, 0x8, 0x7, 0x1, 0x4, 0x3, 0x40, 0xf7, 0x8, 0x40, 0x8}, {0x3000, 0x6000, 0xa, 0x26, 0x3, 0xab, 0x6, 0xf7, 0x3, 0x3, 0x81, 0x20}, {0x2000, 0x0, 0xe, 0x0, 0x3, 0x2, 0x1c, 0x81, 0x81, 0xce, 0x9}, {0x0, 0x10000, 0x9, 0x3, 0x5, 0x7f, 0xfd, 0x4, 0x3, 0x5, 0x40, 0x7}, {0x4, 0x2000, 0xb, 0x9, 0x4, 0x81, 0x20, 0x6, 0x5b, 0xff, 0xb5, 0xe5}, {0x100000, 0x4000, 0xf, 0x40, 0x3f, 0x3, 0x7f, 0x3, 0x20, 0xc, 0x20, 0x6}, {0x1, 0x101}, {0x4000, 0x7940}, 0x10003, 0x0, 0x3000, 0x4000, 0x5, 0x4d00, 0x3000, [0x8, 0x40, 0xfffffffffffffffe, 0xe94]}) 14:53:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 14:53:04 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:04 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r1, &(0x7f0000000000)={'stack ', '\x00'}, 0x7) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) (async) write$apparmor_exec(r0, 0x0, 0xf) 14:53:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:53:04 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x34) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:04 executing program 4: socket(0x2a, 0x5, 0x0) (async) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) [ 979.678455] audit: type=1400 audit(1676818384.595:1327): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=17828 comm="syz-executor.0" 14:53:04 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000200000000000000"], 0x9) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000080)={{0x4000, 0xd000, 0xd, 0x3, 0xff, 0x3, 0x5, 0x2d, 0xe4, 0x5, 0x7, 0xff}, {0x10000, 0x10000, 0x10, 0x4, 0x1f, 0x6, 0x5, 0x4, 0x3, 0x3f, 0x8, 0x1f}, {0x16000, 0xd000, 0x8, 0x7, 0x1, 0x4, 0x3, 0x40, 0xf7, 0x8, 0x40, 0x8}, {0x3000, 0x6000, 0xa, 0x26, 0x3, 0xab, 0x6, 0xf7, 0x3, 0x3, 0x81, 0x20}, {0x2000, 0x0, 0xe, 0x0, 0x3, 0x2, 0x1c, 0x81, 0x81, 0xce, 0x9}, {0x0, 0x10000, 0x9, 0x3, 0x5, 0x7f, 0xfd, 0x4, 0x3, 0x5, 0x40, 0x7}, {0x4, 0x2000, 0xb, 0x9, 0x4, 0x81, 0x20, 0x6, 0x5b, 0xff, 0xb5, 0xe5}, {0x100000, 0x4000, 0xf, 0x40, 0x3f, 0x3, 0x7f, 0x3, 0x20, 0xc, 0x20, 0x6}, {0x1, 0x101}, {0x4000, 0x7940}, 0x10003, 0x0, 0x3000, 0x4000, 0x5, 0x4d00, 0x3000, [0x8, 0x40, 0xfffffffffffffffe, 0xe94]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000200000000000000"], 0x9) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000080)={{0x4000, 0xd000, 0xd, 0x3, 0xff, 0x3, 0x5, 0x2d, 0xe4, 0x5, 0x7, 0xff}, {0x10000, 0x10000, 0x10, 0x4, 0x1f, 0x6, 0x5, 0x4, 0x3, 0x3f, 0x8, 0x1f}, {0x16000, 0xd000, 0x8, 0x7, 0x1, 0x4, 0x3, 0x40, 0xf7, 0x8, 0x40, 0x8}, {0x3000, 0x6000, 0xa, 0x26, 0x3, 0xab, 0x6, 0xf7, 0x3, 0x3, 0x81, 0x20}, {0x2000, 0x0, 0xe, 0x0, 0x3, 0x2, 0x1c, 0x81, 0x81, 0xce, 0x9}, {0x0, 0x10000, 0x9, 0x3, 0x5, 0x7f, 0xfd, 0x4, 0x3, 0x5, 0x40, 0x7}, {0x4, 0x2000, 0xb, 0x9, 0x4, 0x81, 0x20, 0x6, 0x5b, 0xff, 0xb5, 0xe5}, {0x100000, 0x4000, 0xf, 0x40, 0x3f, 0x3, 0x7f, 0x3, 0x20, 0xc, 0x20, 0x6}, {0x1, 0x101}, {0x4000, 0x7940}, 0x10003, 0x0, 0x3000, 0x4000, 0x5, 0x4d00, 0x3000, [0x8, 0x40, 0xfffffffffffffffe, 0xe94]}) (async) 14:53:04 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000200)=0x401) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x2}, @enter_looper], 0x2d, 0x0, &(0x7f0000000080)="69384e3cacfadd4271587f6c295277d1cc76232253dabbfd69a530d77580c10612a64d8f4edd9facebf9809b3b"}) write$apparmor_exec(r1, 0x0, 0xf) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/223) 14:53:04 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000100)={'stack ', '\x00'}, 0x7) 14:53:04 executing program 4: socket(0x2a, 0x5, 0x0) (async) socket(0x2a, 0x5, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) 14:53:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14:53:04 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x34) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x34) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) (async) [ 979.829497] audit: type=1400 audit(1676818384.745:1328): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=17845 comm="syz-executor.0" 14:53:04 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000200000000000000"], 0x9) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000080)={{0x4000, 0xd000, 0xd, 0x3, 0xff, 0x3, 0x5, 0x2d, 0xe4, 0x5, 0x7, 0xff}, {0x10000, 0x10000, 0x10, 0x4, 0x1f, 0x6, 0x5, 0x4, 0x3, 0x3f, 0x8, 0x1f}, {0x16000, 0xd000, 0x8, 0x7, 0x1, 0x4, 0x3, 0x40, 0xf7, 0x8, 0x40, 0x8}, {0x3000, 0x6000, 0xa, 0x26, 0x3, 0xab, 0x6, 0xf7, 0x3, 0x3, 0x81, 0x20}, {0x2000, 0x0, 0xe, 0x0, 0x3, 0x2, 0x1c, 0x81, 0x81, 0xce, 0x9}, {0x0, 0x10000, 0x9, 0x3, 0x5, 0x7f, 0xfd, 0x4, 0x3, 0x5, 0x40, 0x7}, {0x4, 0x2000, 0xb, 0x9, 0x4, 0x81, 0x20, 0x6, 0x5b, 0xff, 0xb5, 0xe5}, {0x100000, 0x4000, 0xf, 0x40, 0x3f, 0x3, 0x7f, 0x3, 0x20, 0xc, 0x20, 0x6}, {0x1, 0x101}, {0x4000, 0x7940}, 0x10003, 0x0, 0x3000, 0x4000, 0x5, 0x4d00, 0x3000, [0x8, 0x40, 0xfffffffffffffffe, 0xe94]}) 14:53:04 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 14:53:04 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000200)=0x401) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x2}, @enter_looper], 0x2d, 0x0, &(0x7f0000000080)="69384e3cacfadd4271587f6c295277d1cc76232253dabbfd69a530d77580c10612a64d8f4edd9facebf9809b3b"}) write$apparmor_exec(r1, 0x0, 0xf) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/223) (async) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/223) 14:53:04 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x990c6aa96f06f5e3}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newtclass={0xa8, 0x28, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x9}, {0x1, 0x1}, {0xffff, 0x4}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3f}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x10000}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8000}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3f}}, @tclass_kind_options=@c_tbf={0x8}]}, 0xa8}}, 0x0) r1 = socket(0x1, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0), 0x4) 14:53:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) [ 979.969552] audit: type=1400 audit(1676818384.885:1329): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=17872 comm="syz-executor.0" 14:53:04 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x34) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:04 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x990c6aa96f06f5e3}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newtclass={0xa8, 0x28, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x9}, {0x1, 0x1}, {0xffff, 0x4}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3f}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x10000}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8000}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3f}}, @tclass_kind_options=@c_tbf={0x8}]}, 0xa8}}, 0x0) r1 = socket(0x1, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0), 0x4) 14:53:04 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000200)=0x401) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x2}, @enter_looper], 0x2d, 0x0, &(0x7f0000000080)="69384e3cacfadd4271587f6c295277d1cc76232253dabbfd69a530d77580c10612a64d8f4edd9facebf9809b3b"}) write$apparmor_exec(r1, 0x0, 0xf) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/223) 14:53:05 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) 14:53:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000180)=0x1) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000001c0)={0x0, 0x4, 0xd021}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r3, 0x900, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x49}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:05 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000040)={0x7fffffff, 0x4000}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="203cce63a243d9cd05f0c90600000080188e12d9e78eada578f81b2c96ebeca2cfa1d83cd3c50558e545daef30b2ae3084f79de8e48acce38f9000"/68], 0x9) 14:53:05 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 14:53:05 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x990c6aa96f06f5e3}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newtclass={0xa8, 0x28, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x9}, {0x1, 0x1}, {0xffff, 0x4}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3f}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x10000}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8000}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3f}}, @tclass_kind_options=@c_tbf={0x8}]}, 0xa8}}, 0x0) r1 = socket(0x1, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x990c6aa96f06f5e3}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newtclass={0xa8, 0x28, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x9}, {0x1, 0x1}, {0xffff, 0x4}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_LMAX={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3f}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x10000}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8000}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3f}}, @tclass_kind_options=@c_tbf={0x8}]}, 0xa8}}, 0x0) (async) socket(0x1, 0x3, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0), 0x4) (async) 14:53:05 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) 14:53:05 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xfffffd1f) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x2) 14:53:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000180)=0x1) (async) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000001c0)={0x0, 0x4, 0xd021}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r3, 0x900, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x49}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:05 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 14:53:05 executing program 4: socket(0x1, 0x800, 0xfffff800) r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0x54) 14:53:05 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xfffffd1f) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x2) 14:53:05 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000040)={0x7fffffff, 0x4000}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="203cce63a243d9cd05f0c90600000080188e12d9e78eada578f81b2c96ebeca2cfa1d83cd3c50558e545daef30b2ae3084f79de8e48acce38f9000"/68], 0x9) 14:53:05 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) 14:53:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000180)=0x1) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000001c0)={0x0, 0x4, 0xd021}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r3, 0x900, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x49}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:05 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x34) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:05 executing program 4: socket(0x1, 0x800, 0xfffff800) r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0x54) socket(0x1, 0x800, 0xfffff800) (async) socket$phonet(0x23, 0x2, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0x54) (async) 14:53:05 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xfffffd1f) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 64) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x2) (rerun: 64) 14:53:05 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r0, 0x4b30, 0x80000000) 14:53:05 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)=0x1) 14:53:05 executing program 4: socket(0x1, 0x800, 0xfffff800) r0 = socket$phonet(0x23, 0x2, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000)=0x54) 14:53:05 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000040)={0x7fffffff, 0x4000}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="203cce63a243d9cd05f0c90600000080188e12d9e78eada578f81b2c96ebeca2cfa1d83cd3c50558e545daef30b2ae3084f79de8e48acce38f9000"/68], 0x9) 14:53:05 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x34) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:05 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x80000000) 14:53:05 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, 0x0, 0x3d) 14:53:05 executing program 4: r0 = socket(0x1, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) close$fd_v4l2_buffer(r1) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:53:05 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x34) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:05 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)=0x1) 14:53:05 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="65786563203a2e2d002b8539cf2308151848500ade00c51dbabfeb704c99ab953e208935e4ac16b123ef4799b7e1dd8a1571ab2ce0cbe60410176387c12c7ee6f1c1dd11de5dfa4e0b734e7af87e8b"], 0x9) 14:53:05 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x80000000) 14:53:05 executing program 4: r0 = socket(0x1, 0x3, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) close$fd_v4l2_buffer(r1) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:53:05 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r0, 0x0, 0x3d) 14:53:05 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x34) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:05 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="65786563203a2e2d002b8539cf2308151848500ade00c51dbabfeb704c99ab953e208935e4ac16b123ef4799b7e1dd8a1571ab2ce0cbe60410176387c12c7ee6f1c1dd11de5dfa4e0b734e7af87e8b"], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="65786563203a2e2d002b8539cf2308151848500ade00c51dbabfeb704c99ab953e208935e4ac16b123ef4799b7e1dd8a1571ab2ce0cbe60410176387c12c7ee6f1c1dd11de5dfa4e0b734e7af87e8b"], 0x9) 14:53:05 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)=0x1) 14:53:05 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x80000000) 14:53:05 executing program 4: r0 = socket(0x1, 0x3, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) close$fd_v4l2_buffer(r1) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:53:05 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x34) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:05 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="65786563203a2e2d002b8539cf2308151848500ade00c51dbabfeb704c99ab953e208935e4ac16b123ef4799b7e1dd8a1571ab2ce0cbe60410176387c12c7ee6f1c1dd11de5dfa4e0b734e7af87e8b"], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="65786563203a2e2d002b8539cf2308151848500ade00c51dbabfeb704c99ab953e208935e4ac16b123ef4799b7e1dd8a1571ab2ce0cbe60410176387c12c7ee6f1c1dd11de5dfa4e0b734e7af87e8b"], 0x9) (async) 14:53:05 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, 0x0, 0x3d) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r0, 0x0, 0x3d) (async) 14:53:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r0, 0x4b30, 0x80000000) 14:53:05 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000180)={0x896, 0x4, 0x9}) ioctl$TIOCNXCL(r3, 0x540d) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), 0x4) ioctl$TIOCNXCL(r2, 0x540d) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f00000000c0)) 14:53:05 executing program 4: socket$phonet(0x23, 0x2, 0x1) socket(0x1, 0x3, 0x0) 14:53:05 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x3) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[], 0xc) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x9) 14:53:05 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x34) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x80000000) 14:53:05 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)) write$apparmor_exec(r0, 0x0, 0xf) 14:53:05 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[], 0xf) (async) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000180)={0x896, 0x4, 0x9}) ioctl$TIOCNXCL(r3, 0x540d) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), 0x4) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$TIOCNXCL(r2, 0x540d) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f00000000c0)) 14:53:05 executing program 4: socket$phonet(0x23, 0x2, 0x1) socket(0x1, 0x3, 0x0) 14:53:05 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x3) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[], 0xc) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) (async) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x3) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[], 0xc) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x9) (async) 14:53:05 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:06 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)) write$apparmor_exec(r0, 0x0, 0xf) 14:53:06 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x80000000) 14:53:06 executing program 4: socket$phonet(0x23, 0x2, 0x1) (async) socket(0x1, 0x3, 0x0) 14:53:06 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000180)={0x896, 0x4, 0x9}) ioctl$TIOCNXCL(r3, 0x540d) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), 0x4) ioctl$TIOCNXCL(r2, 0x540d) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f00000000c0)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[], 0xf) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000180)={0x896, 0x4, 0x9}) (async) ioctl$TIOCNXCL(r3, 0x540d) (async) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), 0x4) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f00000000c0)) (async) 14:53:06 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)) (async) write$apparmor_exec(r0, 0x0, 0xf) 14:53:06 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x3) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[], 0xc) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[], 0xc) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x9) 14:53:06 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x80000000) 14:53:06 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:06 executing program 4: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "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"}) socket(0x29, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001280)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/4096) 14:53:06 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x2, 0x6, 0x1, 0x0, 0x18, "538ac6e90471b2fc"}) 14:53:06 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:06 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x80000000) 14:53:06 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:53:06 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6578372fe405000000a6cb9900000000a10c725ffcc4c99f1b6c4c"], 0x9) r1 = syz_open_pts(0xffffffffffffffff, 0xbe5bcb9c6414fbf) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000580)={0x1, 0x0, [{}]}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="20022abd7000fbdbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="93bd4b74de6e80c7370b4473323fdea599792405267122dc5e660fdf40e825e5367b5f93585a19c563b6e3077518b26df656e2e7723299593174fee64d4a343f1e202d4f1ef1fcc60677142a826228a6d3f437584fa7d49f23c4d990052ccc78d648313318d0d70206bbdc5c9766a0718125b7fe46fcb6b2563a7b1850014150c9bed8aad0ae8a2e96e5f792085ecbb49b3c684b56bce9f2afe42b6914427b41ff0b9d1165c0c0f6bb99f080543800"], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r6, 0x401, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r8, 0x540d) ioctl$BINDER_GET_EXTENDED_ERROR(r8, 0xc00c6211, &(0x7f0000000540)) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0xff, 0x4, 0x101, 0x10}}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f00000008c0)=[@efer={0x2, 0x9bba48bda16d7aa4}, @efer], 0x2) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r11 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r11, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x50, r11, 0x300, 0x70bd2b, 0xfff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e6c954d42"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r10, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x40000) 14:53:06 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x2, 0x6, 0x1, 0x0, 0x18, "538ac6e90471b2fc"}) 14:53:06 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:06 executing program 4: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "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"}) socket(0x29, 0x2, 0x0) (async) socket(0x29, 0x2, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001280)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/4096) (async) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/4096) 14:53:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x0) 14:53:06 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:53:06 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6578372fe405000000a6cb9900000000a10c725ffcc4c99f1b6c4c"], 0x9) (async) r1 = syz_open_pts(0xffffffffffffffff, 0xbe5bcb9c6414fbf) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000580)={0x1, 0x0, [{}]}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="20022abd7000fbdbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="93bd4b74de6e80c7370b4473323fdea599792405267122dc5e660fdf40e825e5367b5f93585a19c563b6e3077518b26df656e2e7723299593174fee64d4a343f1e202d4f1ef1fcc60677142a826228a6d3f437584fa7d49f23c4d990052ccc78d648313318d0d70206bbdc5c9766a0718125b7fe46fcb6b2563a7b1850014150c9bed8aad0ae8a2e96e5f792085ecbb49b3c684b56bce9f2afe42b6914427b41ff0b9d1165c0c0f6bb99f080543800"], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r6, 0x401, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r8, 0x540d) ioctl$BINDER_GET_EXTENDED_ERROR(r8, 0xc00c6211, &(0x7f0000000540)) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0xff, 0x4, 0x101, 0x10}}) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f00000008c0)=[@efer={0x2, 0x9bba48bda16d7aa4}, @efer], 0x2) (async) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r11, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x50, r11, 0x300, 0x70bd2b, 0xfff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e6c954d42"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r10, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x40000) 14:53:06 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x2, 0x6, 0x1, 0x0, 0x18, "538ac6e90471b2fc"}) 14:53:06 executing program 4: syz_open_pts(0xffffffffffffffff, 0x200101) (async) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "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"}) (async) socket(0x29, 0x2, 0x0) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001280)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/4096) 14:53:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x0) 14:53:06 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:06 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:53:06 executing program 4: socket(0x26, 0xa, 0x0) 14:53:06 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:06 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6578372fe405000000a6cb9900000000a10c725ffcc4c99f1b6c4c"], 0x9) (async, rerun: 32) r1 = syz_open_pts(0xffffffffffffffff, 0xbe5bcb9c6414fbf) (rerun: 32) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) (async, rerun: 32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$TIOCNXCL(r3, 0x540d) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 32) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$TIOCNXCL(r5, 0x540d) (async) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000580)={0x1, 0x0, [{}]}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="20022abd7000fbdbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="93bd4b74de6e80c7370b4473323fdea599792405267122dc5e660fdf40e825e5367b5f93585a19c563b6e3077518b26df656e2e7723299593174fee64d4a343f1e202d4f1ef1fcc60677142a826228a6d3f437584fa7d49f23c4d990052ccc78d648313318d0d70206bbdc5c9766a0718125b7fe46fcb6b2563a7b1850014150c9bed8aad0ae8a2e96e5f792085ecbb49b3c684b56bce9f2afe42b6914427b41ff0b9d1165c0c0f6bb99f080543800"], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r6, 0x401, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r8, 0x540d) ioctl$BINDER_GET_EXTENDED_ERROR(r8, 0xc00c6211, &(0x7f0000000540)) (async) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x8, 0xff, 0x4, 0x101, 0x10}}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f00000008c0)=[@efer={0x2, 0x9bba48bda16d7aa4}, @efer], 0x2) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r11, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x50, r11, 0x300, 0x70bd2b, 0xfff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "0e6c954d42"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (rerun: 64) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r10, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x40000) 14:53:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x0) 14:53:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001780)={&(0x7f00000002c0)=@newtaction={0x1494, 0x30, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{0x4b4, 0x1, [@m_xt={0x208, 0x20, 0x0, 0x0, {{0x7}, {0xe8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x98a}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x9f, 0x6, {0x200, 'nat\x00', 0x5, 0x81, "04ee88a2bb72555c099163be27b7bf1f488c84f77e5d8f9ac7ee67e0d764ca479f47b98e92ee2edf151bba2d123941018fa7dd7085060cde0a721b172b4971789fd0be3d761a7a258372b342d503f9ccc21d7a016142072c1f9859636cfe5260b4757e12e30c2e06bc70bf8026a39f4c0aaac10b7a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xf9, 0x6, "83c307a157feb02438277b868a9af438d2e8a1d82e3b7333a4bb58e2666a10530730c495d10a8e5f0dfb54a0783a32cfddae3cc46f19ad2e09084caba95fc42888ee4be443f1b43c5b0abfbe8ea779d331a464fa0281ba509b38c0ade4b0d3272f87ca140b435efe46cfd022811549cbc786426fd1bda54c9b6bddb8d22c323fb887e1fd76c0085b8278fd66f22bb5aadb7bc6fa00851daff8f64fd1c334a995d65737839bfdc27394c05a7e542a7411d72746d234a698c72a29c4eeca18e06e63728ea9c11e9f0ab9f09586dee60af509bc2b63a75637c43cfb4d7c2a7e10afe36050c9ffe5ec4aa09e9fb0e305df39053c42c726"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xb4, 0x12, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x8, 0xffffffffefffffff, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x101, 0x5, 0x5, 0x80000001}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xa3e, 0x1, 0xff, 0x8001}}]}, {0x1e, 0x6, "898f2a36339f3970ed89c9744ccb2dd2660be91dfb1f3a2bdf2a"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x114, 0x13, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2100, 0xffffffffffffffff, 0xc39, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x2, 0x0, 0x7, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xffffffff, 0x4, 0xffffe9c8, 0x20}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xfff, 0x20000000, 0x4a51, 0x3}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x15, 0x7, 0xffffffffffffffff, 0x83, 0xae55}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x0, 0x0, 0x6}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3f, 0x7, 0x20000000, 0x6, 0x1}, 0x50}}]}, {0x1e, 0x6, "401c1e3d94f4e5234c6d5f9c2275f9ea7c6b889567d2312b0c26"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xe0, 0x4, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}]}, {0x61, 0x6, "fe07c8c3f3b948b97379e356869306e4295bde18d6f0f1ab63d2d1a0bc7ddfd457b65f013ebf83d2df2c64b63bcb54e0522c0443d3784277c72bd6847f3cb7996dee1f98d74e9d5bfdf2d8383008deac1e8fea948d19226602dd8cee22"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0xa8, 0x1, [@m_pedit={0xa4, 0x1c, 0x0, 0x0, {{0xa}, {0x6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x10, 0x6, "de18e8334dd532a69b8ce04c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x46e950a7270e3e76, 0x2}}}}]}, {0xf24, 0x1, [@m_ct={0x134, 0x1e, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0xe8, 0x6, "b962da6707cf3e698a763eb5298979b3400c853be48220a4535c2dc1e0667cd15478490c16089c49dacc6ad06190f1a09a33fb5523f24e448e480ea7e8be322c04c21868db067e1541c12df558d91e822f2ccc0e1615fd82fee273fdc3c78217e2ea55d2bbf4ee20b3544bccd4eced836c593db4f9299fa60da2bca10bb567546bc6b6163f813a80a703a11fbb75f14aaca71847139f90723c305ae004acf4560c0104c85886f4ff20d04fdaef0f2f4cf795966eaffee2ada4b7f0b040c16d6dea25672320005359ad5161cb96ffbe0cd20b2aa803c7cf47054d96257c670cde7ba110df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x144, 0x5, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x100, 0x8, 0x9, 0x40}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16eb, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1de7, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x9, 0x8, 0x7, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x9, 0x7, 0xfffffffd, 0x7ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1ef8, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x7, 0x2, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0x2, 0x5, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x20000000, 0x6, 0x6}}]}, {0x61, 0x6, "49af0599e68ac2f464a6788dd44f145c195f729205d4f7340e22d0b96b31ddfabfc067d6cd335b7b975eff1b92d4b23d561b65712309951ded02adeec88c36d501c44d8a59396b53e570637d33d9568da8ab0541e62dbbeeb171e3fd47"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_tunnel_key={0x110, 0x4, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffeff}]}, {0xd8, 0x6, "5d7fecaacefb7857d6670e3579ce61ca2726ccd3c4623f65313cbd96587cfb7d1df988eaac36621830ace374e3f8c0779f30371d58b2bc0c6a773eca21177bd00c00a162e96b2171a1bae247fdb6d2d11f5cc70984a4954e2d75b78cf23fea6f0405d54e73073e6030878d16b6cfa305bab7d99de473d6c5856ae5820c17411f36bcc5a874cf8f3ea49199001bbf14c1831e952611971c0bed9eff5b401eeaac7670a0bb9a540e8c696a9d15fde3c2c1f0a8fe281e989afbdd83149d160762040575a051de1dd08a55cc7e29ffce461a12054768"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x9d0, 0xff, 0x0, 0x0, {{0xb}, {0x8e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4832}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x80000000, 0xc16, 0x1f, 0x3378e0bf, 0x3, 0x7fff, 0x771, 0x1, 0x7, 0x217, 0x4, 0x2, 0x9, 0x101, 0x1, 0xfffffffc, 0x9e0543, 0x2000, 0x20, 0x0, 0xa286, 0x1ff, 0x1, 0xffffff28, 0xd31, 0x100, 0x64, 0x800, 0x3, 0x0, 0x1, 0x200, 0x2, 0x0, 0x10001, 0x3db9, 0x2, 0x7, 0x80000001, 0x100, 0x3, 0x0, 0x80000000, 0x8, 0x5, 0x7, 0xffc00000, 0x8, 0x8, 0x9, 0xfffffffb, 0x7ff, 0x1, 0x7, 0xfff, 0x7fffffff, 0x9, 0x8b52, 0x3, 0x80000001, 0x1, 0x81, 0x4, 0x7a8, 0x61, 0x1, 0xecae, 0x7f, 0x1a, 0x8, 0x7f, 0x9, 0x5, 0xfffffffd, 0x35, 0x200, 0x2, 0x2, 0x10000, 0xf6, 0x5, 0x0, 0x8, 0x18, 0x5, 0x5, 0x7, 0x8, 0x7f, 0x2, 0x10001, 0x6, 0x4, 0x9, 0x20, 0xfffff35d, 0xea, 0xe7, 0x6, 0x5, 0x4, 0x1, 0x9, 0x8, 0x8, 0x0, 0x0, 0xfffffffd, 0x5, 0x10000, 0x1, 0x8001, 0x8, 0x7fff, 0x8, 0x6, 0x7, 0x5, 0x9, 0xfd, 0x8, 0x27, 0x400, 0x6, 0x9, 0xfffffff9, 0x55, 0x2b, 0xffffffff, 0x20, 0xec, 0x0, 0x7ff, 0x400, 0xffffffff, 0xa0, 0x2, 0x2, 0xb0, 0x100, 0x72, 0x2, 0xbca8, 0x9, 0xfff, 0x0, 0x5, 0x7, 0x10001, 0xffff06a0, 0x6, 0x4, 0x3, 0x80, 0x7, 0x6, 0xfffffffa, 0x400, 0x6, 0x274, 0x2ffc, 0x4, 0x4, 0x2, 0x2d7d, 0x953b, 0x4, 0x7, 0x20, 0x2, 0x3, 0x6, 0x0, 0x2, 0x401, 0x1e, 0x7fff, 0x3f, 0x80, 0x7fff, 0x2, 0x7c, 0x9, 0x3, 0x7, 0x200, 0x8, 0x0, 0x2, 0x1, 0xfff, 0x1, 0x7c68, 0x5, 0x10000, 0x5, 0x3, 0x0, 0x8, 0x8, 0x9, 0x1, 0x8, 0x3ffc000, 0x60c, 0x5, 0x8, 0x0, 0x0, 0x1, 0x8, 0x4, 0x78ee, 0x2, 0xa8, 0x2, 0xffff0000, 0x43, 0x80000000, 0x4, 0x1, 0x20, 0x0, 0xca400000, 0xc00, 0x10001, 0x1, 0x2, 0x4, 0x1ff, 0x5, 0x6, 0x2, 0x5afd, 0x6, 0x7fffffff, 0x6, 0x3, 0x3, 0x4, 0x5, 0x1, 0xfffffff9, 0x2, 0x2, 0x9, 0xff, 0x3ff, 0x2, 0xfffffff8, 0x6, 0x1, 0x20, 0x1, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x81, 0x3f, 0x96cf, 0x9, 0x2, 0x13, 0x200, 0x3f, 0x4, 0x3, 0x4, 0x6, 0x6, 0x7, 0x1, 0x9, 0x5, 0x10000, 0x44, 0x101, 0xdf, 0xffffffff, 0x6278, 0xfffffffd, 0x2a, 0x7, 0x6, 0x400, 0x2, 0x10000, 0x800, 0x2, 0xb61, 0x9, 0x8001, 0x2757, 0x6, 0x8001, 0xfffffffe, 0x6, 0x1, 0x7f, 0x1, 0x3, 0x8, 0x7, 0xfffffff7, 0x8, 0x7, 0x10001, 0x3f, 0x1, 0x7, 0x8, 0x9, 0x9, 0xfffff000, 0x5, 0x6, 0x4, 0xdaf, 0x1, 0x5, 0x5402f5f7, 0x8001, 0xfffffff7, 0x0, 0x80, 0x79383121, 0x3ff, 0x2, 0xff, 0x8000, 0x6, 0xa304, 0xfff, 0x80, 0x8, 0x76, 0x1fc00000, 0x19b, 0xfffffffe, 0x100, 0x8, 0x5e, 0x4, 0x7ff, 0x4, 0x40, 0x4, 0x6, 0x80, 0x200, 0x3, 0x1, 0x7723, 0x5, 0xfffffffb, 0x5, 0x0, 0x7f, 0x8, 0x81, 0x8, 0x706b, 0x3, 0x3, 0x10001, 0x7fff, 0x8, 0xfffffffd, 0x2, 0x0, 0x1, 0x8, 0x1000, 0xfffffff7, 0x80000001, 0x200, 0x6, 0x8000, 0x6, 0x10000, 0x5aa7, 0x9, 0x3, 0x4, 0x5d, 0xffffffff, 0x2, 0x7, 0x82e, 0x1, 0x7fffffff, 0x7ff, 0x1, 0x400, 0x401, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x80, 0xffff0d5b, 0x35a, 0xd1, 0x80000001, 0x7fffffff, 0x0, 0xf9e9, 0x5, 0xfffffffb, 0x7, 0x7, 0x9, 0x401, 0x8, 0xea6, 0x2, 0x0, 0x3ff, 0x0, 0x3f, 0x7fff, 0xffffff81, 0x10000, 0x6, 0x0, 0xfa6d, 0x2, 0x9, 0x49, 0x0, 0x100, 0x8, 0x4, 0x0, 0x870, 0x7, 0xb7, 0xe22, 0x8, 0xa7c, 0x10000, 0x5, 0x5, 0x401, 0x401, 0x81, 0x7, 0x7, 0x1, 0x7ff, 0x4, 0x9, 0x1f, 0x9, 0x4, 0x8, 0x3f, 0x101, 0x1, 0x10000, 0xf0b, 0x10001, 0xa1, 0x80, 0x8000, 0x215, 0x0, 0x7fff, 0x8000, 0xffffffe7, 0x8, 0x4, 0x11, 0x1000, 0x3, 0x4, 0x7f, 0x6, 0x0, 0xd0, 0x1c0000, 0x8000, 0x8, 0x10001, 0x66b877be, 0x101, 0x5b92b94a, 0x0, 0x7000000, 0x7, 0x7, 0x2bc9, 0xabc9, 0x200, 0x80000000, 0x2, 0x9, 0x400, 0x1, 0x9b3, 0x3, 0x2, 0xffffffff, 0x9, 0x1, 0x800, 0x7, 0x9, 0x2, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0xba2, 0x1, 0x1, 0xfffffffb, 0x5e2600, {0x2, 0x5fc23566d51acc8a, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x0, 0x4, 0x6, 0x9, 0x6}, 0x100, 0xff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]]}, {0xbf, 0x6, "2d88f762b4dd888a1cfd2f00f76a8cc2f15eb3eda8716f261031da957f67f8a68f99f8bc90288b824e611639e86ce136db8c84777d23ec5627b6c559d2b9e69b05cd3f275ee0951f2e27dc5423ab08eb21fb59ce668b974865b47dd850c5f9505bec32a6312e063a4c315f3a703eba66ddab6d67e954a9a0895b4e7dfb7ad8a9f890ab37f5242b7b2be0da50b54d2ff35bf516c4d135ca52769dfe2092cdcacf728b71f87d030083241daeed8b5c91889b5408d74c3b23e7ccee37"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x60, 0x5, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0xc8, 0x8, 0x16, 0x8}, {0x4, 0x9, 0x6, 0xfffffc01}, {0x8, 0x0, 0x40, 0x1}, {0x7, 0x4, 0x3, 0x1}, {0x6, 0xfb, 0x1, 0x6db}, {0x40, 0x1, 0x5, 0x9}]}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x94, 0x1b, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x6, 0x6, "2602"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xd4, 0x12, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x98, 0x6, "36a920caee0987e1b7c462c4ac9c4dbe59ab484d75717e638b6079f8d914fa9e0e1d009b429feee276b988f8ef9aa8d5e8e9bcd7d2677732816f18809ecd40a5e4d9ce4cd18ed6d53d01eb83558aa099982def5407288a273237a68a1f18fc47192aaa6c943c1de2b18b35cb4209fa0e7611a02ddbc6b169dd27a0f55fbe68bda3d6ab970e48f60ea5bf73f2e6ff66e7b9b4557e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1494}, 0x1, 0x0, 0x0, 0x20000811}, 0x11) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x28, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7328, 0x1c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@RTM_NEWMDB={0x98, 0x54, 0x2, 0x70bd27, 0x25dfdbfc, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0xfffe, {@in6_addr=@mcast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x2, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x37}, 0x436e}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x5) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001880)=[@text64={0x40, &(0x7f0000001800)="400f01c8c4418dec61a80fab11c481b81500c482791db800000000660f3881a6a6bfa6f5a00200000000000000666526f011a0b10000000fc7a90000c0fe440fc739", 0x42}], 0x1, 0x20, &(0x7f00000018c0), 0x0) 14:53:06 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:06 executing program 4: socket(0x26, 0xa, 0x0) 14:53:06 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000040)={0x3, 0x511}) 14:53:06 executing program 4: socket(0x26, 0xa, 0x0) 14:53:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x0) 14:53:06 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:06 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000040)={0x3, 0x511}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000040)={0x3, 0x511}) (async) [ 981.785792] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001780)={&(0x7f00000002c0)=@newtaction={0x1494, 0x30, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{0x4b4, 0x1, [@m_xt={0x208, 0x20, 0x0, 0x0, {{0x7}, {0xe8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x98a}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x9f, 0x6, {0x200, 'nat\x00', 0x5, 0x81, "04ee88a2bb72555c099163be27b7bf1f488c84f77e5d8f9ac7ee67e0d764ca479f47b98e92ee2edf151bba2d123941018fa7dd7085060cde0a721b172b4971789fd0be3d761a7a258372b342d503f9ccc21d7a016142072c1f9859636cfe5260b4757e12e30c2e06bc70bf8026a39f4c0aaac10b7a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xf9, 0x6, "83c307a157feb02438277b868a9af438d2e8a1d82e3b7333a4bb58e2666a10530730c495d10a8e5f0dfb54a0783a32cfddae3cc46f19ad2e09084caba95fc42888ee4be443f1b43c5b0abfbe8ea779d331a464fa0281ba509b38c0ade4b0d3272f87ca140b435efe46cfd022811549cbc786426fd1bda54c9b6bddb8d22c323fb887e1fd76c0085b8278fd66f22bb5aadb7bc6fa00851daff8f64fd1c334a995d65737839bfdc27394c05a7e542a7411d72746d234a698c72a29c4eeca18e06e63728ea9c11e9f0ab9f09586dee60af509bc2b63a75637c43cfb4d7c2a7e10afe36050c9ffe5ec4aa09e9fb0e305df39053c42c726"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xb4, 0x12, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x8, 0xffffffffefffffff, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x101, 0x5, 0x5, 0x80000001}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xa3e, 0x1, 0xff, 0x8001}}]}, {0x1e, 0x6, "898f2a36339f3970ed89c9744ccb2dd2660be91dfb1f3a2bdf2a"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x114, 0x13, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2100, 0xffffffffffffffff, 0xc39, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x2, 0x0, 0x7, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xffffffff, 0x4, 0xffffe9c8, 0x20}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xfff, 0x20000000, 0x4a51, 0x3}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x15, 0x7, 0xffffffffffffffff, 0x83, 0xae55}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x0, 0x0, 0x6}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3f, 0x7, 0x20000000, 0x6, 0x1}, 0x50}}]}, {0x1e, 0x6, "401c1e3d94f4e5234c6d5f9c2275f9ea7c6b889567d2312b0c26"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xe0, 0x4, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}]}, {0x61, 0x6, "fe07c8c3f3b948b97379e356869306e4295bde18d6f0f1ab63d2d1a0bc7ddfd457b65f013ebf83d2df2c64b63bcb54e0522c0443d3784277c72bd6847f3cb7996dee1f98d74e9d5bfdf2d8383008deac1e8fea948d19226602dd8cee22"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0xa8, 0x1, [@m_pedit={0xa4, 0x1c, 0x0, 0x0, {{0xa}, {0x6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x10, 0x6, "de18e8334dd532a69b8ce04c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x46e950a7270e3e76, 0x2}}}}]}, {0xf24, 0x1, [@m_ct={0x134, 0x1e, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0xe8, 0x6, "b962da6707cf3e698a763eb5298979b3400c853be48220a4535c2dc1e0667cd15478490c16089c49dacc6ad06190f1a09a33fb5523f24e448e480ea7e8be322c04c21868db067e1541c12df558d91e822f2ccc0e1615fd82fee273fdc3c78217e2ea55d2bbf4ee20b3544bccd4eced836c593db4f9299fa60da2bca10bb567546bc6b6163f813a80a703a11fbb75f14aaca71847139f90723c305ae004acf4560c0104c85886f4ff20d04fdaef0f2f4cf795966eaffee2ada4b7f0b040c16d6dea25672320005359ad5161cb96ffbe0cd20b2aa803c7cf47054d96257c670cde7ba110df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x144, 0x5, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x100, 0x8, 0x9, 0x40}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16eb, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1de7, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x9, 0x8, 0x7, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x9, 0x7, 0xfffffffd, 0x7ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1ef8, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x7, 0x2, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0x2, 0x5, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x20000000, 0x6, 0x6}}]}, {0x61, 0x6, "49af0599e68ac2f464a6788dd44f145c195f729205d4f7340e22d0b96b31ddfabfc067d6cd335b7b975eff1b92d4b23d561b65712309951ded02adeec88c36d501c44d8a59396b53e570637d33d9568da8ab0541e62dbbeeb171e3fd47"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_tunnel_key={0x110, 0x4, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffeff}]}, {0xd8, 0x6, "5d7fecaacefb7857d6670e3579ce61ca2726ccd3c4623f65313cbd96587cfb7d1df988eaac36621830ace374e3f8c0779f30371d58b2bc0c6a773eca21177bd00c00a162e96b2171a1bae247fdb6d2d11f5cc70984a4954e2d75b78cf23fea6f0405d54e73073e6030878d16b6cfa305bab7d99de473d6c5856ae5820c17411f36bcc5a874cf8f3ea49199001bbf14c1831e952611971c0bed9eff5b401eeaac7670a0bb9a540e8c696a9d15fde3c2c1f0a8fe281e989afbdd83149d160762040575a051de1dd08a55cc7e29ffce461a12054768"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x9d0, 0xff, 0x0, 0x0, {{0xb}, {0x8e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4832}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x80000000, 0xc16, 0x1f, 0x3378e0bf, 0x3, 0x7fff, 0x771, 0x1, 0x7, 0x217, 0x4, 0x2, 0x9, 0x101, 0x1, 0xfffffffc, 0x9e0543, 0x2000, 0x20, 0x0, 0xa286, 0x1ff, 0x1, 0xffffff28, 0xd31, 0x100, 0x64, 0x800, 0x3, 0x0, 0x1, 0x200, 0x2, 0x0, 0x10001, 0x3db9, 0x2, 0x7, 0x80000001, 0x100, 0x3, 0x0, 0x80000000, 0x8, 0x5, 0x7, 0xffc00000, 0x8, 0x8, 0x9, 0xfffffffb, 0x7ff, 0x1, 0x7, 0xfff, 0x7fffffff, 0x9, 0x8b52, 0x3, 0x80000001, 0x1, 0x81, 0x4, 0x7a8, 0x61, 0x1, 0xecae, 0x7f, 0x1a, 0x8, 0x7f, 0x9, 0x5, 0xfffffffd, 0x35, 0x200, 0x2, 0x2, 0x10000, 0xf6, 0x5, 0x0, 0x8, 0x18, 0x5, 0x5, 0x7, 0x8, 0x7f, 0x2, 0x10001, 0x6, 0x4, 0x9, 0x20, 0xfffff35d, 0xea, 0xe7, 0x6, 0x5, 0x4, 0x1, 0x9, 0x8, 0x8, 0x0, 0x0, 0xfffffffd, 0x5, 0x10000, 0x1, 0x8001, 0x8, 0x7fff, 0x8, 0x6, 0x7, 0x5, 0x9, 0xfd, 0x8, 0x27, 0x400, 0x6, 0x9, 0xfffffff9, 0x55, 0x2b, 0xffffffff, 0x20, 0xec, 0x0, 0x7ff, 0x400, 0xffffffff, 0xa0, 0x2, 0x2, 0xb0, 0x100, 0x72, 0x2, 0xbca8, 0x9, 0xfff, 0x0, 0x5, 0x7, 0x10001, 0xffff06a0, 0x6, 0x4, 0x3, 0x80, 0x7, 0x6, 0xfffffffa, 0x400, 0x6, 0x274, 0x2ffc, 0x4, 0x4, 0x2, 0x2d7d, 0x953b, 0x4, 0x7, 0x20, 0x2, 0x3, 0x6, 0x0, 0x2, 0x401, 0x1e, 0x7fff, 0x3f, 0x80, 0x7fff, 0x2, 0x7c, 0x9, 0x3, 0x7, 0x200, 0x8, 0x0, 0x2, 0x1, 0xfff, 0x1, 0x7c68, 0x5, 0x10000, 0x5, 0x3, 0x0, 0x8, 0x8, 0x9, 0x1, 0x8, 0x3ffc000, 0x60c, 0x5, 0x8, 0x0, 0x0, 0x1, 0x8, 0x4, 0x78ee, 0x2, 0xa8, 0x2, 0xffff0000, 0x43, 0x80000000, 0x4, 0x1, 0x20, 0x0, 0xca400000, 0xc00, 0x10001, 0x1, 0x2, 0x4, 0x1ff, 0x5, 0x6, 0x2, 0x5afd, 0x6, 0x7fffffff, 0x6, 0x3, 0x3, 0x4, 0x5, 0x1, 0xfffffff9, 0x2, 0x2, 0x9, 0xff, 0x3ff, 0x2, 0xfffffff8, 0x6, 0x1, 0x20, 0x1, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x81, 0x3f, 0x96cf, 0x9, 0x2, 0x13, 0x200, 0x3f, 0x4, 0x3, 0x4, 0x6, 0x6, 0x7, 0x1, 0x9, 0x5, 0x10000, 0x44, 0x101, 0xdf, 0xffffffff, 0x6278, 0xfffffffd, 0x2a, 0x7, 0x6, 0x400, 0x2, 0x10000, 0x800, 0x2, 0xb61, 0x9, 0x8001, 0x2757, 0x6, 0x8001, 0xfffffffe, 0x6, 0x1, 0x7f, 0x1, 0x3, 0x8, 0x7, 0xfffffff7, 0x8, 0x7, 0x10001, 0x3f, 0x1, 0x7, 0x8, 0x9, 0x9, 0xfffff000, 0x5, 0x6, 0x4, 0xdaf, 0x1, 0x5, 0x5402f5f7, 0x8001, 0xfffffff7, 0x0, 0x80, 0x79383121, 0x3ff, 0x2, 0xff, 0x8000, 0x6, 0xa304, 0xfff, 0x80, 0x8, 0x76, 0x1fc00000, 0x19b, 0xfffffffe, 0x100, 0x8, 0x5e, 0x4, 0x7ff, 0x4, 0x40, 0x4, 0x6, 0x80, 0x200, 0x3, 0x1, 0x7723, 0x5, 0xfffffffb, 0x5, 0x0, 0x7f, 0x8, 0x81, 0x8, 0x706b, 0x3, 0x3, 0x10001, 0x7fff, 0x8, 0xfffffffd, 0x2, 0x0, 0x1, 0x8, 0x1000, 0xfffffff7, 0x80000001, 0x200, 0x6, 0x8000, 0x6, 0x10000, 0x5aa7, 0x9, 0x3, 0x4, 0x5d, 0xffffffff, 0x2, 0x7, 0x82e, 0x1, 0x7fffffff, 0x7ff, 0x1, 0x400, 0x401, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x80, 0xffff0d5b, 0x35a, 0xd1, 0x80000001, 0x7fffffff, 0x0, 0xf9e9, 0x5, 0xfffffffb, 0x7, 0x7, 0x9, 0x401, 0x8, 0xea6, 0x2, 0x0, 0x3ff, 0x0, 0x3f, 0x7fff, 0xffffff81, 0x10000, 0x6, 0x0, 0xfa6d, 0x2, 0x9, 0x49, 0x0, 0x100, 0x8, 0x4, 0x0, 0x870, 0x7, 0xb7, 0xe22, 0x8, 0xa7c, 0x10000, 0x5, 0x5, 0x401, 0x401, 0x81, 0x7, 0x7, 0x1, 0x7ff, 0x4, 0x9, 0x1f, 0x9, 0x4, 0x8, 0x3f, 0x101, 0x1, 0x10000, 0xf0b, 0x10001, 0xa1, 0x80, 0x8000, 0x215, 0x0, 0x7fff, 0x8000, 0xffffffe7, 0x8, 0x4, 0x11, 0x1000, 0x3, 0x4, 0x7f, 0x6, 0x0, 0xd0, 0x1c0000, 0x8000, 0x8, 0x10001, 0x66b877be, 0x101, 0x5b92b94a, 0x0, 0x7000000, 0x7, 0x7, 0x2bc9, 0xabc9, 0x200, 0x80000000, 0x2, 0x9, 0x400, 0x1, 0x9b3, 0x3, 0x2, 0xffffffff, 0x9, 0x1, 0x800, 0x7, 0x9, 0x2, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0xba2, 0x1, 0x1, 0xfffffffb, 0x5e2600, {0x2, 0x5fc23566d51acc8a, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x0, 0x4, 0x6, 0x9, 0x6}, 0x100, 0xff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]]}, {0xbf, 0x6, "2d88f762b4dd888a1cfd2f00f76a8cc2f15eb3eda8716f261031da957f67f8a68f99f8bc90288b824e611639e86ce136db8c84777d23ec5627b6c559d2b9e69b05cd3f275ee0951f2e27dc5423ab08eb21fb59ce668b974865b47dd850c5f9505bec32a6312e063a4c315f3a703eba66ddab6d67e954a9a0895b4e7dfb7ad8a9f890ab37f5242b7b2be0da50b54d2ff35bf516c4d135ca52769dfe2092cdcacf728b71f87d030083241daeed8b5c91889b5408d74c3b23e7ccee37"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x60, 0x5, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0xc8, 0x8, 0x16, 0x8}, {0x4, 0x9, 0x6, 0xfffffc01}, {0x8, 0x0, 0x40, 0x1}, {0x7, 0x4, 0x3, 0x1}, {0x6, 0xfb, 0x1, 0x6db}, {0x40, 0x1, 0x5, 0x9}]}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x94, 0x1b, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x6, 0x6, "2602"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xd4, 0x12, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x98, 0x6, "36a920caee0987e1b7c462c4ac9c4dbe59ab484d75717e638b6079f8d914fa9e0e1d009b429feee276b988f8ef9aa8d5e8e9bcd7d2677732816f18809ecd40a5e4d9ce4cd18ed6d53d01eb83558aa099982def5407288a273237a68a1f18fc47192aaa6c943c1de2b18b35cb4209fa0e7611a02ddbc6b169dd27a0f55fbe68bda3d6ab970e48f60ea5bf73f2e6ff66e7b9b4557e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1494}, 0x1, 0x0, 0x0, 0x20000811}, 0x11) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x28, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7328, 0x1c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x40000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@RTM_NEWMDB={0x98, 0x54, 0x2, 0x70bd27, 0x25dfdbfc, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0xfffe, {@in6_addr=@mcast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x2, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x37}, 0x436e}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x5) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001880)=[@text64={0x40, &(0x7f0000001800)="400f01c8c4418dec61a80fab11c481b81500c482791db800000000660f3881a6a6bfa6f5a00200000000000000666526f011a0b10000000fc7a90000c0fe440fc739", 0x42}], 0x1, 0x20, &(0x7f00000018c0), 0x0) 14:53:06 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x2, 0x0, [{0x2, 0x0, 0x808d}, {0xee, 0x0, 0xffffffffffffffff}]}) 14:53:06 executing program 1: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "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"}) socket(0x29, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001280)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/4096) 14:53:06 executing program 4: r0 = socket(0x1, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x40448c1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="84020000", @ANYRES16=r3, @ANYBLOB="c473621cc0269d4e1fbd7000fc000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 14:53:06 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x9) 14:53:06 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000040)={0x3, 0x511}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000040)={0x3, 0x511}) (async) 14:53:06 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x2, 0x0, [{0x2, 0x0, 0x808d}, {0xee, 0x0, 0xffffffffffffffff}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x2, 0x0, [{0x2, 0x0, 0x808d}, {0xee, 0x0, 0xffffffffffffffff}]}) (async) 14:53:06 executing program 1: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "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"}) socket(0x29, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001280)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/4096) 14:53:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001780)={&(0x7f00000002c0)=@newtaction={0x1494, 0x30, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{0x4b4, 0x1, [@m_xt={0x208, 0x20, 0x0, 0x0, {{0x7}, {0xe8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x98a}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x9f, 0x6, {0x200, 'nat\x00', 0x5, 0x81, "04ee88a2bb72555c099163be27b7bf1f488c84f77e5d8f9ac7ee67e0d764ca479f47b98e92ee2edf151bba2d123941018fa7dd7085060cde0a721b172b4971789fd0be3d761a7a258372b342d503f9ccc21d7a016142072c1f9859636cfe5260b4757e12e30c2e06bc70bf8026a39f4c0aaac10b7a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xf9, 0x6, "83c307a157feb02438277b868a9af438d2e8a1d82e3b7333a4bb58e2666a10530730c495d10a8e5f0dfb54a0783a32cfddae3cc46f19ad2e09084caba95fc42888ee4be443f1b43c5b0abfbe8ea779d331a464fa0281ba509b38c0ade4b0d3272f87ca140b435efe46cfd022811549cbc786426fd1bda54c9b6bddb8d22c323fb887e1fd76c0085b8278fd66f22bb5aadb7bc6fa00851daff8f64fd1c334a995d65737839bfdc27394c05a7e542a7411d72746d234a698c72a29c4eeca18e06e63728ea9c11e9f0ab9f09586dee60af509bc2b63a75637c43cfb4d7c2a7e10afe36050c9ffe5ec4aa09e9fb0e305df39053c42c726"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xb4, 0x12, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x8, 0xffffffffefffffff, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x101, 0x5, 0x5, 0x80000001}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0xa3e, 0x1, 0xff, 0x8001}}]}, {0x1e, 0x6, "898f2a36339f3970ed89c9744ccb2dd2660be91dfb1f3a2bdf2a"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x114, 0x13, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2100, 0xffffffffffffffff, 0xc39, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x2, 0x0, 0x7, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xffffffff, 0x4, 0xffffe9c8, 0x20}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xfff, 0x20000000, 0x4a51, 0x3}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x15, 0x7, 0xffffffffffffffff, 0x83, 0xae55}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x0, 0x0, 0x6}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3f, 0x7, 0x20000000, 0x6, 0x1}, 0x50}}]}, {0x1e, 0x6, "401c1e3d94f4e5234c6d5f9c2275f9ea7c6b889567d2312b0c26"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xe0, 0x4, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}]}, {0x61, 0x6, "fe07c8c3f3b948b97379e356869306e4295bde18d6f0f1ab63d2d1a0bc7ddfd457b65f013ebf83d2df2c64b63bcb54e0522c0443d3784277c72bd6847f3cb7996dee1f98d74e9d5bfdf2d8383008deac1e8fea948d19226602dd8cee22"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0xa8, 0x1, [@m_pedit={0xa4, 0x1c, 0x0, 0x0, {{0xa}, {0x6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x10, 0x6, "de18e8334dd532a69b8ce04c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x46e950a7270e3e76, 0x2}}}}]}, {0xf24, 0x1, [@m_ct={0x134, 0x1e, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0xe8, 0x6, "b962da6707cf3e698a763eb5298979b3400c853be48220a4535c2dc1e0667cd15478490c16089c49dacc6ad06190f1a09a33fb5523f24e448e480ea7e8be322c04c21868db067e1541c12df558d91e822f2ccc0e1615fd82fee273fdc3c78217e2ea55d2bbf4ee20b3544bccd4eced836c593db4f9299fa60da2bca10bb567546bc6b6163f813a80a703a11fbb75f14aaca71847139f90723c305ae004acf4560c0104c85886f4ff20d04fdaef0f2f4cf795966eaffee2ada4b7f0b040c16d6dea25672320005359ad5161cb96ffbe0cd20b2aa803c7cf47054d96257c670cde7ba110df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x144, 0x5, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x100, 0x8, 0x9, 0x40}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16eb, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1de7, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x20, 0x9, 0x8, 0x7, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x9, 0x7, 0xfffffffd, 0x7ff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1ef8, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x7, 0x2, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x6, 0x2, 0x5, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x20000000, 0x6, 0x6}}]}, {0x61, 0x6, "49af0599e68ac2f464a6788dd44f145c195f729205d4f7340e22d0b96b31ddfabfc067d6cd335b7b975eff1b92d4b23d561b65712309951ded02adeec88c36d501c44d8a59396b53e570637d33d9568da8ab0541e62dbbeeb171e3fd47"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_tunnel_key={0x110, 0x4, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffeff}]}, {0xd8, 0x6, "5d7fecaacefb7857d6670e3579ce61ca2726ccd3c4623f65313cbd96587cfb7d1df988eaac36621830ace374e3f8c0779f30371d58b2bc0c6a773eca21177bd00c00a162e96b2171a1bae247fdb6d2d11f5cc70984a4954e2d75b78cf23fea6f0405d54e73073e6030878d16b6cfa305bab7d99de473d6c5856ae5820c17411f36bcc5a874cf8f3ea49199001bbf14c1831e952611971c0bed9eff5b401eeaac7670a0bb9a540e8c696a9d15fde3c2c1f0a8fe281e989afbdd83149d160762040575a051de1dd08a55cc7e29ffce461a12054768"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x9d0, 0xff, 0x0, 0x0, {{0xb}, {0x8e8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4832}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x80000000, 0xc16, 0x1f, 0x3378e0bf, 0x3, 0x7fff, 0x771, 0x1, 0x7, 0x217, 0x4, 0x2, 0x9, 0x101, 0x1, 0xfffffffc, 0x9e0543, 0x2000, 0x20, 0x0, 0xa286, 0x1ff, 0x1, 0xffffff28, 0xd31, 0x100, 0x64, 0x800, 0x3, 0x0, 0x1, 0x200, 0x2, 0x0, 0x10001, 0x3db9, 0x2, 0x7, 0x80000001, 0x100, 0x3, 0x0, 0x80000000, 0x8, 0x5, 0x7, 0xffc00000, 0x8, 0x8, 0x9, 0xfffffffb, 0x7ff, 0x1, 0x7, 0xfff, 0x7fffffff, 0x9, 0x8b52, 0x3, 0x80000001, 0x1, 0x81, 0x4, 0x7a8, 0x61, 0x1, 0xecae, 0x7f, 0x1a, 0x8, 0x7f, 0x9, 0x5, 0xfffffffd, 0x35, 0x200, 0x2, 0x2, 0x10000, 0xf6, 0x5, 0x0, 0x8, 0x18, 0x5, 0x5, 0x7, 0x8, 0x7f, 0x2, 0x10001, 0x6, 0x4, 0x9, 0x20, 0xfffff35d, 0xea, 0xe7, 0x6, 0x5, 0x4, 0x1, 0x9, 0x8, 0x8, 0x0, 0x0, 0xfffffffd, 0x5, 0x10000, 0x1, 0x8001, 0x8, 0x7fff, 0x8, 0x6, 0x7, 0x5, 0x9, 0xfd, 0x8, 0x27, 0x400, 0x6, 0x9, 0xfffffff9, 0x55, 0x2b, 0xffffffff, 0x20, 0xec, 0x0, 0x7ff, 0x400, 0xffffffff, 0xa0, 0x2, 0x2, 0xb0, 0x100, 0x72, 0x2, 0xbca8, 0x9, 0xfff, 0x0, 0x5, 0x7, 0x10001, 0xffff06a0, 0x6, 0x4, 0x3, 0x80, 0x7, 0x6, 0xfffffffa, 0x400, 0x6, 0x274, 0x2ffc, 0x4, 0x4, 0x2, 0x2d7d, 0x953b, 0x4, 0x7, 0x20, 0x2, 0x3, 0x6, 0x0, 0x2, 0x401, 0x1e, 0x7fff, 0x3f, 0x80, 0x7fff, 0x2, 0x7c, 0x9, 0x3, 0x7, 0x200, 0x8, 0x0, 0x2, 0x1, 0xfff, 0x1, 0x7c68, 0x5, 0x10000, 0x5, 0x3, 0x0, 0x8, 0x8, 0x9, 0x1, 0x8, 0x3ffc000, 0x60c, 0x5, 0x8, 0x0, 0x0, 0x1, 0x8, 0x4, 0x78ee, 0x2, 0xa8, 0x2, 0xffff0000, 0x43, 0x80000000, 0x4, 0x1, 0x20, 0x0, 0xca400000, 0xc00, 0x10001, 0x1, 0x2, 0x4, 0x1ff, 0x5, 0x6, 0x2, 0x5afd, 0x6, 0x7fffffff, 0x6, 0x3, 0x3, 0x4, 0x5, 0x1, 0xfffffff9, 0x2, 0x2, 0x9, 0xff, 0x3ff, 0x2, 0xfffffff8, 0x6, 0x1, 0x20, 0x1, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x81, 0x3f, 0x96cf, 0x9, 0x2, 0x13, 0x200, 0x3f, 0x4, 0x3, 0x4, 0x6, 0x6, 0x7, 0x1, 0x9, 0x5, 0x10000, 0x44, 0x101, 0xdf, 0xffffffff, 0x6278, 0xfffffffd, 0x2a, 0x7, 0x6, 0x400, 0x2, 0x10000, 0x800, 0x2, 0xb61, 0x9, 0x8001, 0x2757, 0x6, 0x8001, 0xfffffffe, 0x6, 0x1, 0x7f, 0x1, 0x3, 0x8, 0x7, 0xfffffff7, 0x8, 0x7, 0x10001, 0x3f, 0x1, 0x7, 0x8, 0x9, 0x9, 0xfffff000, 0x5, 0x6, 0x4, 0xdaf, 0x1, 0x5, 0x5402f5f7, 0x8001, 0xfffffff7, 0x0, 0x80, 0x79383121, 0x3ff, 0x2, 0xff, 0x8000, 0x6, 0xa304, 0xfff, 0x80, 0x8, 0x76, 0x1fc00000, 0x19b, 0xfffffffe, 0x100, 0x8, 0x5e, 0x4, 0x7ff, 0x4, 0x40, 0x4, 0x6, 0x80, 0x200, 0x3, 0x1, 0x7723, 0x5, 0xfffffffb, 0x5, 0x0, 0x7f, 0x8, 0x81, 0x8, 0x706b, 0x3, 0x3, 0x10001, 0x7fff, 0x8, 0xfffffffd, 0x2, 0x0, 0x1, 0x8, 0x1000, 0xfffffff7, 0x80000001, 0x200, 0x6, 0x8000, 0x6, 0x10000, 0x5aa7, 0x9, 0x3, 0x4, 0x5d, 0xffffffff, 0x2, 0x7, 0x82e, 0x1, 0x7fffffff, 0x7ff, 0x1, 0x400, 0x401, 0x7f, 0x0, 0x0, 0x200, 0x0, 0x80, 0xffff0d5b, 0x35a, 0xd1, 0x80000001, 0x7fffffff, 0x0, 0xf9e9, 0x5, 0xfffffffb, 0x7, 0x7, 0x9, 0x401, 0x8, 0xea6, 0x2, 0x0, 0x3ff, 0x0, 0x3f, 0x7fff, 0xffffff81, 0x10000, 0x6, 0x0, 0xfa6d, 0x2, 0x9, 0x49, 0x0, 0x100, 0x8, 0x4, 0x0, 0x870, 0x7, 0xb7, 0xe22, 0x8, 0xa7c, 0x10000, 0x5, 0x5, 0x401, 0x401, 0x81, 0x7, 0x7, 0x1, 0x7ff, 0x4, 0x9, 0x1f, 0x9, 0x4, 0x8, 0x3f, 0x101, 0x1, 0x10000, 0xf0b, 0x10001, 0xa1, 0x80, 0x8000, 0x215, 0x0, 0x7fff, 0x8000, 0xffffffe7, 0x8, 0x4, 0x11, 0x1000, 0x3, 0x4, 0x7f, 0x6, 0x0, 0xd0, 0x1c0000, 0x8000, 0x8, 0x10001, 0x66b877be, 0x101, 0x5b92b94a, 0x0, 0x7000000, 0x7, 0x7, 0x2bc9, 0xabc9, 0x200, 0x80000000, 0x2, 0x9, 0x400, 0x1, 0x9b3, 0x3, 0x2, 0xffffffff, 0x9, 0x1, 0x800, 0x7, 0x9, 0x2, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0xba2, 0x1, 0x1, 0xfffffffb, 0x5e2600, {0x2, 0x5fc23566d51acc8a, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x0, 0x4, 0x6, 0x9, 0x6}, 0x100, 0xff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]]}, {0xbf, 0x6, "2d88f762b4dd888a1cfd2f00f76a8cc2f15eb3eda8716f261031da957f67f8a68f99f8bc90288b824e611639e86ce136db8c84777d23ec5627b6c559d2b9e69b05cd3f275ee0951f2e27dc5423ab08eb21fb59ce668b974865b47dd850c5f9505bec32a6312e063a4c315f3a703eba66ddab6d67e954a9a0895b4e7dfb7ad8a9f890ab37f5242b7b2be0da50b54d2ff35bf516c4d135ca52769dfe2092cdcacf728b71f87d030083241daeed8b5c91889b5408d74c3b23e7ccee37"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x60, 0x5, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0xc8, 0x8, 0x16, 0x8}, {0x4, 0x9, 0x6, 0xfffffc01}, {0x8, 0x0, 0x40, 0x1}, {0x7, 0x4, 0x3, 0x1}, {0x6, 0xfb, 0x1, 0x6db}, {0x40, 0x1, 0x5, 0x9}]}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x94, 0x1b, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x6, 0x6, "2602"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xd4, 0x12, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x98, 0x6, "36a920caee0987e1b7c462c4ac9c4dbe59ab484d75717e638b6079f8d914fa9e0e1d009b429feee276b988f8ef9aa8d5e8e9bcd7d2677732816f18809ecd40a5e4d9ce4cd18ed6d53d01eb83558aa099982def5407288a273237a68a1f18fc47192aaa6c943c1de2b18b35cb4209fa0e7611a02ddbc6b169dd27a0f55fbe68bda3d6ab970e48f60ea5bf73f2e6ff66e7b9b4557e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1494}, 0x1, 0x0, 0x0, 0x20000811}, 0x11) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x28, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7328, 0x1c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x40000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@RTM_NEWMDB={0x98, 0x54, 0x2, 0x70bd27, 0x25dfdbfc, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0xfffe, {@in6_addr=@mcast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x2, {@ip4=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x37}, 0x436e}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x5) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001880)=[@text64={0x40, &(0x7f0000001800)="400f01c8c4418dec61a80fab11c481b81500c482791db800000000660f3881a6a6bfa6f5a00200000000000000666526f011a0b10000000fc7a90000c0fe440fc739", 0x42}], 0x1, 0x20, &(0x7f00000018c0), 0x0) 14:53:06 executing program 4: r0 = socket(0x1, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x40448c1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="84020000", @ANYRES16=r3, @ANYBLOB="c473621cc0269d4e1fbd7000fc000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 14:53:06 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x9) 14:53:07 executing program 5: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0xff, 0x8, 0xa4, 0x6, 0x8001}) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) r2 = gettid() ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000580)={r2}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000140)={r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x29, 0x9, 0xf1a, 0x80, 0x10}}) write$apparmor_exec(r0, 0x0, 0xf) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 14:53:07 executing program 1: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "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"}) socket(0x29, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001280)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/4096) 14:53:07 executing program 4: r0 = socket(0x1, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x40448c1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="84020000", @ANYRES16=r3, @ANYBLOB="c473621cc0269d4e1fbd7000fc000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x8000}, 0x800) socket(0x1, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x40448c1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="84020000", @ANYRES16=r3, @ANYBLOB="c473621cc0269d4e1fbd7000fc000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) 14:53:07 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x2, 0x0, [{0x2, 0x0, 0x808d}, {0xee, 0x0, 0xffffffffffffffff}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x2, 0x0, [{0x2, 0x0, 0x808d}, {0xee, 0x0, 0xffffffffffffffff}]}) (async) 14:53:07 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="b8bb01648eed22962e", @ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="49f93618726dcec4297ec70492c1c4ebd77724c290f713433d24f53dce57fe604beb89335f53101d985d5ea80429b052ab2c8340d72ccf7716216a63ddf91e1c853e9afbc7e5b836cfe127248df11ac16afa43b0d278e12112c083f087c51db2f00fed460edebcb7b6c6a3c630f922da0ed9aa137a2a742bd653fc3e46f53af3959c177428a359b860b8964bfa8772b32424168d5628c39acea93c0dba0b20b2b7f34fb314be4a91a1001196dfa388a05ae4a1b006c3ef8484e068f4fde44d5558a9190d72fb111c46fd3d860cc8ecdd4e9cec46d81dfe1970ec2697bb0a43d010c92bb04918ce7054f626ef00299fa08e8472dca2", @ANYRES8=r0, @ANYRESHEX=r1], 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 14:53:07 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x9) 14:53:07 executing program 5: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0xff, 0x8, 0xa4, 0x6, 0x8001}) (async, rerun: 32) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) r2 = gettid() ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000580)={r2}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000140)={r2}) (async) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x29, 0x9, 0xf1a, 0x80, 0x10}}) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 14:53:07 executing program 1: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "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"}) socket(0x29, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001280)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 14:53:07 executing program 4: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) socket(0x1, 0x3, 0x0) 14:53:07 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="b8bb01648eed22962e", @ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="49f93618726dcec4297ec70492c1c4ebd77724c290f713433d24f53dce57fe604beb89335f53101d985d5ea80429b052ab2c8340d72ccf7716216a63ddf91e1c853e9afbc7e5b836cfe127248df11ac16afa43b0d278e12112c083f087c51db2f00fed460edebcb7b6c6a3c630f922da0ed9aa137a2a742bd653fc3e46f53af3959c177428a359b860b8964bfa8772b32424168d5628c39acea93c0dba0b20b2b7f34fb314be4a91a1001196dfa388a05ae4a1b006c3ef8484e068f4fde44d5558a9190d72fb111c46fd3d860cc8ecdd4e9cec46d81dfe1970ec2697bb0a43d010c92bb04918ce7054f626ef00299fa08e8472dca2", @ANYRES8=r0, @ANYRESHEX=r1], 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 14:53:07 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) 14:53:07 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x1) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000000c0)) 14:53:07 executing program 5: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0xff, 0x8, 0xa4, 0x6, 0x8001}) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) r2 = gettid() ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000580)={r2}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000140)={r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x29, 0x9, 0xf1a, 0x80, 0x10}}) write$apparmor_exec(r0, 0x0, 0xf) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0xff, 0x8, 0xa4, 0x6, 0x8001}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) (async) gettid() (async) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000580)={r2}) (async) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000140)={r2}) (async) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x29, 0x9, 0xf1a, 0x80, 0x10}}) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) 14:53:07 executing program 1: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "a5d6eb1877f9c8540b1dde4e8de097d0a198f8439eab44987ca2d334a66b57aa6d5fb8e9ec8cd77945687a4f7f10399679aa5a05fc0028bcd450e3a23312f9458c6c6fdf5754a0c55ff82cd7dbcaa0c2e8720ec2387923c54d1bb769d86a9bfd663d8f0d15ab65b983fd6059ff6d3484dfab393eea58873d639c19f68290b5b2c1e204d6980f6e9dcc7b5f368160dc379a8bf51d9025a38a52ac2b4aa3f136d16d735aeacccd5ccfbb969d581b45151462be252fcf6f78a4f8e5c872000235820c86bc774dc3490b2f3a70723d96376d703f923ec3892102bb4c0626e808c534b6e583d600eeec4fe43d5cb880899bc4f8f9868c1949d14391ff5a380d340450527f7c90dcb054b3242325469d5feebd16df4cda5c127b5ef5351095579f6db905466f93f2c82775ee7d09c52ba33f5e75602f119f28015a69fa43a4e717c3f596f08d9c50c34e8e06a72fad71322f562e7575f31a3ae39f9d12ef2eeee1a1698a1f876bb663d4533f511cf88950d938a73506bad698d2092ce48f8f7c491fe51ec32fe2cdd7979b3fb3b3b319c1d8f80efde3857a960bf8bc09a7eef55e8d45e8ca135fe80dc909a8ff4888aa01e3948c22d6d985cd32f2d8a34e755cfb67e7b1a22bdb212f1bccdb15f0bee4fae5afe0d25b2a0f3ab5eb5462e2ef3ed07f7c79571cea32fcc93524f75724871ed80da585838dfc2cfbba0a3ea492587ed791"}) socket(0x29, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001280)) 14:53:07 executing program 4: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) socket(0x1, 0x3, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async) socket(0x1, 0x3, 0x0) (async) 14:53:07 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x1) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000000c0)) 14:53:07 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="b8bb01648eed22962e", @ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="49f93618726dcec4297ec70492c1c4ebd77724c290f713433d24f53dce57fe604beb89335f53101d985d5ea80429b052ab2c8340d72ccf7716216a63ddf91e1c853e9afbc7e5b836cfe127248df11ac16afa43b0d278e12112c083f087c51db2f00fed460edebcb7b6c6a3c630f922da0ed9aa137a2a742bd653fc3e46f53af3959c177428a359b860b8964bfa8772b32424168d5628c39acea93c0dba0b20b2b7f34fb314be4a91a1001196dfa388a05ae4a1b006c3ef8484e068f4fde44d5558a9190d72fb111c46fd3d860cc8ecdd4e9cec46d81dfe1970ec2697bb0a43d010c92bb04918ce7054f626ef00299fa08e8472dca2", @ANYRES8=r0, @ANYRESHEX=r1], 0xf) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 14:53:07 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) 14:53:07 executing program 1: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "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"}) socket(0x29, 0x2, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) 14:53:07 executing program 4: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) socket(0x1, 0x3, 0x0) (async) socket(0x1, 0x3, 0x0) 14:53:07 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) 14:53:07 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x78, r2, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fc6c4b99dd"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "1ff30d33"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000040)={0x2, 0x6}) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000240)={0x2b15e92b, 0x5, 0xfff}) 14:53:07 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x1) (async) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x1) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000000c0)) 14:53:07 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) 14:53:07 executing program 1: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "a5d6eb1877f9c8540b1dde4e8de097d0a198f8439eab44987ca2d334a66b57aa6d5fb8e9ec8cd77945687a4f7f10399679aa5a05fc0028bcd450e3a23312f9458c6c6fdf5754a0c55ff82cd7dbcaa0c2e8720ec2387923c54d1bb769d86a9bfd663d8f0d15ab65b983fd6059ff6d3484dfab393eea58873d639c19f68290b5b2c1e204d6980f6e9dcc7b5f368160dc379a8bf51d9025a38a52ac2b4aa3f136d16d735aeacccd5ccfbb969d581b45151462be252fcf6f78a4f8e5c872000235820c86bc774dc3490b2f3a70723d96376d703f923ec3892102bb4c0626e808c534b6e583d600eeec4fe43d5cb880899bc4f8f9868c1949d14391ff5a380d340450527f7c90dcb054b3242325469d5feebd16df4cda5c127b5ef5351095579f6db905466f93f2c82775ee7d09c52ba33f5e75602f119f28015a69fa43a4e717c3f596f08d9c50c34e8e06a72fad71322f562e7575f31a3ae39f9d12ef2eeee1a1698a1f876bb663d4533f511cf88950d938a73506bad698d2092ce48f8f7c491fe51ec32fe2cdd7979b3fb3b3b319c1d8f80efde3857a960bf8bc09a7eef55e8d45e8ca135fe80dc909a8ff4888aa01e3948c22d6d985cd32f2d8a34e755cfb67e7b1a22bdb212f1bccdb15f0bee4fae5afe0d25b2a0f3ab5eb5462e2ef3ed07f7c79571cea32fcc93524f75724871ed80da585838dfc2cfbba0a3ea492587ed791"}) socket(0x29, 0x2, 0x0) 14:53:07 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) 14:53:07 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', ':.-\x00'}, 0x9) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)={'exec ', '\x1d\x00\x02\x00'}, 0x42) 14:53:07 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) 14:53:07 executing program 1: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket(0x29, 0x2, 0x0) 14:53:07 executing program 4: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket(0x1e, 0x800, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r2, @ANYBLOB="20022abd7000fbdbdf254900000048000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200029bd7000ffdbdf25360000000c0099008c0e000021000000ce59d24721426b2c4bd8e92450c86f08c5a440efa81b9c5b05f7caedf36c2abadc168cf6654f9fae2f550c25f8d679719e3e909c645ebe7759dbf2589567fa48ebae94cae5"], 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x40094) 14:53:07 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x78, r2, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fc6c4b99dd"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "1ff30d33"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000040)={0x2, 0x6}) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000240)={0x2b15e92b, 0x5, 0xfff}) 14:53:07 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', ':.-\x00'}, 0x9) (async) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', ':.-\x00'}, 0x9) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)={'exec ', '\x1d\x00\x02\x00'}, 0x42) 14:53:07 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) 14:53:07 executing program 1: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) socket(0x29, 0x2, 0x0) 14:53:07 executing program 4: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket(0x1e, 0x800, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r2, @ANYBLOB="20022abd7000fbdbdf254900000048000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200029bd7000ffdbdf25360000000c0099008c0e000021000000ce59d24721426b2c4bd8e92450c86f08c5a440efa81b9c5b05f7caedf36c2abadc168cf6654f9fae2f550c25f8d679719e3e909c645ebe7759dbf2589567fa48ebae94cae5"], 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x40094) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async) socket(0x1e, 0x800, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r2, @ANYBLOB="20022abd7000fbdbdf254900000048000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200029bd7000ffdbdf25360000000c0099008c0e000021000000ce59d24721426b2c4bd8e92450c86f08c5a440efa81b9c5b05f7caedf36c2abadc168cf6654f9fae2f550c25f8d679719e3e909c645ebe7759dbf2589567fa48ebae94cae5"], 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x40094) (async) 14:53:07 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) 14:53:07 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x78, r2, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fc6c4b99dd"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "1ff30d33"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000040)={0x2, 0x6}) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000240)={0x2b15e92b, 0x5, 0xfff}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x78, r2, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fc6c4b99dd"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "1ff30d33"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) (async) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000040)={0x2, 0x6}) (async) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000240)={0x2b15e92b, 0x5, 0xfff}) (async) 14:53:07 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'exec ', ':.-\x00'}, 0x9) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)={'exec ', '\x1d\x00\x02\x00'}, 0x42) 14:53:07 executing program 1: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x29, 0x2, 0x0) 14:53:07 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:07 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) 14:53:07 executing program 4: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) socket(0x1e, 0x800, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r2, @ANYBLOB="20022abd7000fbdbdf254900000048000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200029bd7000ffdbdf25360000000c0099008c0e000021000000ce59d24721426b2c4bd8e92450c86f08c5a440efa81b9c5b05f7caedf36c2abadc168cf6654f9fae2f550c25f8d679719e3e909c645ebe7759dbf2589567fa48ebae94cae5"], 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x40094) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async) socket(0x1e, 0x800, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r2, @ANYBLOB="20022abd7000fbdbdf254900000048000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200029bd7000ffdbdf25360000000c0099008c0e000021000000ce59d24721426b2c4bd8e92450c86f08c5a440efa81b9c5b05f7caedf36c2abadc168cf6654f9fae2f550c25f8d679719e3e909c645ebe7759dbf2589567fa48ebae94cae5"], 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x40094) (async) 14:53:07 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="657865632001000080"], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) 14:53:07 executing program 1: socket(0x29, 0x2, 0x0) 14:53:07 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x7}}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x62, 0x2) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="650fecb3000066b80500000066b9cec100000f01c1363e0f01c2baf80c66b88be0198266efbafc0cb009ee660fd94ddd0f01d10f20c06635040000000f22c00f01cfa80f26660f72d0f3", 0x4a}], 0x1, 0x9, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x14, 0x0, 0x1, 0x0, 0x3, 0x0, 0xcc}], 0x1) 14:53:08 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) 14:53:08 executing program 1: socket(0x0, 0x2, 0x0) 14:53:08 executing program 4: socket(0x1, 0x8080c, 0x0) 14:53:08 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:08 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="657865632001000080"], 0x9) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) (async) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) 14:53:08 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x7}}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x62, 0x2) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="650fecb3000066b80500000066b9cec100000f01c1363e0f01c2baf80c66b88be0198266efbafc0cb009ee660fd94ddd0f01d10f20c06635040000000f22c00f01cfa80f26660f72d0f3", 0x4a}], 0x1, 0x9, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x14, 0x0, 0x1, 0x0, 0x3, 0x0, 0xcc}], 0x1) 14:53:08 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) 14:53:08 executing program 1: socket(0x0, 0x2, 0x0) 14:53:08 executing program 4: socket(0x1, 0x8080c, 0x0) 14:53:08 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) 14:53:08 executing program 4: socket(0x1, 0x8080c, 0x0) 14:53:08 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x7}}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x62, 0x2) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="650fecb3000066b80500000066b9cec100000f01c1363e0f01c2baf80c66b88be0198266efbafc0cb009ee660fd94ddd0f01d10f20c06635040000000f22c00f01cfa80f26660f72d0f3", 0x4a}], 0x1, 0x9, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x14, 0x0, 0x1, 0x0, 0x3, 0x0, 0xcc}], 0x1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x7, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x7}}) (async) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x62, 0x2) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="650fecb3000066b80500000066b9cec100000f01c1363e0f01c2baf80c66b88be0198266efbafc0cb009ee660fd94ddd0f01d10f20c06635040000000f22c00f01cfa80f26660f72d0f3", 0x4a}], 0x1, 0x9, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x14, 0x0, 0x1, 0x0, 0x3, 0x0, 0xcc}], 0x1) (async) 14:53:08 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) 14:53:08 executing program 4: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r0 = socket(0x1, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x210803, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) 14:53:08 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="657865632001000080"], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="657865632001000080"], 0x9) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) (async) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {}, {}]}) (async) 14:53:08 executing program 1: socket(0x0, 0x2, 0x0) 14:53:08 executing program 1: socket(0x29, 0x0, 0x0) 14:53:08 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3d87, 0x5f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000080)={0x12, 0x1, 0xa9}) 14:53:08 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) 14:53:08 executing program 4: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async) r0 = socket(0x1, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x210803, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) [ 983.421185] kauditd_printk_skb: 80 callbacks suppressed [ 983.421198] audit: type=1400 audit(1676818388.336:1410): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=01 pid=18427 comm="syz-executor.0" 14:53:08 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:08 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x83, &(0x7f0000000240)=""/131, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xb, 0x3, 0x7f}, 0x10, 0xffffffffffffffff, r2}, 0x80) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000100)=0x7fff) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9ac14000506569ed290e30061b5dd02067a2"], 0x9) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) 14:53:08 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3d87, 0x5f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) write$apparmor_exec(r0, 0x0, 0xf) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000080)={0x12, 0x1, 0xa9}) 14:53:08 executing program 1: socket(0x29, 0x0, 0x0) 14:53:08 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) 14:53:08 executing program 4: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r0 = socket(0x1, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x210803, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async) socket(0x1, 0x3, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x210803, 0x0) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) (async) 14:53:08 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) [ 983.558714] audit: type=1400 audit(1676818388.476:1411): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18444 comm="syz-executor.2" 14:53:08 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3d87, 0x5f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000080)={0x12, 0x1, 0xa9}) 14:53:08 executing program 1: socket(0x29, 0x0, 0x0) 14:53:08 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x83, &(0x7f0000000240)=""/131, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xb, 0x3, 0x7f}, 0x10, 0xffffffffffffffff, r2}, 0x80) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000100)=0x7fff) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9ac14000506569ed290e30061b5dd02067a2"], 0x9) (async) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) 14:53:08 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) 14:53:08 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000000)={0xa500000000000000, 0x14000, 0xcfdd, 0xe, 0xc}) socket(0x1, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000100)={0x2, 0x0, [{}, {}]}) ioctl$TIOCNXCL(r1, 0x540d) 14:53:08 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) 14:53:08 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:08 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:08 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000000)={0xa500000000000000, 0x14000, 0xcfdd, 0xe, 0xc}) socket(0x1, 0x3, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000100)={0x2, 0x0, [{}, {}]}) ioctl$TIOCNXCL(r1, 0x540d) 14:53:08 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) 14:53:08 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x83, &(0x7f0000000240)=""/131, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xb, 0x3, 0x7f}, 0x10, 0xffffffffffffffff, r2}, 0x80) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000100)=0x7fff) (async) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000100)=0x7fff) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9ac14000506569ed290e30061b5dd02067a2"], 0x9) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9ac14000506569ed290e30061b5dd02067a2"], 0x9) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) 14:53:08 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:08 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) [ 983.757202] audit: type=1400 audit(1676818388.676:1412): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18483 comm="syz-executor.1" 14:53:08 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:08 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) 14:53:08 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000000)={0xa500000000000000, 0x14000, 0xcfdd, 0xe, 0xc}) socket(0x1, 0x3, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000100)={0x2, 0x0, [{}, {}]}) (async) ioctl$TIOCNXCL(r1, 0x540d) 14:53:08 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:08 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:08 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) [ 983.849399] audit: type=1400 audit(1676818388.766:1413): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18500 comm="syz-executor.1" 14:53:08 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:08 executing program 1: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:08 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) 14:53:08 executing program 4: r0 = socket(0x1, 0x80000, 0x0) r1 = socket(0xd, 0x800, 0x7) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1, 0x9}) 14:53:08 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) [ 983.936558] audit: type=1400 audit(1676818388.826:1414): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18513 comm="syz-executor.1" 14:53:08 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:08 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) 14:53:08 executing program 1: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:08 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:08 executing program 4: r0 = socket(0x1, 0x80000, 0x0) (async) r1 = socket(0xd, 0x800, 0x7) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1, 0x9}) [ 984.013823] audit: type=1400 audit(1676818388.846:1415): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18507 comm="syz-executor.2" 14:53:09 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) 14:53:09 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfff) 14:53:09 executing program 1: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:09 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:09 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) 14:53:09 executing program 4: r0 = socket(0x1, 0x80000, 0x0) r1 = socket(0xd, 0x800, 0x7) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1, 0x9}) socket(0x1, 0x80000, 0x0) (async) socket(0xd, 0x800, 0x7) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1, 0x9}) (async) [ 984.115227] audit: type=1400 audit(1676818388.876:1416): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=18519 comm="syz-executor.0" 14:53:09 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) 14:53:09 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:09 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfff) 14:53:09 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000080)) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a2d574123ab4bb25bde430a27732662154514ac81f4f1e486700e8e668aae39f2b062240606ec853a13d0de621c65dfb4abeef42110d7ea54272a5fe23097cb381b5ef239c660811bcdead6dc9dd0f123c08d1988e118f6281d3f566bb3df00709a9b00c03a2e5638e349ae3ce21a37f1a6a9fc004603b59"], 0x9) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x3, 0x4) 14:53:09 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) write$apparmor_exec(r0, 0x0, 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) 14:53:09 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:09 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000080)) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a2d574123ab4bb25bde430a27732662154514ac81f4f1e486700e8e668aae39f2b062240606ec853a13d0de621c65dfb4abeef42110d7ea54272a5fe23097cb381b5ef239c660811bcdead6dc9dd0f123c08d1988e118f6281d3f566bb3df00709a9b00c03a2e5638e349ae3ce21a37f1a6a9fc004603b59"], 0x9) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x3, 0x4) 14:53:09 executing program 2: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "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"}) socket(0x29, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001280)) [ 984.237800] audit: type=1400 audit(1676818388.876:1417): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=18519 comm="syz-executor.0" 14:53:09 executing program 5: write$apparmor_exec(0xffffffffffffffff, 0x0, 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) 14:53:09 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfff) 14:53:09 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:09 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x30, 0x54}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x3, 0x1) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x2) socket(0x3, 0x4, 0x1) 14:53:09 executing program 2: r0 = socket(0x1, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x40448c1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="84020000", @ANYRES16=r3, @ANYBLOB="c473621cc0269d4e1fbd7000fc000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x8000}, 0x800) [ 984.337230] audit: type=1400 audit(1676818388.966:1418): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=18535 comm="syz-executor.0" 14:53:09 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000080)) (async) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a2d574123ab4bb25bde430a27732662154514ac81f4f1e486700e8e668aae39f2b062240606ec853a13d0de621c65dfb4abeef42110d7ea54272a5fe23097cb381b5ef239c660811bcdead6dc9dd0f123c08d1988e118f6281d3f566bb3df00709a9b00c03a2e5638e349ae3ce21a37f1a6a9fc004603b59"], 0x9) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x3, 0x4) 14:53:09 executing program 5: write$apparmor_exec(0xffffffffffffffff, 0x0, 0xf) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) 14:53:09 executing program 2: write$apparmor_exec(0xffffffffffffffff, 0x0, 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) 14:53:09 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x30, 0x54}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x3, 0x1) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x2) (async, rerun: 64) socket(0x3, 0x4, 0x1) (rerun: 64) 14:53:09 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:09 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:09 executing program 5: write$apparmor_exec(0xffffffffffffffff, 0x0, 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) write$apparmor_exec(0xffffffffffffffff, 0x0, 0xf) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) (async) [ 984.434468] audit: type=1400 audit(1676818389.066:1419): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=18551 comm="syz-executor.0" 14:53:09 executing program 2: syz_open_pts(0xffffffffffffffff, 0x200101) socket(0x1, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001040)={0x8, "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"}) socket(0x29, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001280)) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/4096) 14:53:09 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)={0x5, 0x100}) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x3ff) 14:53:09 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x30, 0x54}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x3, 0x1) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x2) socket(0x3, 0x4, 0x1) 14:53:09 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:09 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:09 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.'], 0x9) 14:53:09 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x34) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :.-\x00'], 0x9) 14:53:09 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:09 executing program 4: socket(0x1, 0x3, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:53:09 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:09 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)={0x5, 0x100}) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x3ff) 14:53:09 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x9) 14:53:09 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:53:09 executing program 4: socket(0x1, 0x3, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) (async) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:53:09 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000005200207daab1de20bf844a782ffa6e0525bd7000fddbdf250a0800050030000000080005004000000008000500069a00"], 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x4880) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:09 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:09 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x9) 14:53:09 executing program 4: socket(0x1, 0x3, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:53:09 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)={0x5, 0x100}) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x3ff) 14:53:09 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000100)) ioctl$TIOCNXCL(r2, 0x540d) 14:53:09 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000005200207daab1de20bf844a782ffa6e0525bd7000fddbdf250a0800050030000000080005004000000008000500069a00"], 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x4880) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:09 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:09 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x9) 14:53:09 executing program 4: socket(0x1, 0x3, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000000)) 14:53:09 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="450f07450fc730c4e289be0f66ba2100ed652e0fa1456db8010000000f01c1c402fd1e7a0066baf80cb8e013f48bef66bafc0ced6666460f38de9cc0ef000000", 0x40}], 0x1, 0x45, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x10, 0x0, 0x3, 0x0, 0x1, 0x0, 0x28bc41d1}], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 14:53:09 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDMKTONE(r1, 0x4b30, 0x80000000) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000100)) ioctl$TIOCNXCL(r2, 0x540d) 14:53:09 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) 14:53:09 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000005200207daab1de20bf844a782ffa6e0525bd7000fddbdf250a0800050030000000080005004000000008000500069a00"], 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x4880) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:09 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) 14:53:09 executing program 4: socket(0x1, 0x3, 0x0) (async) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000000)) 14:53:09 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = syz_open_dev$media(&(0x7f0000000080), 0x200, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)) socket(0x8, 0x0, 0xe5) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000040)) 14:53:09 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="450f07450fc730c4e289be0f66ba2100ed652e0fa1456db8010000000f01c1c402fd1e7a0066baf80cb8e013f48bef66bafc0ced6666460f38de9cc0ef000000", 0x40}], 0x1, 0x45, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x10, 0x0, 0x3, 0x0, 0x1, 0x0, 0x28bc41d1}], 0x1) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 14:53:09 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) 14:53:09 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) 14:53:09 executing program 4: socket(0x1, 0x3, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000000)) 14:53:09 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000140)) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0xfffffffffffffdd3) 14:53:09 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = syz_open_dev$media(&(0x7f0000000080), 0x200, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)) socket(0x8, 0x0, 0xe5) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000040)) (async) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000040)) 14:53:09 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) 14:53:09 executing program 4: r0 = socket(0x27, 0x496d94b72b60732b, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r2, &(0x7f0000000100)={'exec ', '\xff\xff\xff\xff\xff\xff'}, 0xb) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c00c1}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8880}, 0x4004000) 14:53:09 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) (async) 14:53:09 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="450f07450fc730c4e289be0f66ba2100ed652e0fa1456db8010000000f01c1c402fd1e7a0066baf80cb8e013f48bef66bafc0ced6666460f38de9cc0ef000000", 0x40}], 0x1, 0x45, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x10, 0x0, 0x3, 0x0, 0x1, 0x0, 0x28bc41d1}], 0x1) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 14:53:09 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = syz_open_dev$media(&(0x7f0000000080), 0x200, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)) socket(0x8, 0x0, 0xe5) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000040)) 14:53:10 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) 14:53:10 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) r1 = syz_open_dev$media(&(0x7f0000000080), 0x200, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)) (async) socket(0x8, 0x0, 0xe5) (async) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000040)) 14:53:10 executing program 4: r0 = socket(0x27, 0x496d94b72b60732b, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r2, &(0x7f0000000100)={'exec ', '\xff\xff\xff\xff\xff\xff'}, 0xb) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c00c1}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8880}, 0x4004000) socket(0x27, 0x496d94b72b60732b, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) write$apparmor_exec(r2, &(0x7f0000000100)={'exec ', '\xff\xff\xff\xff\xff\xff'}, 0xb) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c00c1}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8880}, 0x4004000) (async) 14:53:10 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)=ANY=[], 0x95, 0x0, &(0x7f00000000c0)="0b7bededf62d1b0abaab77818713b3af715bf81c39994f761385f21a1b9601f30f11f935b9588d948164487e0c56ad9845f8a76a8a8fdee6386fb594f414e1370ed215aa5093b245704ac090c88410aec067d27c042d626d307b56026ca80948f1f7a705f4e14f80604706ab265c324b87b51d5633b8a1cda6d3df86b0d208feb378b31540d381bd79d1e3d7bccf004929fa6f406c"}) write$apparmor_exec(r0, 0x0, 0xf) 14:53:10 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x3e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008010}, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:10 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) 14:53:10 executing program 2: r0 = socket(0x1, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f000000bc00)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x2, 0x52f2, 0x42, @empty, @loopback, 0x7, 0x10, 0x9, 0x7fff}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f000000bb80), &(0x7f000000bbc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 14:53:10 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSIG(r1, 0x40045436, 0x2f) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0xf) 14:53:10 executing program 4: r0 = socket(0x27, 0x496d94b72b60732b, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) write$apparmor_exec(r2, &(0x7f0000000100)={'exec ', '\xff\xff\xff\xff\xff\xff'}, 0xb) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c00c1}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8880}, 0x4004000) 14:53:10 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x3e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008010}, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:10 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)=ANY=[], 0x95, 0x0, &(0x7f00000000c0)="0b7bededf62d1b0abaab77818713b3af715bf81c39994f761385f21a1b9601f30f11f935b9588d948164487e0c56ad9845f8a76a8a8fdee6386fb594f414e1370ed215aa5093b245704ac090c88410aec067d27c042d626d307b56026ca80948f1f7a705f4e14f80604706ab265c324b87b51d5633b8a1cda6d3df86b0d208feb378b31540d381bd79d1e3d7bccf004929fa6f406c"}) write$apparmor_exec(r0, 0x0, 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)=ANY=[], 0x95, 0x0, &(0x7f00000000c0)="0b7bededf62d1b0abaab77818713b3af715bf81c39994f761385f21a1b9601f30f11f935b9588d948164487e0c56ad9845f8a76a8a8fdee6386fb594f414e1370ed215aa5093b245704ac090c88410aec067d27c042d626d307b56026ca80948f1f7a705f4e14f80604706ab265c324b87b51d5633b8a1cda6d3df86b0d208feb378b31540d381bd79d1e3d7bccf004929fa6f406c"}) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) 14:53:10 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) 14:53:10 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSIG(r1, 0x40045436, 0x2f) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCSIG(r1, 0x40045436, 0x2f) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0xf) (async) [ 985.226011] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:10 executing program 4: socket(0x1, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xe, 0x5}) 14:53:10 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)=ANY=[], 0x95, 0x0, &(0x7f00000000c0)="0b7bededf62d1b0abaab77818713b3af715bf81c39994f761385f21a1b9601f30f11f935b9588d948164487e0c56ad9845f8a76a8a8fdee6386fb594f414e1370ed215aa5093b245704ac090c88410aec067d27c042d626d307b56026ca80948f1f7a705f4e14f80604706ab265c324b87b51d5633b8a1cda6d3df86b0d208feb378b31540d381bd79d1e3d7bccf004929fa6f406c"}) write$apparmor_exec(r0, 0x0, 0xf) (async) write$apparmor_exec(r0, 0x0, 0xf) 14:53:10 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec'], 0x9) 14:53:10 executing program 4: socket(0x1, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xe, 0x5}) 14:53:10 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCSIG(r1, 0x40045436, 0x2f) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0xf) [ 985.319557] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:10 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000080)=ANY=[], 0x95, 0x0, &(0x7f00000000c0)="0b7bededf62d1b0abaab77818713b3af715bf81c39994f761385f21a1b9601f30f11f935b9588d948164487e0c56ad9845f8a76a8a8fdee6386fb594f414e1370ed215aa5093b245704ac090c88410aec067d27c042d626d307b56026ca80948f1f7a705f4e14f80604706ab265c324b87b51d5633b8a1cda6d3df86b0d208feb378b31540d381bd79d1e3d7bccf004929fa6f406c"}) write$apparmor_exec(r0, 0x0, 0xf) 14:53:10 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x3e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008010}, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:10 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec'], 0x9) 14:53:10 executing program 4: socket(0x1, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xe, 0x5}) socket(0x1, 0x3, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xe, 0x5}) (async) 14:53:10 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) 14:53:10 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 14:53:10 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80786563203a2e6a83e7ff2d00"], 0x9) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2) 14:53:10 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec'], 0x9) 14:53:10 executing program 4: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) socket(0x15, 0x1, 0x3) 14:53:10 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec'], 0x9) 14:53:10 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) 14:53:10 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80786563203a2e6a83e7ff2d00"], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80786563203a2e6a83e7ff2d00"], 0x9) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2) 14:53:10 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 14:53:10 executing program 4: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async) socket(0x15, 0x1, 0x3) 14:53:10 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000140)) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(0xffffffffffffffff, 0x0, 0xfffffffffffffdd3) 14:53:10 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:10 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 14:53:10 executing program 4: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) socket(0x15, 0x1, 0x3) 14:53:10 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80786563203a2e6a83e7ff2d00"], 0x9) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x0, 0x2}, 0x2) 14:53:10 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) 14:53:10 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) 14:53:10 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (fail_nth: 1) 14:53:10 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x10000, 0x280f00) socket(0x1, 0x3, 0x0) 14:53:10 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="654a01400000fa0000"], 0x9) 14:53:10 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x16, &(0x7f0000000080)=@raw=[@exit, @map_fd={0x18, 0x4, 0x1, 0x0, r1}], &(0x7f00000002c0)='syzkaller\x00', 0x8001, 0x4b, &(0x7f0000000100)=""/75, 0x41000, 0x4, '\x00', 0x0, 0x6, r0, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x8, 0x1, 0x7fffffff}, 0x10, 0x0, r1, 0x0, &(0x7f00000003c0)=[r2, r3]}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x7fff, 0x2) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:10 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x10000, 0x280f00) (async) syz_open_dev$sg(&(0x7f0000000000), 0x10000, 0x280f00) socket(0x1, 0x3, 0x0) 14:53:10 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$TIOCNXCL(r1, 0x540d) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) 14:53:10 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) [ 985.744225] FAULT_INJECTION: forcing a failure. [ 985.744225] name failslab, interval 1, probability 0, space 0, times 0 [ 985.788662] CPU: 1 PID: 18876 Comm: syz-executor.2 Not tainted 4.14.305-syzkaller #0 [ 985.796782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 985.806533] Call Trace: [ 985.809136] dump_stack+0x1b2/0x281 [ 985.812785] should_fail.cold+0x10a/0x149 [ 985.816977] should_failslab+0xd6/0x130 [ 985.820982] __kmalloc_track_caller+0x2bc/0x400 [ 985.825669] ? proc_pid_attr_write+0x16c/0x320 [ 985.830294] memdup_user+0x22/0xa0 [ 985.833854] proc_pid_attr_write+0x16c/0x320 14:53:10 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x10000, 0x280f00) socket(0x1, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x10000, 0x280f00) (async) socket(0x1, 0x3, 0x0) (async) 14:53:10 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async, rerun: 32) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 32) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) [ 985.838328] __vfs_write+0xe4/0x630 [ 985.841979] ? proc_pid_wchan+0xf0/0xf0 [ 985.845995] ? __handle_mm_fault+0x80f/0x4620 [ 985.850507] ? kernel_read+0x110/0x110 [ 985.854421] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 985.859886] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 985.864918] vfs_write+0x17f/0x4d0 [ 985.868517] SyS_write+0xf2/0x210 [ 985.872109] ? SyS_read+0x210/0x210 [ 985.875941] ? __do_page_fault+0x159/0xad0 [ 985.880321] ? do_syscall_64+0x4c/0x640 [ 985.885094] ? SyS_read+0x210/0x210 14:53:10 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{@fixed}, {@none}, {@fixed}, {@none}, {@fixed}, {@none}]}) 14:53:10 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{@fixed}, {@none}, {@fixed}, {@none}, {@fixed}, {@none}]}) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{@fixed}, {@none}, {@fixed}, {@none}, {@fixed}, {@none}]}) [ 985.888840] do_syscall_64+0x1d5/0x640 [ 985.892765] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 985.898083] RIP: 0033:0x7f8d1d7c30f9 [ 985.901816] RSP: 002b:00007f8d1bd35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 985.909566] RAX: ffffffffffffffda RBX: 00007f8d1d8e2f80 RCX: 00007f8d1d7c30f9 [ 985.916956] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000003 [ 985.924365] RBP: 00007f8d1bd351d0 R08: 0000000000000000 R09: 0000000000000000 [ 985.931653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:53:10 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x16, &(0x7f0000000080)=@raw=[@exit, @map_fd={0x18, 0x4, 0x1, 0x0, r1}], &(0x7f00000002c0)='syzkaller\x00', 0x8001, 0x4b, &(0x7f0000000100)=""/75, 0x41000, 0x4, '\x00', 0x0, 0x6, r0, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x8, 0x1, 0x7fffffff}, 0x10, 0x0, r1, 0x0, &(0x7f00000003c0)=[r2, r3]}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) (async) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x7fff, 0x2) (async) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000000c0)=ANY=[], 0xf) [ 985.939118] R13: 00007fffda9a5d1f R14: 00007f8d1bd35300 R15: 0000000000022000 14:53:10 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (fail_nth: 2) 14:53:10 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$TIOCNXCL(r1, 0x540d) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) 14:53:10 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="654a01400000fa0000"], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="654a01400000fa0000"], 0x9) 14:53:10 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec '], 0x9) 14:53:10 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x16, &(0x7f0000000080)=@raw=[@exit, @map_fd={0x18, 0x4, 0x1, 0x0, r1}], &(0x7f00000002c0)='syzkaller\x00', 0x8001, 0x4b, &(0x7f0000000100)=""/75, 0x41000, 0x4, '\x00', 0x0, 0x6, r0, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x8, 0x1, 0x7fffffff}, 0x10, 0x0, r1, 0x0, &(0x7f00000003c0)=[r2, r3]}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) (async) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x7fff, 0x2) (async) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:10 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{@fixed}, {@none}, {@fixed}, {@none}, {@fixed}, {@none}]}) socket(0x1, 0x3, 0x0) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{@fixed}, {@none}, {@fixed}, {@none}, {@fixed}, {@none}]}) (async) 14:53:11 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0)=0x8, 0x2) clock_getres(0x7, &(0x7f0000000200)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000088}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x2a}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x4054) write$apparmor_exec(r0, 0x0, 0xf) 14:53:11 executing program 4: socket(0x1, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 14:53:11 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:11 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="654a01400000fa0000"], 0x9) 14:53:11 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$TIOCNXCL(r1, 0x540d) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) [ 986.072851] FAULT_INJECTION: forcing a failure. [ 986.072851] name failslab, interval 1, probability 0, space 0, times 0 14:53:11 executing program 4: socket(0x1, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket(0x1, 0x3, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) [ 986.142146] CPU: 1 PID: 18920 Comm: syz-executor.2 Not tainted 4.14.305-syzkaller #0 [ 986.150639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 986.160355] Call Trace: [ 986.162968] dump_stack+0x1b2/0x281 [ 986.166622] should_fail.cold+0x10a/0x149 [ 986.170803] should_failslab+0xd6/0x130 [ 986.174806] kmem_cache_alloc+0x40/0x3c0 [ 986.178891] audit_log_start.part.0+0x20e/0x650 [ 986.183585] ? kauditd_thread+0x630/0x630 [ 986.187751] ? audit_filter+0x2a6/0x960 [ 986.191744] ? depot_save_stack+0x10d/0x3f0 [ 986.196171] ? audit_compare_dname_path+0x90/0x90 [ 986.201246] ? trace_hardirqs_on+0x10/0x10 [ 986.205622] ? __aafs_ns_mkdir+0x9d0/0x9d0 [ 986.210176] audit_log_start+0x45/0x70 [ 986.214262] common_lsm_audit+0xb2/0x1a70 [ 986.219296] ? do_syscall_64+0x1d5/0x640 [ 986.223502] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 986.229174] ? ipv6_skb_to_auditdata+0xcb0/0xcb0 [ 986.233977] apparmor_setprocattr+0x497/0xa80 [ 986.238529] ? apparmor_cred_free+0x70/0x70 [ 986.242968] ? aa_file_perm+0x2dd/0xab0 [ 986.246972] ? proc_pid_attr_write+0x1c0/0x320 [ 986.251966] ? __might_fault+0x177/0x1b0 [ 986.256049] security_setprocattr+0x74/0xb0 [ 986.260411] proc_pid_attr_write+0x22b/0x320 [ 986.264974] __vfs_write+0xe4/0x630 [ 986.268619] ? proc_pid_wchan+0xf0/0xf0 [ 986.272610] ? __handle_mm_fault+0x80f/0x4620 [ 986.277213] ? kernel_read+0x110/0x110 [ 986.281133] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 986.286613] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 986.291660] vfs_write+0x17f/0x4d0 [ 986.295230] SyS_write+0xf2/0x210 [ 986.298801] ? SyS_read+0x210/0x210 [ 986.302461] ? __do_page_fault+0x159/0xad0 [ 986.306795] ? do_syscall_64+0x4c/0x640 [ 986.310792] ? SyS_read+0x210/0x210 [ 986.314444] do_syscall_64+0x1d5/0x640 [ 986.318367] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 986.323584] RIP: 0033:0x7f8d1d7c30f9 [ 986.327417] RSP: 002b:00007f8d1bd35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 986.335155] RAX: ffffffffffffffda RBX: 00007f8d1d8e2f80 RCX: 00007f8d1d7c30f9 14:53:11 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (fail_nth: 3) 14:53:11 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x10000, 0x280f00) socket(0x1, 0x3, 0x0) 14:53:11 executing program 4: socket(0x1, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket(0x1, 0x3, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) 14:53:11 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0)=0x8, 0x2) (async) clock_getres(0x7, &(0x7f0000000200)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000088}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x2a}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x4054) write$apparmor_exec(r0, 0x0, 0xf) 14:53:11 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:11 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) [ 986.342531] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000003 [ 986.350436] RBP: 00007f8d1bd351d0 R08: 0000000000000000 R09: 0000000000000000 [ 986.357981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.365766] R13: 00007fffda9a5d1f R14: 00007f8d1bd35300 R15: 0000000000022000 14:53:11 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0)=0x8, 0x2) clock_getres(0x7, &(0x7f0000000200)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000088}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x2a}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x4054) write$apparmor_exec(r0, 0x0, 0xf) 14:53:11 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0)=0x8, 0x2) (async) clock_getres(0x7, &(0x7f0000000200)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000088}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x2a}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x4054) (async) write$apparmor_exec(r0, 0x0, 0xf) [ 986.457273] FAULT_INJECTION: forcing a failure. [ 986.457273] name failslab, interval 1, probability 0, space 0, times 0 [ 986.499805] CPU: 0 PID: 18957 Comm: syz-executor.2 Not tainted 4.14.305-syzkaller #0 [ 986.507996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 986.517364] Call Trace: [ 986.519974] dump_stack+0x1b2/0x281 [ 986.523667] should_fail.cold+0x10a/0x149 [ 986.528250] should_failslab+0xd6/0x130 [ 986.532255] kmem_cache_alloc_node+0x54/0x410 [ 986.536772] __alloc_skb+0x5c/0x510 [ 986.540429] audit_log_start.part.0+0x233/0x650 [ 986.545290] ? kauditd_thread+0x630/0x630 14:53:11 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) 14:53:11 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) 14:53:11 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:11 executing program 3: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', '-\x00'}, 0x7) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000000000000000800000085100000060000009500000078520000"], &(0x7f0000000080)='syzkaller\x00', 0x200, 0xb8, &(0x7f00000000c0)=""/184, 0x41000, 0x1b, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xc, 0x4, 0xb2}, 0x10, 0x0, r1, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) [ 986.549461] ? audit_filter+0x2a6/0x960 [ 986.553460] ? depot_save_stack+0x10d/0x3f0 [ 986.557811] ? audit_compare_dname_path+0x90/0x90 [ 986.562940] ? trace_hardirqs_on+0x10/0x10 [ 986.567280] ? __aafs_ns_mkdir+0x9d0/0x9d0 [ 986.571572] audit_log_start+0x45/0x70 [ 986.575475] common_lsm_audit+0xb2/0x1a70 [ 986.579638] ? do_syscall_64+0x1d5/0x640 [ 986.583720] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 986.589287] ? ipv6_skb_to_auditdata+0xcb0/0xcb0 [ 986.594172] apparmor_setprocattr+0x497/0xa80 [ 986.598854] ? apparmor_cred_free+0x70/0x70 [ 986.603240] ? aa_file_perm+0x2dd/0xab0 [ 986.607425] ? proc_pid_attr_write+0x1c0/0x320 [ 986.612135] ? __might_fault+0x177/0x1b0 [ 986.616228] security_setprocattr+0x74/0xb0 [ 986.620586] proc_pid_attr_write+0x22b/0x320 [ 986.625040] __vfs_write+0xe4/0x630 [ 986.628956] ? proc_pid_wchan+0xf0/0xf0 [ 986.632953] ? __handle_mm_fault+0x80f/0x4620 [ 986.637566] ? kernel_read+0x110/0x110 [ 986.641502] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 986.646989] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 986.652046] vfs_write+0x17f/0x4d0 [ 986.655626] SyS_write+0xf2/0x210 [ 986.659114] ? SyS_read+0x210/0x210 [ 986.662782] ? __do_page_fault+0x159/0xad0 [ 986.667160] ? do_syscall_64+0x4c/0x640 [ 986.671284] ? SyS_read+0x210/0x210 [ 986.675036] do_syscall_64+0x1d5/0x640 [ 986.678973] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 986.684365] RIP: 0033:0x7f8d1d7c30f9 [ 986.688099] RSP: 002b:00007f8d1bd35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 14:53:11 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (fail_nth: 4) 14:53:11 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0xd0b, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x1) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000001c0)) 14:53:11 executing program 3: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', '-\x00'}, 0x7) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000000000000000800000085100000060000009500000078520000"], &(0x7f0000000080)='syzkaller\x00', 0x200, 0xb8, &(0x7f00000000c0)=""/184, 0x41000, 0x1b, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xc, 0x4, 0xb2}, 0x10, 0x0, r1, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) (rerun: 32) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:11 executing program 4: socket(0x15, 0x800, 0xfffffbfe) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x6) 14:53:11 executing program 1: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', '-\x00'}, 0x7) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000000000000000800000085100000060000009500000078520000"], &(0x7f0000000080)='syzkaller\x00', 0x200, 0xb8, &(0x7f00000000c0)=""/184, 0x41000, 0x1b, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xc, 0x4, 0xb2}, 0x10, 0x0, r1, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:11 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)={0x2, 0x0, [{}, {}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 986.696243] RAX: ffffffffffffffda RBX: 00007f8d1d8e2f80 RCX: 00007f8d1d7c30f9 [ 986.703544] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000003 [ 986.711007] RBP: 00007f8d1bd351d0 R08: 0000000000000000 R09: 0000000000000000 [ 986.718299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.725590] R13: 00007fffda9a5d1f R14: 00007f8d1bd35300 R15: 0000000000022000 14:53:11 executing program 3: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', '-\x00'}, 0x7) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000000000000000800000085100000060000009500000078520000"], &(0x7f0000000080)='syzkaller\x00', 0x200, 0xb8, &(0x7f00000000c0)=""/184, 0x41000, 0x1b, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xc, 0x4, 0xb2}, 0x10, 0x0, r1, 0x0, &(0x7f0000000200)=[0xffffffffffffffff]}, 0x80) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:11 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0xd0b, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x1) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000001c0)) 14:53:11 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)={0x2, 0x0, [{}, {}]}) (async, rerun: 32) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:11 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) [ 986.808046] FAULT_INJECTION: forcing a failure. [ 986.808046] name failslab, interval 1, probability 0, space 0, times 0 [ 986.841577] CPU: 0 PID: 18999 Comm: syz-executor.2 Not tainted 4.14.305-syzkaller #0 14:53:11 executing program 4: socket(0x15, 0x800, 0xfffffbfe) (async, rerun: 64) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffffffffffff) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x6) [ 986.849805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 986.859350] Call Trace: [ 986.861966] dump_stack+0x1b2/0x281 [ 986.865628] should_fail.cold+0x10a/0x149 [ 986.869887] should_failslab+0xd6/0x130 [ 986.873880] kmem_cache_alloc_node_trace+0x58/0x400 [ 986.878944] __kmalloc_node_track_caller+0x38/0x70 [ 986.883898] __alloc_skb+0x96/0x510 [ 986.887723] audit_log_start.part.0+0x233/0x650 [ 986.892425] ? kauditd_thread+0x630/0x630 [ 986.896590] ? audit_filter+0x2a6/0x960 [ 986.900669] ? depot_save_stack+0x10d/0x3f0 14:53:11 executing program 4: socket(0x15, 0x800, 0xfffffbfe) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffffffffffff) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x6) [ 986.905007] ? audit_compare_dname_path+0x90/0x90 [ 986.909869] ? trace_hardirqs_on+0x10/0x10 [ 986.914128] ? __aafs_ns_mkdir+0x9d0/0x9d0 [ 986.918400] audit_log_start+0x45/0x70 [ 986.922565] common_lsm_audit+0xb2/0x1a70 [ 986.926760] ? do_syscall_64+0x1d5/0x640 [ 986.930871] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 986.936493] ? ipv6_skb_to_auditdata+0xcb0/0xcb0 [ 986.941290] apparmor_setprocattr+0x497/0xa80 [ 986.946023] ? apparmor_cred_free+0x70/0x70 [ 986.950381] ? aa_file_perm+0x2dd/0xab0 [ 986.954399] ? proc_pid_attr_write+0x1c0/0x320 [ 986.959014] ? __might_fault+0x177/0x1b0 [ 986.963361] security_setprocattr+0x74/0xb0 [ 986.967815] proc_pid_attr_write+0x22b/0x320 [ 986.972336] __vfs_write+0xe4/0x630 [ 986.975995] ? proc_pid_wchan+0xf0/0xf0 [ 986.980019] ? __handle_mm_fault+0x80f/0x4620 [ 986.984539] ? kernel_read+0x110/0x110 [ 986.988463] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 986.994064] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 986.999114] vfs_write+0x17f/0x4d0 [ 987.002688] SyS_write+0xf2/0x210 [ 987.006196] ? SyS_read+0x210/0x210 [ 987.009980] ? __do_page_fault+0x159/0xad0 [ 987.014268] ? do_syscall_64+0x4c/0x640 [ 987.018269] ? SyS_read+0x210/0x210 [ 987.021922] do_syscall_64+0x1d5/0x640 [ 987.025841] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 987.031039] RIP: 0033:0x7f8d1d7c30f9 [ 987.034934] RSP: 002b:00007f8d1bd35168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 987.042778] RAX: ffffffffffffffda RBX: 00007f8d1d8e2f80 RCX: 00007f8d1d7c30f9 [ 987.050077] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000003 [ 987.057378] RBP: 00007f8d1bd351d0 R08: 0000000000000000 R09: 0000000000000000 [ 987.064748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.072032] R13: 00007fffda9a5d1f R14: 00007f8d1bd35300 R15: 0000000000022000 14:53:12 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (fail_nth: 5) 14:53:12 executing program 4: socket(0x1, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 14:53:12 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x6d}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:12 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (fail_nth: 1) 14:53:12 executing program 2: add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)={0x100000000, 0x80000001}) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:12 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)={0x2, 0x0, [{}, {}]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:12 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x6d}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:12 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0xd0b, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x1) (async) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000001c0)) 14:53:12 executing program 4: socket(0x1, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) [ 987.233816] FAULT_INJECTION: forcing a failure. [ 987.233816] name failslab, interval 1, probability 0, space 0, times 0 14:53:12 executing program 2: add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)={0x100000000, 0x80000001}) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:12 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) [ 987.306313] CPU: 1 PID: 19045 Comm: syz-executor.1 Not tainted 4.14.305-syzkaller #0 [ 987.314458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 987.323953] Call Trace: [ 987.326554] dump_stack+0x1b2/0x281 [ 987.330210] should_fail.cold+0x10a/0x149 [ 987.334389] should_failslab+0xd6/0x130 [ 987.338409] __kmalloc_track_caller+0x2bc/0x400 [ 987.343113] ? proc_pid_attr_write+0x16c/0x320 [ 987.347746] memdup_user+0x22/0xa0 [ 987.351322] proc_pid_attr_write+0x16c/0x320 [ 987.355755] __vfs_write+0xe4/0x630 [ 987.359405] ? proc_pid_wchan+0xf0/0xf0 [ 987.363401] ? __handle_mm_fault+0x80f/0x4620 [ 987.368056] ? kernel_read+0x110/0x110 [ 987.371982] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 987.377545] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 987.382585] vfs_write+0x17f/0x4d0 [ 987.386147] SyS_write+0xf2/0x210 [ 987.389619] ? SyS_read+0x210/0x210 [ 987.393390] ? __do_page_fault+0x159/0xad0 [ 987.397649] ? do_syscall_64+0x4c/0x640 [ 987.401690] ? SyS_read+0x210/0x210 14:53:12 executing program 2: add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)={0x100000000, 0x80000001}) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:12 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x83e00020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1afe, 0x29}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048011}, 0x80) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x92c1, 0x78}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf05}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4880) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) [ 987.405336] do_syscall_64+0x1d5/0x640 [ 987.409254] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 987.414460] RIP: 0033:0x7f144c56a0f9 [ 987.418175] RSP: 002b:00007f144aadc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 987.425923] RAX: ffffffffffffffda RBX: 00007f144c689f80 RCX: 00007f144c56a0f9 [ 987.433296] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000003 [ 987.441019] RBP: 00007f144aadc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 987.448355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:53:12 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:12 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) [ 987.455639] R13: 00007ffd71362c8f R14: 00007f144aadc300 R15: 0000000000022000 14:53:12 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (fail_nth: 2) 14:53:12 executing program 4: socket(0x1, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 14:53:12 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x6d}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:12 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x83e00020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1afe, 0x29}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048011}, 0x80) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x92c1, 0x78}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf05}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4880) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:12 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:12 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:12 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) 14:53:12 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x7, 0xff, 0x8b}) 14:53:12 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000100)={0x8, 0x7ff, 0x5}) r3 = socket(0x26, 0x2, 0xfffffeff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x470, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc9, 0x2a, [@challenge={0x10, 0x1, 0xb}, @random={0x6, 0xb2, "65a09643b6d6f10cb9681e25c6b7dc17d8850a93250001f94d707081f6073c7e6baa80c76e6f6f0c72df04efe7041d668bdb2297282e8a9bc37f93708794c36bea437894b9c994e2f182a0f6ebb810849e8a33b861148d7fcf2022e7eec622516052d7998bd3a189c98f0461e86dab6eec237fd1bdb8838d6822a670e48b083a6464300c2132499e7ca47cbde1cc43d49ef43724f9de4fcba616d2a7477a3be2e73ceabc14199a8d6765945cff054b6b60e7"}, @cf={0x4, 0x6, {0x8, 0x30, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x6c, 0x81}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7fcd}, @NL80211_ATTR_IE={0x4a, 0x2a, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}, @link_id={0x65, 0x12, {@random="a9ea11233fa0", @broadcast, @broadcast}}, @ssid={0x0, 0x14, @random="63ff27e37f7a97f88f791f7d9bf28d68a5d6f5c6"}]}, @NL80211_ATTR_IE={0x21b, 0x2a, [@mic={0x8c, 0x10, {0x672, "fa82ac114342", @short="3d84738a14dec5f0"}}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x0, 0x0, {0x5, 0x3f, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x6, 0x4}}, @supported_rates={0x1, 0x8, [{0xc, 0x1}, {0x6c}, {0x24}, {0x12, 0x1}, {0x12}, {0x36, 0x1}, {0x30}, {0x6c, 0x1}]}, @random={0x8, 0x92, "131daf0f88f55ccd4180fd18f8405bc12021934ebfd9a9642a87b5e970cb930887da14c20875491eac12914b1ae4581beb5029d88bb2390fd501fcfd7af6664c39a862c83971f94009947bc2e29cf9f40d631addcd53f53571c1ba817b95c52310af9a078f66cf18398279b1f48061f752745cf2185ce45b442682cf95dfbc101735d7c2b83f4b981f0fc08ee8904ba774a6"}, @random_vendor={0xdd, 0xb2, "a92de6754b20312a3db3785d86855d0852778cd26461ba2fbcbc24bf92529de5a13ee59def28ed6a6beb803bbc5cc4933672c46afa44ec97e5ea3ebc922b93828ac35116f8514098893070999be38f978dc57eca36c0d3bf25f31827165a08b25ab0e5c395fb12d39bb8a914ba7bb2d410c5971fe51b5db78eb07d8fc12bcd69c1a0a1df75353df21eab8cc73866f50653e44712c39fa684e52d96ee40a81f087a958a0cfab876e9baade6c0d98fc00db0b2"}, @preq={0x82, 0x67, @not_ext={{0x1, 0x1}, 0x73, 0x8, 0x401, @broadcast, 0x5, "", 0x81, 0x7, 0x7, [{{0x1, 0x0, 0x1}, @device_b, 0x2}, {{}, @device_b, 0x53}, {{0x1}, @device_b, 0x8}, {{}, @broadcast}, {{0x1}, @device_a, 0x6}, {{0x1}, @device_a, 0xfffffffb}, {{0x1, 0x0, 0x1}, @device_a, 0x7}]}}, @measure_req={0x26, 0x2c, {0x3d, 0x1, 0x0, "316bc5eb18d73873b912f57368c71e612e907b6277c336b3145ac1072d58fd7f37390fbf67acaae0e4"}}]}, @NL80211_ATTR_IE={0x21, 0x2a, [@rann={0x7e, 0x15, {{}, 0x7, 0xa9, @broadcast, 0x1000, 0x40, 0x7f}}, @chsw_timing={0x68, 0x4, {0x1000, 0x9b5}}]}, @NL80211_ATTR_IE={0xdb, 0x2a, [@fast_bss_trans={0x37, 0xc9, {0x9, 0x6, "0872224e6a91e69132b2ecf486e9f140", "90b24cf6ad153511c3199c7f29904253c4b7d64dbca24e43eabba999addf3ac4", "d62d28e1cf1003c0d85b41dd2ee5a899e8fb1e136aedde1c3dfc0717e1c2686f", [{0x2, 0x14, "52d593f8c03e1ef113c30069cf48ad3def534cf8"}, {0x4, 0x7, "c612399cd687e6"}, {0x1, 0x15, "814131c7e4c07827caddfa3139b972f998681709b5"}, {0x1, 0x3, "54d4f3"}, {0x4, 0x16, "c1da874388500811a84534115482c031fe77bb5eb287"}, {0x2, 0x22, "bcf0d464159c015fe53564af7a0037b59e2441008b1998ffa0788354e62b48853d51"}]}}, @ibss={0x6, 0x2, 0xbd}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x1f, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @cf={0x4, 0x6, {0x81, 0x5, 0x40, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x470}, 0x1, 0x0, 0x0, 0x40}, 0x54) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x6, 0x8, 0x800, 0x188, 0x1, 0x2, '\x00', 0x0, r1, 0x2, 0x5}, 0x48) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r7, 0x540d) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000200)) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000180)={[0x1, 0x6000, 0x2000], 0x1, 0x2, 0x8}) 14:53:12 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x83e00020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1afe, 0x29}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048011}, 0x80) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x92c1, 0x78}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf05}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4880) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x83e00020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1afe, 0x29}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048011}, 0x80) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x92c1, 0x78}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf05}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4880) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) [ 987.626908] FAULT_INJECTION: forcing a failure. [ 987.626908] name failslab, interval 1, probability 0, space 0, times 0 14:53:12 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:12 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) (async) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x7, 0xff, 0x8b}) [ 987.680295] CPU: 1 PID: 19089 Comm: syz-executor.1 Not tainted 4.14.305-syzkaller #0 [ 987.688439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 987.697850] Call Trace: [ 987.700489] dump_stack+0x1b2/0x281 [ 987.704147] should_fail.cold+0x10a/0x149 [ 987.708582] should_failslab+0xd6/0x130 [ 987.712598] kmem_cache_alloc+0x40/0x3c0 [ 987.716695] audit_log_start.part.0+0x20e/0x650 [ 987.721387] ? kauditd_thread+0x630/0x630 [ 987.725554] ? audit_filter+0x2a6/0x960 [ 987.729635] ? depot_save_stack+0x10d/0x3f0 [ 987.733972] ? audit_compare_dname_path+0x90/0x90 [ 987.738844] ? trace_hardirqs_on+0x10/0x10 [ 987.743098] ? __aafs_ns_mkdir+0x9d0/0x9d0 [ 987.747528] audit_log_start+0x45/0x70 [ 987.751432] common_lsm_audit+0xb2/0x1a70 [ 987.755595] ? do_syscall_64+0x1d5/0x640 [ 987.759672] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 987.765265] ? ipv6_skb_to_auditdata+0xcb0/0xcb0 [ 987.770240] ? vhost_net_stop+0x160/0x210 [ 987.774501] apparmor_setprocattr+0x497/0xa80 [ 987.779193] ? apparmor_cred_free+0x70/0x70 [ 987.783537] ? aa_file_perm+0x2dd/0xab0 [ 987.787722] ? proc_pid_attr_write+0x1c0/0x320 [ 987.792377] ? __might_fault+0x177/0x1b0 [ 987.796472] security_setprocattr+0x74/0xb0 [ 987.800926] proc_pid_attr_write+0x22b/0x320 [ 987.805520] __vfs_write+0xe4/0x630 [ 987.809204] ? proc_pid_wchan+0xf0/0xf0 [ 987.813331] ? __handle_mm_fault+0x80f/0x4620 [ 987.818378] ? kernel_read+0x110/0x110 [ 987.822523] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 987.828194] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 987.833233] vfs_write+0x17f/0x4d0 [ 987.836806] SyS_write+0xf2/0x210 [ 987.840648] ? SyS_read+0x210/0x210 [ 987.844468] ? __do_page_fault+0x159/0xad0 [ 987.848816] ? do_syscall_64+0x4c/0x640 [ 987.852823] ? SyS_read+0x210/0x210 [ 987.856474] do_syscall_64+0x1d5/0x640 [ 987.860478] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 987.865690] RIP: 0033:0x7f144c56a0f9 [ 987.869439] RSP: 002b:00007f144aadc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 14:53:12 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (fail_nth: 3) 14:53:12 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100)=0x1, &(0x7f00000000c0)=0x1) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="6517046afc4683986115df6c192f51dd53afa34d55881643775fd0ea3c4a4046065a3fbccb14f218e1991f008128774c46482ea6c8f738a6626064c650ad10d7e87005d5a7713a8adcc237211775fe7e15cb76bd7075408b899057b9d908593d962b843d341b663218c382a4093e84b8e37bdd3e314d6b4b4fcc21a3902dfda24023042a85af836339889f83743df711f0ae3b56cdf3742a28d07f225d0442867f73679731764759a88ba9c3d417ccb2b95f4d8cfb31db904a53c32200"/203], 0x9) 14:53:12 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="66b82b010f00d8c4c1f85ae9b9800000c00f3235000800000f300f01df640f001d91000000670f30d1f4650f01c8c4c1a9dd4d86f30f06", 0x37}], 0x1, 0x12, &(0x7f0000000100)=[@flags], 0x1) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:12 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x7, 0xff, 0x8b}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) (async) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x7, 0xff, 0x8b}) (async) 14:53:12 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000100)={0x8, 0x7ff, 0x5}) r3 = socket(0x26, 0x2, 0xfffffeff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x470, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc9, 0x2a, [@challenge={0x10, 0x1, 0xb}, @random={0x6, 0xb2, "65a09643b6d6f10cb9681e25c6b7dc17d8850a93250001f94d707081f6073c7e6baa80c76e6f6f0c72df04efe7041d668bdb2297282e8a9bc37f93708794c36bea437894b9c994e2f182a0f6ebb810849e8a33b861148d7fcf2022e7eec622516052d7998bd3a189c98f0461e86dab6eec237fd1bdb8838d6822a670e48b083a6464300c2132499e7ca47cbde1cc43d49ef43724f9de4fcba616d2a7477a3be2e73ceabc14199a8d6765945cff054b6b60e7"}, @cf={0x4, 0x6, {0x8, 0x30, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x6c, 0x81}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7fcd}, @NL80211_ATTR_IE={0x4a, 0x2a, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}, @link_id={0x65, 0x12, {@random="a9ea11233fa0", @broadcast, @broadcast}}, @ssid={0x0, 0x14, @random="63ff27e37f7a97f88f791f7d9bf28d68a5d6f5c6"}]}, @NL80211_ATTR_IE={0x21b, 0x2a, [@mic={0x8c, 0x10, {0x672, "fa82ac114342", @short="3d84738a14dec5f0"}}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x0, 0x0, {0x5, 0x3f, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x6, 0x4}}, @supported_rates={0x1, 0x8, [{0xc, 0x1}, {0x6c}, {0x24}, {0x12, 0x1}, {0x12}, {0x36, 0x1}, {0x30}, {0x6c, 0x1}]}, @random={0x8, 0x92, "131daf0f88f55ccd4180fd18f8405bc12021934ebfd9a9642a87b5e970cb930887da14c20875491eac12914b1ae4581beb5029d88bb2390fd501fcfd7af6664c39a862c83971f94009947bc2e29cf9f40d631addcd53f53571c1ba817b95c52310af9a078f66cf18398279b1f48061f752745cf2185ce45b442682cf95dfbc101735d7c2b83f4b981f0fc08ee8904ba774a6"}, @random_vendor={0xdd, 0xb2, "a92de6754b20312a3db3785d86855d0852778cd26461ba2fbcbc24bf92529de5a13ee59def28ed6a6beb803bbc5cc4933672c46afa44ec97e5ea3ebc922b93828ac35116f8514098893070999be38f978dc57eca36c0d3bf25f31827165a08b25ab0e5c395fb12d39bb8a914ba7bb2d410c5971fe51b5db78eb07d8fc12bcd69c1a0a1df75353df21eab8cc73866f50653e44712c39fa684e52d96ee40a81f087a958a0cfab876e9baade6c0d98fc00db0b2"}, @preq={0x82, 0x67, @not_ext={{0x1, 0x1}, 0x73, 0x8, 0x401, @broadcast, 0x5, "", 0x81, 0x7, 0x7, [{{0x1, 0x0, 0x1}, @device_b, 0x2}, {{}, @device_b, 0x53}, {{0x1}, @device_b, 0x8}, {{}, @broadcast}, {{0x1}, @device_a, 0x6}, {{0x1}, @device_a, 0xfffffffb}, {{0x1, 0x0, 0x1}, @device_a, 0x7}]}}, @measure_req={0x26, 0x2c, {0x3d, 0x1, 0x0, "316bc5eb18d73873b912f57368c71e612e907b6277c336b3145ac1072d58fd7f37390fbf67acaae0e4"}}]}, @NL80211_ATTR_IE={0x21, 0x2a, [@rann={0x7e, 0x15, {{}, 0x7, 0xa9, @broadcast, 0x1000, 0x40, 0x7f}}, @chsw_timing={0x68, 0x4, {0x1000, 0x9b5}}]}, @NL80211_ATTR_IE={0xdb, 0x2a, [@fast_bss_trans={0x37, 0xc9, {0x9, 0x6, "0872224e6a91e69132b2ecf486e9f140", "90b24cf6ad153511c3199c7f29904253c4b7d64dbca24e43eabba999addf3ac4", "d62d28e1cf1003c0d85b41dd2ee5a899e8fb1e136aedde1c3dfc0717e1c2686f", [{0x2, 0x14, "52d593f8c03e1ef113c30069cf48ad3def534cf8"}, {0x4, 0x7, "c612399cd687e6"}, {0x1, 0x15, "814131c7e4c07827caddfa3139b972f998681709b5"}, {0x1, 0x3, "54d4f3"}, {0x4, 0x16, "c1da874388500811a84534115482c031fe77bb5eb287"}, {0x2, 0x22, "bcf0d464159c015fe53564af7a0037b59e2441008b1998ffa0788354e62b48853d51"}]}}, @ibss={0x6, 0x2, 0xbd}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x1f, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @cf={0x4, 0x6, {0x81, 0x5, 0x40, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x470}, 0x1, 0x0, 0x0, 0x40}, 0x54) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x6, 0x8, 0x800, 0x188, 0x1, 0x2, '\x00', 0x0, r1, 0x2, 0x5}, 0x48) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r7, 0x540d) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000200)) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000180)={[0x1, 0x6000, 0x2000], 0x1, 0x2, 0x8}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000100)={0x8, 0x7ff, 0x5}) (async) socket(0x26, 0x2, 0xfffffeff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x470, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc9, 0x2a, [@challenge={0x10, 0x1, 0xb}, @random={0x6, 0xb2, "65a09643b6d6f10cb9681e25c6b7dc17d8850a93250001f94d707081f6073c7e6baa80c76e6f6f0c72df04efe7041d668bdb2297282e8a9bc37f93708794c36bea437894b9c994e2f182a0f6ebb810849e8a33b861148d7fcf2022e7eec622516052d7998bd3a189c98f0461e86dab6eec237fd1bdb8838d6822a670e48b083a6464300c2132499e7ca47cbde1cc43d49ef43724f9de4fcba616d2a7477a3be2e73ceabc14199a8d6765945cff054b6b60e7"}, @cf={0x4, 0x6, {0x8, 0x30, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x6c, 0x81}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7fcd}, @NL80211_ATTR_IE={0x4a, 0x2a, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}, @link_id={0x65, 0x12, {@random="a9ea11233fa0", @broadcast, @broadcast}}, @ssid={0x0, 0x14, @random="63ff27e37f7a97f88f791f7d9bf28d68a5d6f5c6"}]}, @NL80211_ATTR_IE={0x21b, 0x2a, [@mic={0x8c, 0x10, {0x672, "fa82ac114342", @short="3d84738a14dec5f0"}}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x0, 0x0, {0x5, 0x3f, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x6, 0x4}}, @supported_rates={0x1, 0x8, [{0xc, 0x1}, {0x6c}, {0x24}, {0x12, 0x1}, {0x12}, {0x36, 0x1}, {0x30}, {0x6c, 0x1}]}, @random={0x8, 0x92, "131daf0f88f55ccd4180fd18f8405bc12021934ebfd9a9642a87b5e970cb930887da14c20875491eac12914b1ae4581beb5029d88bb2390fd501fcfd7af6664c39a862c83971f94009947bc2e29cf9f40d631addcd53f53571c1ba817b95c52310af9a078f66cf18398279b1f48061f752745cf2185ce45b442682cf95dfbc101735d7c2b83f4b981f0fc08ee8904ba774a6"}, @random_vendor={0xdd, 0xb2, "a92de6754b20312a3db3785d86855d0852778cd26461ba2fbcbc24bf92529de5a13ee59def28ed6a6beb803bbc5cc4933672c46afa44ec97e5ea3ebc922b93828ac35116f8514098893070999be38f978dc57eca36c0d3bf25f31827165a08b25ab0e5c395fb12d39bb8a914ba7bb2d410c5971fe51b5db78eb07d8fc12bcd69c1a0a1df75353df21eab8cc73866f50653e44712c39fa684e52d96ee40a81f087a958a0cfab876e9baade6c0d98fc00db0b2"}, @preq={0x82, 0x67, @not_ext={{0x1, 0x1}, 0x73, 0x8, 0x401, @broadcast, 0x5, "", 0x81, 0x7, 0x7, [{{0x1, 0x0, 0x1}, @device_b, 0x2}, {{}, @device_b, 0x53}, {{0x1}, @device_b, 0x8}, {{}, @broadcast}, {{0x1}, @device_a, 0x6}, {{0x1}, @device_a, 0xfffffffb}, {{0x1, 0x0, 0x1}, @device_a, 0x7}]}}, @measure_req={0x26, 0x2c, {0x3d, 0x1, 0x0, "316bc5eb18d73873b912f57368c71e612e907b6277c336b3145ac1072d58fd7f37390fbf67acaae0e4"}}]}, @NL80211_ATTR_IE={0x21, 0x2a, [@rann={0x7e, 0x15, {{}, 0x7, 0xa9, @broadcast, 0x1000, 0x40, 0x7f}}, @chsw_timing={0x68, 0x4, {0x1000, 0x9b5}}]}, @NL80211_ATTR_IE={0xdb, 0x2a, [@fast_bss_trans={0x37, 0xc9, {0x9, 0x6, "0872224e6a91e69132b2ecf486e9f140", "90b24cf6ad153511c3199c7f29904253c4b7d64dbca24e43eabba999addf3ac4", "d62d28e1cf1003c0d85b41dd2ee5a899e8fb1e136aedde1c3dfc0717e1c2686f", [{0x2, 0x14, "52d593f8c03e1ef113c30069cf48ad3def534cf8"}, {0x4, 0x7, "c612399cd687e6"}, {0x1, 0x15, "814131c7e4c07827caddfa3139b972f998681709b5"}, {0x1, 0x3, "54d4f3"}, {0x4, 0x16, "c1da874388500811a84534115482c031fe77bb5eb287"}, {0x2, 0x22, "bcf0d464159c015fe53564af7a0037b59e2441008b1998ffa0788354e62b48853d51"}]}}, @ibss={0x6, 0x2, 0xbd}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x1f, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @cf={0x4, 0x6, {0x81, 0x5, 0x40, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x470}, 0x1, 0x0, 0x0, 0x40}, 0x54) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x6, 0x8, 0x800, 0x188, 0x1, 0x2, '\x00', 0x0, r1, 0x2, 0x5}, 0x48) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r7, 0x540d) (async) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000200)) (async) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000180)={[0x1, 0x6000, 0x2000], 0x1, 0x2, 0x8}) (async) 14:53:12 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) [ 987.877455] RAX: ffffffffffffffda RBX: 00007f144c689f80 RCX: 00007f144c56a0f9 [ 987.884929] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000003 [ 987.892259] RBP: 00007f144aadc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 987.899734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.907031] R13: 00007ffd71362c8f R14: 00007f144aadc300 R15: 0000000000022000 14:53:12 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r1, 0x4b30, 0x9) 14:53:12 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100)=0x1, &(0x7f00000000c0)=0x1) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="6517046afc4683986115df6c192f51dd53afa34d55881643775fd0ea3c4a4046065a3fbccb14f218e1991f008128774c46482ea6c8f738a6626064c650ad10d7e87005d5a7713a8adcc237211775fe7e15cb76bd7075408b899057b9d908593d962b843d341b663218c382a4093e84b8e37bdd3e314d6b4b4fcc21a3902dfda24023042a85af836339889f83743df711f0ae3b56cdf3742a28d07f225d0442867f73679731764759a88ba9c3d417ccb2b95f4d8cfb31db904a53c32200"/203], 0x9) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100)=0x1, &(0x7f00000000c0)=0x1) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="6517046afc4683986115df6c192f51dd53afa34d55881643775fd0ea3c4a4046065a3fbccb14f218e1991f008128774c46482ea6c8f738a6626064c650ad10d7e87005d5a7713a8adcc237211775fe7e15cb76bd7075408b899057b9d908593d962b843d341b663218c382a4093e84b8e37bdd3e314d6b4b4fcc21a3902dfda24023042a85af836339889f83743df711f0ae3b56cdf3742a28d07f225d0442867f73679731764759a88ba9c3d417ccb2b95f4d8cfb31db904a53c32200"/203], 0x9) (async) 14:53:12 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000100)={0x8, 0x7ff, 0x5}) (async) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000100)={0x8, 0x7ff, 0x5}) socket(0x26, 0x2, 0xfffffeff) (async) r3 = socket(0x26, 0x2, 0xfffffeff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)={0x470, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc9, 0x2a, [@challenge={0x10, 0x1, 0xb}, @random={0x6, 0xb2, "65a09643b6d6f10cb9681e25c6b7dc17d8850a93250001f94d707081f6073c7e6baa80c76e6f6f0c72df04efe7041d668bdb2297282e8a9bc37f93708794c36bea437894b9c994e2f182a0f6ebb810849e8a33b861148d7fcf2022e7eec622516052d7998bd3a189c98f0461e86dab6eec237fd1bdb8838d6822a670e48b083a6464300c2132499e7ca47cbde1cc43d49ef43724f9de4fcba616d2a7477a3be2e73ceabc14199a8d6765945cff054b6b60e7"}, @cf={0x4, 0x6, {0x8, 0x30, 0x0, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x6c, 0x81}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7fcd}, @NL80211_ATTR_IE={0x4a, 0x2a, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}, @link_id={0x65, 0x12, {@random="a9ea11233fa0", @broadcast, @broadcast}}, @ssid={0x0, 0x14, @random="63ff27e37f7a97f88f791f7d9bf28d68a5d6f5c6"}]}, @NL80211_ATTR_IE={0x21b, 0x2a, [@mic={0x8c, 0x10, {0x672, "fa82ac114342", @short="3d84738a14dec5f0"}}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x0, 0x0, {0x5, 0x3f, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x6, 0x4}}, @supported_rates={0x1, 0x8, [{0xc, 0x1}, {0x6c}, {0x24}, {0x12, 0x1}, {0x12}, {0x36, 0x1}, {0x30}, {0x6c, 0x1}]}, @random={0x8, 0x92, "131daf0f88f55ccd4180fd18f8405bc12021934ebfd9a9642a87b5e970cb930887da14c20875491eac12914b1ae4581beb5029d88bb2390fd501fcfd7af6664c39a862c83971f94009947bc2e29cf9f40d631addcd53f53571c1ba817b95c52310af9a078f66cf18398279b1f48061f752745cf2185ce45b442682cf95dfbc101735d7c2b83f4b981f0fc08ee8904ba774a6"}, @random_vendor={0xdd, 0xb2, "a92de6754b20312a3db3785d86855d0852778cd26461ba2fbcbc24bf92529de5a13ee59def28ed6a6beb803bbc5cc4933672c46afa44ec97e5ea3ebc922b93828ac35116f8514098893070999be38f978dc57eca36c0d3bf25f31827165a08b25ab0e5c395fb12d39bb8a914ba7bb2d410c5971fe51b5db78eb07d8fc12bcd69c1a0a1df75353df21eab8cc73866f50653e44712c39fa684e52d96ee40a81f087a958a0cfab876e9baade6c0d98fc00db0b2"}, @preq={0x82, 0x67, @not_ext={{0x1, 0x1}, 0x73, 0x8, 0x401, @broadcast, 0x5, "", 0x81, 0x7, 0x7, [{{0x1, 0x0, 0x1}, @device_b, 0x2}, {{}, @device_b, 0x53}, {{0x1}, @device_b, 0x8}, {{}, @broadcast}, {{0x1}, @device_a, 0x6}, {{0x1}, @device_a, 0xfffffffb}, {{0x1, 0x0, 0x1}, @device_a, 0x7}]}}, @measure_req={0x26, 0x2c, {0x3d, 0x1, 0x0, "316bc5eb18d73873b912f57368c71e612e907b6277c336b3145ac1072d58fd7f37390fbf67acaae0e4"}}]}, @NL80211_ATTR_IE={0x21, 0x2a, [@rann={0x7e, 0x15, {{}, 0x7, 0xa9, @broadcast, 0x1000, 0x40, 0x7f}}, @chsw_timing={0x68, 0x4, {0x1000, 0x9b5}}]}, @NL80211_ATTR_IE={0xdb, 0x2a, [@fast_bss_trans={0x37, 0xc9, {0x9, 0x6, "0872224e6a91e69132b2ecf486e9f140", "90b24cf6ad153511c3199c7f29904253c4b7d64dbca24e43eabba999addf3ac4", "d62d28e1cf1003c0d85b41dd2ee5a899e8fb1e136aedde1c3dfc0717e1c2686f", [{0x2, 0x14, "52d593f8c03e1ef113c30069cf48ad3def534cf8"}, {0x4, 0x7, "c612399cd687e6"}, {0x1, 0x15, "814131c7e4c07827caddfa3139b972f998681709b5"}, {0x1, 0x3, "54d4f3"}, {0x4, 0x16, "c1da874388500811a84534115482c031fe77bb5eb287"}, {0x2, 0x22, "bcf0d464159c015fe53564af7a0037b59e2441008b1998ffa0788354e62b48853d51"}]}}, @ibss={0x6, 0x2, 0xbd}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x1f, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @cf={0x4, 0x6, {0x81, 0x5, 0x40, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x470}, 0x1, 0x0, 0x0, 0x40}, 0x54) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x6, 0x8, 0x800, 0x188, 0x1, 0x2, '\x00', 0x0, r1, 0x2, 0x5}, 0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r7, 0x540d) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000200)) (async) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000200)) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000180)={[0x1, 0x6000, 0x2000], 0x1, 0x2, 0x8}) 14:53:12 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="66b82b010f00d8c4c1f85ae9b9800000c00f3235000800000f300f01df640f001d91000000670f30d1f4650f01c8c4c1a9dd4d86f30f06", 0x37}], 0x1, 0x12, &(0x7f0000000100)=[@flags], 0x1) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) [ 988.028790] FAULT_INJECTION: forcing a failure. [ 988.028790] name failslab, interval 1, probability 0, space 0, times 0 [ 988.052039] CPU: 1 PID: 19152 Comm: syz-executor.1 Not tainted 4.14.305-syzkaller #0 [ 988.060337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 988.070076] Call Trace: [ 988.072742] dump_stack+0x1b2/0x281 14:53:13 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) (async) [ 988.076408] should_fail.cold+0x10a/0x149 [ 988.081109] should_failslab+0xd6/0x130 [ 988.085129] kmem_cache_alloc_node+0x54/0x410 [ 988.090306] __alloc_skb+0x5c/0x510 [ 988.094076] audit_log_start.part.0+0x233/0x650 [ 988.099561] ? kauditd_thread+0x630/0x630 [ 988.103759] ? audit_filter+0x2a6/0x960 [ 988.107798] ? depot_save_stack+0x10d/0x3f0 [ 988.112408] ? audit_compare_dname_path+0x90/0x90 [ 988.117276] ? trace_hardirqs_on+0x10/0x10 [ 988.121570] ? __aafs_ns_mkdir+0x9d0/0x9d0 [ 988.126371] audit_log_start+0x45/0x70 [ 988.130430] common_lsm_audit+0xb2/0x1a70 [ 988.134777] ? do_syscall_64+0x1d5/0x640 [ 988.139229] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 988.144615] ? ipv6_skb_to_auditdata+0xcb0/0xcb0 [ 988.149496] apparmor_setprocattr+0x497/0xa80 [ 988.154290] ? apparmor_cred_free+0x70/0x70 [ 988.158831] ? aa_file_perm+0x2dd/0xab0 [ 988.162928] ? proc_pid_attr_write+0x1c0/0x320 [ 988.167632] ? __might_fault+0x177/0x1b0 [ 988.171816] security_setprocattr+0x74/0xb0 14:53:13 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x2}) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async, rerun: 32) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) (async, rerun: 32) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r1, 0x4b30, 0x9) [ 988.176428] proc_pid_attr_write+0x22b/0x320 [ 988.180858] __vfs_write+0xe4/0x630 [ 988.184593] ? proc_pid_wchan+0xf0/0xf0 [ 988.188587] ? __handle_mm_fault+0x80f/0x4620 [ 988.193141] ? kernel_read+0x110/0x110 [ 988.197062] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 988.203404] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 988.208442] vfs_write+0x17f/0x4d0 [ 988.212018] SyS_write+0xf2/0x210 [ 988.215494] ? SyS_read+0x210/0x210 [ 988.219175] ? __do_page_fault+0x159/0xad0 [ 988.223562] ? do_syscall_64+0x4c/0x640 [ 988.227595] ? SyS_read+0x210/0x210 [ 988.231246] do_syscall_64+0x1d5/0x640 [ 988.235162] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 988.240379] RIP: 0033:0x7f144c56a0f9 [ 988.244274] RSP: 002b:00007f144aadc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 988.252163] RAX: ffffffffffffffda RBX: 00007f144c689f80 RCX: 00007f144c56a0f9 [ 988.259455] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000003 [ 988.266771] RBP: 00007f144aadc1d0 R08: 0000000000000000 R09: 0000000000000000 14:53:13 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (fail_nth: 4) 14:53:13 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="66b82b010f00d8c4c1f85ae9b9800000c00f3235000800000f300f01df640f001d91000000670f30d1f4650f01c8c4c1a9dd4d86f30f06", 0x37}], 0x1, 0x12, &(0x7f0000000100)=[@flags], 0x1) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:13 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x101, 0x3ff, 0x5}) r1 = socket(0x26, 0x6, 0x9) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="957cf6cd38b5"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0f192bfc025787b5d9941dac37e32550"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "1379f074dab3c5c2f602641d2df0b455"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e1f4ad31c2f98c36876553e898d09cb5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "2a744fcc37395dc1f342a58a3f5d5dd8"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x1) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:13 executing program 0: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100)=0x1, &(0x7f00000000c0)=0x1) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="6517046afc4683986115df6c192f51dd53afa34d55881643775fd0ea3c4a4046065a3fbccb14f218e1991f008128774c46482ea6c8f738a6626064c650ad10d7e87005d5a7713a8adcc237211775fe7e15cb76bd7075408b899057b9d908593d962b843d341b663218c382a4093e84b8e37bdd3e314d6b4b4fcc21a3902dfda24023042a85af836339889f83743df711f0ae3b56cdf3742a28d07f225d0442867f73679731764759a88ba9c3d417ccb2b95f4d8cfb31db904a53c32200"/203], 0x9) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100)=0x1, &(0x7f00000000c0)=0x1) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="6517046afc4683986115df6c192f51dd53afa34d55881643775fd0ea3c4a4046065a3fbccb14f218e1991f008128774c46482ea6c8f738a6626064c650ad10d7e87005d5a7713a8adcc237211775fe7e15cb76bd7075408b899057b9d908593d962b843d341b663218c382a4093e84b8e37bdd3e314d6b4b4fcc21a3902dfda24023042a85af836339889f83743df711f0ae3b56cdf3742a28d07f225d0442867f73679731764759a88ba9c3d417ccb2b95f4d8cfb31db904a53c32200"/203], 0x9) (async) 14:53:13 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x3}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r1, 0x4b30, 0x9) [ 988.274148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.281779] R13: 00007ffd71362c8f R14: 00007f144aadc300 R15: 0000000000022000 14:53:13 executing program 5: ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000080)=0x200000000000d) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f00000000c0)={[0x2000, 0x100000, 0x2], 0x8001, 0x80, 0x3}) write$apparmor_exec(r0, 0x0, 0xf) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x4000, 0x100000, 0x4, 0x4e, 0x20, 0x2, 0x7, 0x81, 0x3b, 0x1f, 0xd5, 0x5}, {0x4000, 0x0, 0xe, 0x60, 0x3, 0x7, 0x4, 0x1f, 0x1, 0x1, 0x3, 0x6b}, {0x5000, 0x0, 0x9, 0x2, 0x2, 0x2, 0x3, 0x0, 0xbc, 0x8, 0x9, 0xff}, {0x10000, 0x4, 0x3, 0x20, 0x6, 0x8d, 0x5, 0xa9, 0x80, 0x7, 0x1f, 0xff}, {0x6000, 0xf000, 0xb, 0x8, 0xf8, 0x68, 0x8, 0x1f, 0x8, 0x5, 0x64, 0x5}, {0x4, 0x1000, 0xe, 0x2, 0x1, 0x4, 0x88, 0xc7, 0x4, 0x1, 0x41, 0xbe}, {0x1, 0x2, 0xc, 0x80, 0x0, 0xff, 0x6, 0x81, 0x2, 0x7f, 0x9e, 0x96}, {0x2000, 0x1000, 0xb, 0x1, 0x3f, 0x5, 0x7f, 0x8, 0x4, 0x49, 0x4, 0x7f}, {0x5000, 0x7}, {0xc001, 0x5}, 0x20040000, 0x0, 0x5000, 0x80, 0x7, 0x0, 0x2000, [0x4, 0x401, 0x2, 0x100000000]}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x7fff, 0x6401) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000140)) 14:53:13 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x101, 0x3ff, 0x5}) (async) r1 = socket(0x26, 0x6, 0x9) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="957cf6cd38b5"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0f192bfc025787b5d9941dac37e32550"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "1379f074dab3c5c2f602641d2df0b455"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e1f4ad31c2f98c36876553e898d09cb5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "2a744fcc37395dc1f342a58a3f5d5dd8"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:13 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x6da1, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x4) 14:53:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x1f, 0x0, 0x6, 0x8, 0xd}}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x48, r2, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2605, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4000080) socket(0x1a, 0x4, 0x3) 14:53:13 executing program 2: r0 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) [ 988.421813] FAULT_INJECTION: forcing a failure. [ 988.421813] name failslab, interval 1, probability 0, space 0, times 0 [ 988.489612] CPU: 1 PID: 19201 Comm: syz-executor.1 Not tainted 4.14.305-syzkaller #0 [ 988.497544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 988.506917] Call Trace: [ 988.509651] dump_stack+0x1b2/0x281 [ 988.513316] should_fail.cold+0x10a/0x149 [ 988.517679] should_failslab+0xd6/0x130 [ 988.521776] kmem_cache_alloc_node_trace+0x58/0x400 [ 988.526833] __kmalloc_node_track_caller+0x38/0x70 [ 988.531891] __alloc_skb+0x96/0x510 [ 988.535547] audit_log_start.part.0+0x233/0x650 [ 988.540341] ? kauditd_thread+0x630/0x630 [ 988.542901] kauditd_printk_skb: 36 callbacks suppressed [ 988.542913] audit: type=1400 audit(1676818393.456:1446): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=19211 comm="syz-executor.0" [ 988.544503] ? audit_filter+0x2a6/0x960 [ 988.544523] ? depot_save_stack+0x10d/0x3f0 [ 988.544539] ? audit_compare_dname_path+0x90/0x90 [ 988.581027] ? trace_hardirqs_on+0x10/0x10 [ 988.585289] ? __aafs_ns_mkdir+0x9d0/0x9d0 14:53:13 executing program 2: r0 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r1) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) [ 988.589541] audit_log_start+0x45/0x70 [ 988.593455] common_lsm_audit+0xb2/0x1a70 [ 988.597617] ? do_syscall_64+0x1d5/0x640 [ 988.598135] audit: type=1400 audit(1676818393.516:1447): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=19213 comm="syz-executor.2" [ 988.601690] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 988.601707] ? ipv6_skb_to_auditdata+0xcb0/0xcb0 [ 988.601736] apparmor_setprocattr+0x497/0xa80 [ 988.632226] ? apparmor_cred_free+0x70/0x70 14:53:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x1f, 0x0, 0x6, 0x8, 0xd}}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x48, r2, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2605, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4000080) socket(0x1a, 0x4, 0x3) [ 988.636575] ? aa_file_perm+0x2dd/0xab0 [ 988.640656] ? proc_pid_attr_write+0x1c0/0x320 [ 988.645274] ? __might_fault+0x177/0x1b0 [ 988.649388] security_setprocattr+0x74/0xb0 [ 988.653740] proc_pid_attr_write+0x22b/0x320 [ 988.658266] __vfs_write+0xe4/0x630 [ 988.661910] ? proc_pid_wchan+0xf0/0xf0 [ 988.665904] ? __handle_mm_fault+0x80f/0x4620 [ 988.670504] ? kernel_read+0x110/0x110 [ 988.674418] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 988.680155] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 988.685194] vfs_write+0x17f/0x4d0 [ 988.688763] SyS_write+0xf2/0x210 [ 988.692240] ? SyS_read+0x210/0x210 [ 988.696023] ? __do_page_fault+0x159/0xad0 [ 988.700383] ? do_syscall_64+0x4c/0x640 [ 988.704466] ? SyS_read+0x210/0x210 [ 988.708310] do_syscall_64+0x1d5/0x640 [ 988.712222] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 988.715398] audit: type=1400 audit(1676818393.636:1448): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=19219 comm="syz-executor.2" [ 988.717543] RIP: 0033:0x7f144c56a0f9 [ 988.737361] RSP: 002b:00007f144aadc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 988.745263] RAX: ffffffffffffffda RBX: 00007f144c689f80 RCX: 00007f144c56a0f9 [ 988.752555] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000003 [ 988.760020] RBP: 00007f144aadc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 988.767340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.774628] R13: 00007ffd71362c8f R14: 00007f144aadc300 R15: 0000000000022000 14:53:13 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (fail_nth: 5) 14:53:13 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x6da1, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x6da1, 0x2) (async) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x4) (async) 14:53:13 executing program 2: r0 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r0) (async) add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r1) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) 14:53:13 executing program 5: ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000080)=0x200000000000d) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f00000000c0)={[0x2000, 0x100000, 0x2], 0x8001, 0x80, 0x3}) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x4000, 0x100000, 0x4, 0x4e, 0x20, 0x2, 0x7, 0x81, 0x3b, 0x1f, 0xd5, 0x5}, {0x4000, 0x0, 0xe, 0x60, 0x3, 0x7, 0x4, 0x1f, 0x1, 0x1, 0x3, 0x6b}, {0x5000, 0x0, 0x9, 0x2, 0x2, 0x2, 0x3, 0x0, 0xbc, 0x8, 0x9, 0xff}, {0x10000, 0x4, 0x3, 0x20, 0x6, 0x8d, 0x5, 0xa9, 0x80, 0x7, 0x1f, 0xff}, {0x6000, 0xf000, 0xb, 0x8, 0xf8, 0x68, 0x8, 0x1f, 0x8, 0x5, 0x64, 0x5}, {0x4, 0x1000, 0xe, 0x2, 0x1, 0x4, 0x88, 0xc7, 0x4, 0x1, 0x41, 0xbe}, {0x1, 0x2, 0xc, 0x80, 0x0, 0xff, 0x6, 0x81, 0x2, 0x7f, 0x9e, 0x96}, {0x2000, 0x1000, 0xb, 0x1, 0x3f, 0x5, 0x7f, 0x8, 0x4, 0x49, 0x4, 0x7f}, {0x5000, 0x7}, {0xc001, 0x5}, 0x20040000, 0x0, 0x5000, 0x80, 0x7, 0x0, 0x2000, [0x4, 0x401, 0x2, 0x100000000]}) (async) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x7fff, 0x6401) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000140)) 14:53:13 executing program 4: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x1f, 0x0, 0x6, 0x8, 0xd}}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x48, r2, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2605, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4000080) (async) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x48, r2, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2605, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4000080) socket(0x1a, 0x4, 0x3) 14:53:13 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x101, 0x3ff, 0x5}) r1 = socket(0x26, 0x6, 0x9) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="957cf6cd38b5"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0f192bfc025787b5d9941dac37e32550"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "1379f074dab3c5c2f602641d2df0b455"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e1f4ad31c2f98c36876553e898d09cb5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "2a744fcc37395dc1f342a58a3f5d5dd8"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async, rerun: 32) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (rerun: 32) [ 988.837423] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 988.850438] audit: out of memory in audit_log_start 14:53:13 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCNXCL(r1, 0x540d) 14:53:13 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0xd000, 0xd000, 0x3, 0x6, 0x5, 0x7, 0xff, 0x8, 0x4, 0x0, 0x9, 0x2}, {0x10000, 0xd000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x6, 0x17, 0x40, 0x80, 0x7}, {0x2, 0x0, 0x1, 0xf4, 0x6, 0x7f, 0x1f, 0x6, 0x4, 0x6, 0xb4, 0x43}, {0x6001, 0x2000, 0x9, 0x3f, 0x9, 0x10, 0xfe, 0x8b, 0xaf, 0x5, 0x6, 0x80}, {0x1, 0x3000, 0x3, 0x9b, 0x20, 0x9, 0x59, 0x2, 0x81, 0x0, 0x8, 0x3}, {0x4000, 0x100000, 0xb, 0x0, 0x20, 0x81, 0x6, 0xff, 0x0, 0x3f, 0x1f}, {0x0, 0xf000, 0xc, 0x6d, 0x80, 0x3f, 0x3, 0x2, 0x5, 0x8, 0x78, 0xfa}, {0x3000, 0x1000, 0xa, 0x20, 0x0, 0x3, 0x3a, 0x18, 0xde, 0x2, 0x4, 0x7}, {0x0, 0x3ff}, {0x3000, 0x1}, 0x8000003a, 0x0, 0x10000, 0x10, 0x7, 0x800, 0x2, [0x2e695da8, 0x227, 0x3, 0x4]}) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x7, 0x3, 0x483, 0x1, 0x17, "0f777521971099a1"}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000140)={0x11, 0x80, 0x9, 0x0, 0x2, 0x3, 0xab, 0xff, 0xa8, 0x10, 0x9, 0x98, 0x0, 0x7fffffff, 0x8, 0x3, 0x81, 0x2, 0xff, '\x00', 0xbc, 0x1}) socket(0x25, 0x8080a, 0x414) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000000c0)={0x2, 0x4}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) write$apparmor_exec(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006563226fd2138a90583d203a"], 0x9) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000100)) ioctl$TIOCEXCL(r1, 0x540c) 14:53:13 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x9) [ 988.935724] audit: type=1400 audit(1676818393.856:1449): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=19247 comm="syz-executor.2" 14:53:13 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) (async) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x6da1, 0x2) (async) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x4) 14:53:13 executing program 5: ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000080)=0x200000000000d) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f00000000c0)={[0x2000, 0x100000, 0x2], 0x8001, 0x80, 0x3}) write$apparmor_exec(r0, 0x0, 0xf) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x4000, 0x100000, 0x4, 0x4e, 0x20, 0x2, 0x7, 0x81, 0x3b, 0x1f, 0xd5, 0x5}, {0x4000, 0x0, 0xe, 0x60, 0x3, 0x7, 0x4, 0x1f, 0x1, 0x1, 0x3, 0x6b}, {0x5000, 0x0, 0x9, 0x2, 0x2, 0x2, 0x3, 0x0, 0xbc, 0x8, 0x9, 0xff}, {0x10000, 0x4, 0x3, 0x20, 0x6, 0x8d, 0x5, 0xa9, 0x80, 0x7, 0x1f, 0xff}, {0x6000, 0xf000, 0xb, 0x8, 0xf8, 0x68, 0x8, 0x1f, 0x8, 0x5, 0x64, 0x5}, {0x4, 0x1000, 0xe, 0x2, 0x1, 0x4, 0x88, 0xc7, 0x4, 0x1, 0x41, 0xbe}, {0x1, 0x2, 0xc, 0x80, 0x0, 0xff, 0x6, 0x81, 0x2, 0x7f, 0x9e, 0x96}, {0x2000, 0x1000, 0xb, 0x1, 0x3f, 0x5, 0x7f, 0x8, 0x4, 0x49, 0x4, 0x7f}, {0x5000, 0x7}, {0xc001, 0x5}, 0x20040000, 0x0, 0x5000, 0x80, 0x7, 0x0, 0x2000, [0x4, 0x401, 0x2, 0x100000000]}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x7fff, 0x6401) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000140)) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000080)=0x200000000000d) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f00000000c0)={[0x2000, 0x100000, 0x2], 0x8001, 0x80, 0x3}) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{0x4000, 0x100000, 0x4, 0x4e, 0x20, 0x2, 0x7, 0x81, 0x3b, 0x1f, 0xd5, 0x5}, {0x4000, 0x0, 0xe, 0x60, 0x3, 0x7, 0x4, 0x1f, 0x1, 0x1, 0x3, 0x6b}, {0x5000, 0x0, 0x9, 0x2, 0x2, 0x2, 0x3, 0x0, 0xbc, 0x8, 0x9, 0xff}, {0x10000, 0x4, 0x3, 0x20, 0x6, 0x8d, 0x5, 0xa9, 0x80, 0x7, 0x1f, 0xff}, {0x6000, 0xf000, 0xb, 0x8, 0xf8, 0x68, 0x8, 0x1f, 0x8, 0x5, 0x64, 0x5}, {0x4, 0x1000, 0xe, 0x2, 0x1, 0x4, 0x88, 0xc7, 0x4, 0x1, 0x41, 0xbe}, {0x1, 0x2, 0xc, 0x80, 0x0, 0xff, 0x6, 0x81, 0x2, 0x7f, 0x9e, 0x96}, {0x2000, 0x1000, 0xb, 0x1, 0x3f, 0x5, 0x7f, 0x8, 0x4, 0x49, 0x4, 0x7f}, {0x5000, 0x7}, {0xc001, 0x5}, 0x20040000, 0x0, 0x5000, 0x80, 0x7, 0x0, 0x2000, [0x4, 0x401, 0x2, 0x100000000]}) (async) syz_open_dev$sg(&(0x7f0000000040), 0x7fff, 0x6401) (async) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000140)) (async) 14:53:14 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) socket(0x1, 0x80000, 0x0) 14:53:14 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCNXCL(r1, 0x540d) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) [ 989.041477] audit: type=1400 audit(1676818393.896:1450): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=19245 comm="syz-executor.0" 14:53:14 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x9) (async) 14:53:14 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0xd000, 0xd000, 0x3, 0x6, 0x5, 0x7, 0xff, 0x8, 0x4, 0x0, 0x9, 0x2}, {0x10000, 0xd000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x6, 0x17, 0x40, 0x80, 0x7}, {0x2, 0x0, 0x1, 0xf4, 0x6, 0x7f, 0x1f, 0x6, 0x4, 0x6, 0xb4, 0x43}, {0x6001, 0x2000, 0x9, 0x3f, 0x9, 0x10, 0xfe, 0x8b, 0xaf, 0x5, 0x6, 0x80}, {0x1, 0x3000, 0x3, 0x9b, 0x20, 0x9, 0x59, 0x2, 0x81, 0x0, 0x8, 0x3}, {0x4000, 0x100000, 0xb, 0x0, 0x20, 0x81, 0x6, 0xff, 0x0, 0x3f, 0x1f}, {0x0, 0xf000, 0xc, 0x6d, 0x80, 0x3f, 0x3, 0x2, 0x5, 0x8, 0x78, 0xfa}, {0x3000, 0x1000, 0xa, 0x20, 0x0, 0x3, 0x3a, 0x18, 0xde, 0x2, 0x4, 0x7}, {0x0, 0x3ff}, {0x3000, 0x1}, 0x8000003a, 0x0, 0x10000, 0x10, 0x7, 0x800, 0x2, [0x2e695da8, 0x227, 0x3, 0x4]}) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x7, 0x3, 0x483, 0x1, 0x17, "0f777521971099a1"}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000140)={0x11, 0x80, 0x9, 0x0, 0x2, 0x3, 0xab, 0xff, 0xa8, 0x10, 0x9, 0x98, 0x0, 0x7fffffff, 0x8, 0x3, 0x81, 0x2, 0xff, '\x00', 0xbc, 0x1}) socket(0x25, 0x8080a, 0x414) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000000c0)={0x2, 0x4}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) write$apparmor_exec(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006563226fd2138a90583d203a"], 0x9) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000100)) ioctl$TIOCEXCL(r1, 0x540c) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0xd000, 0xd000, 0x3, 0x6, 0x5, 0x7, 0xff, 0x8, 0x4, 0x0, 0x9, 0x2}, {0x10000, 0xd000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x6, 0x17, 0x40, 0x80, 0x7}, {0x2, 0x0, 0x1, 0xf4, 0x6, 0x7f, 0x1f, 0x6, 0x4, 0x6, 0xb4, 0x43}, {0x6001, 0x2000, 0x9, 0x3f, 0x9, 0x10, 0xfe, 0x8b, 0xaf, 0x5, 0x6, 0x80}, {0x1, 0x3000, 0x3, 0x9b, 0x20, 0x9, 0x59, 0x2, 0x81, 0x0, 0x8, 0x3}, {0x4000, 0x100000, 0xb, 0x0, 0x20, 0x81, 0x6, 0xff, 0x0, 0x3f, 0x1f}, {0x0, 0xf000, 0xc, 0x6d, 0x80, 0x3f, 0x3, 0x2, 0x5, 0x8, 0x78, 0xfa}, {0x3000, 0x1000, 0xa, 0x20, 0x0, 0x3, 0x3a, 0x18, 0xde, 0x2, 0x4, 0x7}, {0x0, 0x3ff}, {0x3000, 0x1}, 0x8000003a, 0x0, 0x10000, 0x10, 0x7, 0x800, 0x2, [0x2e695da8, 0x227, 0x3, 0x4]}) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x7, 0x3, 0x483, 0x1, 0x17, "0f777521971099a1"}) (async) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000140)={0x11, 0x80, 0x9, 0x0, 0x2, 0x3, 0xab, 0xff, 0xa8, 0x10, 0x9, 0x98, 0x0, 0x7fffffff, 0x8, 0x3, 0x81, 0x2, 0xff, '\x00', 0xbc, 0x1}) (async) socket(0x25, 0x8080a, 0x414) (async) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000000c0)={0x2, 0x4}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r3, 0x540d) (async) write$apparmor_exec(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006563226fd2138a90583d203a"], 0x9) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000100)) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) 14:53:14 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x85) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:14 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$TIOCNXCL(r0, 0x540d) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) socket(0x1, 0x80000, 0x0) 14:53:14 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x9) [ 989.157565] audit: type=1400 audit(1676818393.896:1451): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=19248 comm="syz-executor.1" 14:53:14 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x64, r1, 0x124, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10c8, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x74}, @void, @val={0xc, 0x99, {0x6, 0x3c}}}}, [@NL80211_ATTR_VENDOR_DATA={0x83, 0xc5, "1b0d3d6dbb4d83558573b48a95a249400ae028511f6b0053cf7f874632259e5166018ff7aa03080319dbe3b1dd50238c2e7b121046bdd63a0ce38841140c5dae0f568cf6e9ff4eba86d4ce1db28bc4d533e34fa7fb54de84aba6d41870c0c4dcb5ccab417547b17fdaaa4b25a7e59c6020933bea3e32dcef49f1a8a34ae014"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xddf0}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3f}]}, 0x10c8}}, 0x4800) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, r3, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008090}, 0x2000001c) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) 14:53:14 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0xd000, 0xd000, 0x3, 0x6, 0x5, 0x7, 0xff, 0x8, 0x4, 0x0, 0x9, 0x2}, {0x10000, 0xd000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x6, 0x17, 0x40, 0x80, 0x7}, {0x2, 0x0, 0x1, 0xf4, 0x6, 0x7f, 0x1f, 0x6, 0x4, 0x6, 0xb4, 0x43}, {0x6001, 0x2000, 0x9, 0x3f, 0x9, 0x10, 0xfe, 0x8b, 0xaf, 0x5, 0x6, 0x80}, {0x1, 0x3000, 0x3, 0x9b, 0x20, 0x9, 0x59, 0x2, 0x81, 0x0, 0x8, 0x3}, {0x4000, 0x100000, 0xb, 0x0, 0x20, 0x81, 0x6, 0xff, 0x0, 0x3f, 0x1f}, {0x0, 0xf000, 0xc, 0x6d, 0x80, 0x3f, 0x3, 0x2, 0x5, 0x8, 0x78, 0xfa}, {0x3000, 0x1000, 0xa, 0x20, 0x0, 0x3, 0x3a, 0x18, 0xde, 0x2, 0x4, 0x7}, {0x0, 0x3ff}, {0x3000, 0x1}, 0x8000003a, 0x0, 0x10000, 0x10, 0x7, 0x800, 0x2, [0x2e695da8, 0x227, 0x3, 0x4]}) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x7, 0x3, 0x483, 0x1, 0x17, "0f777521971099a1"}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000140)={0x11, 0x80, 0x9, 0x0, 0x2, 0x3, 0xab, 0xff, 0xa8, 0x10, 0x9, 0x98, 0x0, 0x7fffffff, 0x8, 0x3, 0x81, 0x2, 0xff, '\x00', 0xbc, 0x1}) socket(0x25, 0x8080a, 0x414) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000000c0)={0x2, 0x4}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) write$apparmor_exec(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006563226fd2138a90583d203a"], 0x9) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000100)) ioctl$TIOCEXCL(r1, 0x540c) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0xd000, 0xd000, 0x3, 0x6, 0x5, 0x7, 0xff, 0x8, 0x4, 0x0, 0x9, 0x2}, {0x10000, 0xd000, 0x9, 0x1, 0x7, 0x9, 0x9, 0x6, 0x17, 0x40, 0x80, 0x7}, {0x2, 0x0, 0x1, 0xf4, 0x6, 0x7f, 0x1f, 0x6, 0x4, 0x6, 0xb4, 0x43}, {0x6001, 0x2000, 0x9, 0x3f, 0x9, 0x10, 0xfe, 0x8b, 0xaf, 0x5, 0x6, 0x80}, {0x1, 0x3000, 0x3, 0x9b, 0x20, 0x9, 0x59, 0x2, 0x81, 0x0, 0x8, 0x3}, {0x4000, 0x100000, 0xb, 0x0, 0x20, 0x81, 0x6, 0xff, 0x0, 0x3f, 0x1f}, {0x0, 0xf000, 0xc, 0x6d, 0x80, 0x3f, 0x3, 0x2, 0x5, 0x8, 0x78, 0xfa}, {0x3000, 0x1000, 0xa, 0x20, 0x0, 0x3, 0x3a, 0x18, 0xde, 0x2, 0x4, 0x7}, {0x0, 0x3ff}, {0x3000, 0x1}, 0x8000003a, 0x0, 0x10000, 0x10, 0x7, 0x800, 0x2, [0x2e695da8, 0x227, 0x3, 0x4]}) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x7, 0x3, 0x483, 0x1, 0x17, "0f777521971099a1"}) (async) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000140)={0x11, 0x80, 0x9, 0x0, 0x2, 0x3, 0xab, 0xff, 0xa8, 0x10, 0x9, 0x98, 0x0, 0x7fffffff, 0x8, 0x3, 0x81, 0x2, 0xff, '\x00', 0xbc, 0x1}) (async) socket(0x25, 0x8080a, 0x414) (async) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000000c0)={0x2, 0x4}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r3, 0x540d) (async) write$apparmor_exec(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006563226fd2138a90583d203a"], 0x9) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000100)) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) 14:53:14 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCNXCL(r1, 0x540d) 14:53:14 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x85) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:14 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737865e3203a"], 0x9) [ 989.262988] audit: type=1400 audit(1676818394.026:1452): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=19282 comm="syz-executor.0" 14:53:14 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) (async) socket(0x1, 0x80000, 0x0) 14:53:14 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x64, r1, 0x124, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10c8, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x74}, @void, @val={0xc, 0x99, {0x6, 0x3c}}}}, [@NL80211_ATTR_VENDOR_DATA={0x83, 0xc5, "1b0d3d6dbb4d83558573b48a95a249400ae028511f6b0053cf7f874632259e5166018ff7aa03080319dbe3b1dd50238c2e7b121046bdd63a0ce38841140c5dae0f568cf6e9ff4eba86d4ce1db28bc4d533e34fa7fb54de84aba6d41870c0c4dcb5ccab417547b17fdaaa4b25a7e59c6020933bea3e32dcef49f1a8a34ae014"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xddf0}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "ffb34d1c8ebc6a0dd0370bbd017c626ab50f23aca6c816fcc77bb7f69c93bb40a251b201dc06270ee3c382b4e21b646e53d31032ec4dc4adafeea1b90d79823d1878a2ba1cb7a97b5e3bf9a39725f5c30c436639c791145fafa711f2ba21c83e5788332398cefcc74fa6633fab9ed5d2016b42a1381bc86c38bb60b4de56e56a6726b9b2ebb8145206269b2853f7551fc91f3f7846b7c80bbab8413ecbaed67e0eeeac6645da76d65f102ee24fcbf68bfc6808d783fab4437db01f45e42e434e36a13ee66b4f6b695be4a26f9be1693d5fe78ce65cf6f8568407fd3f59761a0d1acfd96a7b91ba56d2523967160d059178d96a216d523ab1c0b39ed7157bd828534ed11a9d74c1acca98105966515dd080f265ed433ac3c91e2600a913edaa29c089bbec512fcfb757aa2663517bbda143f37eb47783f8aa0a95afe61f5867eebdfccc2ba23d5f174a1ea39584db83616699d46eb4f961b0b5c7153b400aea7697450a43d9af9406dc5008b8703591da660bfae6f641968eb3faa0026af853d305e8b8cbb10ad4f8e745022b9b422a65e89abbc18cce5fa8a8aadd7572e328b854bf116cfe349f2fb757c3e485ba66734dd4daab7ebecac8a07c4475c0a5d7b97707e7c3077d67bc72fccc2d8352e990d18b26b29af5e40eb39bee8297ec00d53eb2b60c6ea3281ef4d66dfece51211d151ee8b54e2c6e0b795e81b57a2754c268b2e54daaaf66470f6ec3f4630c65d7770dd5a6e8ba274d719fcbf4a80e4cb1ae059d0bc25caa838dfadccc545462f2da3f63653877d6b454b7cbba9e3cbaef7e323c705c1aced9bfcf903446c0f18dbd49d0936ff8eef514103f3aa7779a8214b4b6632a1f0732e8c18516b8a275a085bbf1b10bf0ab5c829447a44c2c75342b180dd7ed1d50795135ae821ece66a7a6161aa41975b883e789fe0fa51d7f42dd8a55d878354abee4a14d759a68a634fcbaf9d9fe12934ed7c84a7e054ef8bdfb80f7727a7b851a6f03bbef139577d825baa91fded0e9a078d3b0aa8468bc51b68a3d116bae47ea354fc44279ec0ccaf57d2bfdc337afe3d6351539ada4d02f0bc1852e8fc502ce1ba841d08071b2502b708a69475ef3e3f72eb4a722a75a9b79b5f440f554248231130e67d6124bab993bebfa01bab22e8b8b3936436e627dc1b4aadef6f2cda8078e1fe1c8a4ce32c9e954aac297cb8f8d5da7a6af1fe945dc8e646e0831a5b88d2569a68b04471a7479a2fa9deee92659e96b980363cc362a41a743e0dba70307a8f7982009ceb928aacc845ae6c85b0e011bcddb85bd24a37341bce2798d02a28a1f83eb297fe6dcb2f809d2dae50085f9dc8e8084de3d7906fed3889319709ee081bbb396295ec9f667edb4100938140f0526e866687dc1dd865a2ab3c8d1e57aff4bedaecea4ec714cc9e0ca57f09512c43725a2a5608a07ea29316266663a99199af413171d04e66d04ec5a8ea24a5f1d0175582a2a58123491e6af1b65e0c35c38f90c372c279f688f36da62d71e2096a653d7e78a5e4f475a9e2ad9a605f9890887648b779caa69f90a65fd470788439a091c6736e5af36fe5929dedafe50520bb314f76053b1354d292f7e1657591a12b5d8b6f51f128564564772762135b5bfec6655a6768ea7dfbab790fbbbd26396d5daf94dec651b289f29bf872a9f35628ecd137a6e7306b0b5d06ea212e2c4c6fb85ab939a93162329da0dcec20a109530f52564f86bb70ac334f09b04e584cee729cb5577d6cd540b058a5b6ec39224f54f0e0f93dc819fd0e237af5be48aa4696cf1ac2e414ac5ff2b883c91e3885e9fccd7a11b83e0e83bc5b03e2f85171fe9edd1139efb58e87f7174fda5064f3196ed314fe402321362d04f9338916ee0a0b65eeeb765b0d33d7ec49727e362109260a1dd07894d0b914d0dafdc1a3237ac5794973922d9f9be0d3419f04858c40bbb6d92a770187e5d4c0dd509b2f875b20eb0701647f22aa14db2b02a66c0f024018450300b0c871f0976fd025b6cf92d4ee4175b206c9ed288609789dab42b3ba30dc236400fdec06ab84ce5d245e5817812ef09d2e20fe25a88fcc77c8950cb42a0200d3d8db311120066b72da313f8fc2b4fa6a0ae97e56a37f744fc7ea5d7b6e2f4ff435b283bd360985c89916daab273b182d49964185de5da3a7a6876cde852ce5f274b1ca0e52b0e356e7108e37e0a51a71a56697b55354f1eb140cab6134c9a0905e90df888aa880dab2c3898ff6bf22d6a5d5cc62ba2350e38dd5b8f6f5a4a60032e919e956e5aaaeb1a88b237c02ce4f1b27f6df8b34849f6b5264ac475987da726c5534caf7e790e49ce1c36e5c5a5db02ff2d78b2ee9965eaf182ea3ad70f7fd728040425d1d0c00c14c80c8be29f7865aab1f8b07bf68b63f35eb9c680c2c5197703cfcf6720cc75bd47a3daf3716c3e69079e45b69d38ddf8fa79d966a13e1f0b3f6070e055e28f3e298138bf3393a2e4fa8389219c6ded907a4ea3a2dd4d80694e7665f2caa7935480d104ce591a6cfa51fa5b8b3892ec1f3abd2de22589854e3487fff8bcff4064fb797ced61754a74f6adb3ee184503a2fe08e303bc5e251a9d6bf03a35a37f28f38168c371d75af51382e4184ca0cf2187a60effcfaf0a2d3ffedafd1a99dc46c8801c898caac92ebc27d1ff3d324aba558ad8dcb0c5daee441e36e3cd60159f141bd81394d68fa537c84a5584c83fe0bc4e85cac8d7ef64cf7d0ceb7f08458ba8e1d8f23cc05315a6c99c4cb433d19f7469e9926ced83f7f8bea88c9628c2104bf251ffa29bbed88537e9bfaf79908079b43582638aeb9bb615744e6995ad9006aae9efae9369c158f2109b4615d2b43faed169cb3f1ac1ed70808b7c08661bdf5e66ffc34aec52f1af0defcd7fd2cef78d933a0e69f82c650a47405d7e776e984dad37b4079867a8bd83c77446500ba79b9a8a2aef285c87f7146a1cbb59fc9f29578aa36bf60b84d5633536b44857ded6756706cdff95c9731b40a2dd0e79d3fb5790d36813238b24d81577830faa2e1a4f7bb1d7c66913e835076daf3b2d395fdb80f6062e55437a6e55940d2bcbb260b6e2197ee4872ee1515700b101d8e02841b2342533b58f71b21a235c63d4fb032b38f66b51f1aa14244638cfbc84d73596ce841e6cf1f0ac07f1834b4f0dd5c08acea7c960122434b662cef947adb75e7adb5d6589181468030eb45487307a4182f96f85bc6ec67ec3e15c532a9ac0ca9171e230eaccba9dec7617dffcc4d4a5df28c4ddc2ef22c1162dbc423c1a71d28005a74dd200caabc0e4783b7771e771b34f76d412d7c8199dd9a90484798ddf5bcd1dccd323e01018b0d8094bd44b42cb35d723d54581eac72edcc908c828e3a4cf8272c8519024ff53d38efd483701dd7c1a59b647aa8a1c9514b8e70a24aa08b0f1fc4cbd17c6d64e4d715139351c6298df1b20ccc134b4a4f814351f4d1a2328b97473f70a12fa9df8d0d2887eef2710613f5273b46a6fccb300a22c55178cb7e2bf990d187c1461798289110eb01146935e0db10f268fd45299ea6329add41fa5366f98db6e8a3b2b0dda04fc3c2842b24cca599520538216fadf2f115233beb9c29a623862ca78142df29e04aa5dfd5f6528e28b632a829fdaf047b626a582c483b547270b80c6a64cc3b6cfa754e48f92e889163ff9297926cb7e1cd06161e2df966bc9d9b4e4ee7cb8c4275f49260d388ec194619c95b93e242a33b2418f7fc376c6f48ed994adaf980056bc1db2387b9e2d5bd8655cd24afd9596e4389284b2c15f042e5291db64c48ea6be34339f1a58d4b42b31f20aa76ef0628da60503d526a5a12569eb58416b14f5c38229f5b9093d6a25539d7a0649a684d680fb787462dd978c7fe74fc2aad147a5933e8fa928acf64e848111b4afc270e930084cc1b4512c7d7c24e17d659dc3e08fed9d89be9d7a2cc68aec2ce5ba2c3def5d67e60259cb483a77df7aceda323d8b292a0bb444775ca90247d1b1cad39a79e11bcb56188e9254aeceeee7c50841f44c4b2596d97cde6d4ebfeefa7a144a82b24918abfcf1194dae7e015746bf9ec9d0e69f4d5ce98dba11371917798eb8d12b57f804495f81d8b375b503f9d012db056c41b398880bbc96d7eac90ad2d6c1c5000b7c69d91cbdde9849bce4064933ae66968a8a78a107fc955fde526e018b5200733e39e5ccdc09fc557cba332ec27e29d91ba890695346b4610a94f79992049cbd0a9a626a79262c774f80a761539a552fbc0d68b42194a036cdce7b4f55843adc664073cc9cd1f362ede5dfd2810f236d8e7685e1227438179cb2b7e70848611180c8b074cabe5abeb564a9544e519dba59b6c33a14ee7781a624f2bff46de9c318cdc18bbe2284d0e2c07ae5e10c40297d663f1e66a747b9521173dc619a83babd71480619985c9af3f6b73d8c35ff1371411c459c63a85d306899f35d8393800185bfb405cf3f2ab71c24ecb630917fda8fac8a04778d65fdba1f76959f892188dba309d163e29aa098b127bb5157e89592a8d246360563c7d9b567ab168efd0254632d86f6794e2306b1b727988a8f34d29a816295472080af6c75bd42429f9f0f366afd00f54d626050154ccb803aeb6672c8c64b71290ce565e0f3d74c168ec03bbb46fcf964c4748cb082f59f93b01a6ba4bfa6796153507286d885e54a132f9befcc7ab6a42c92753910fd016b4febee041244c5a465393a2a4fc7c6ff98f143432264b12253edc985fd841612700f1b450dcfd7349352a9aaed2dcef47aa9e4bb424824ad5616f102caff234158379e0e9105c542541f34a79bf41c016d3c8957bd7bde773863a5241d878e48c579e268b64ca0f1f48bb79dcdd1fce89869220138d266752b05fc14c2e1c41ffa04b911589151dd14b4e234d9056a03e586abf681c4385caa87787f3891b6dc59ebe11e3ebd0f91c7b2bf83e37e918fd893537234d74a4b1951c2477b2983f637271af300d4eabe57353712da4cd7fca4c4822fa65f942e0d132f998e5a6ed6a1076243b8dc5cd7b7327518028368ddcc95e747adbbfcf51b867f3505015e00f2a398ee3581dcc038242b083eadba0c06b155672b3ebc14250c9b8dc4a4f6830c01a564d7c29b7ff0ce3d1f0a38607d52e3dbb8170032c51973252aba119b5c6aff8a06307b60c15f0dfdf94b2c11a40909ac68cdecc47aa6fe7382f938af75b830779e4634fd849b2b229a92064ba7158704a08b3b1d82b16f7198a90efb794ed78888a8808bb9869ee25dae459c8190430bd2a9b42b44d4cbf26f6ad819dc4502cc4759292168c4437ad502cc12b762189fe6ed7ee8c7aeec9e75b375fe6b1e851d57eac23d470538c757e6044b0cd1db30ec56e36f8a57095cf26332356c8e4d97c866abc35c07c27bdab01c58702a0534e839312a7fdd69ea9db18d129daf671649dcf5dc7da488fb3d7848a1fe10290d96ef2ace3e20893978d4bee7a67279791cb39d67c9fa8bec8e6510bb854348bceb60d12660f37d7fc015a9cb1198bd889b5e906285158cf9fdb0a05caf8b05ef5780e61f8c53d5470ef64d976090f70dbead939029b3e128c34abf374766fb749903f756507265b0201ea818bbb631cd11706270b0d55a1a5ec6770275233293cad1cd2de2cf77a1ac5cd287f4b92e529cd86ff7806409738d6486da8619ce5a89c337a05acc6a67985d9014d830448156338d6fdd5265896c47af5d96d54087562a5137684c014d8a38ab2346118aec887da8c0833f3a3e36f7cd"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3f}]}, 0x10c8}}, 0x4800) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, r3, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008090}, 0x2000001c) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) 14:53:14 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73786563203aa74d38a04797e15b882f0809bd93157d6a0227098c8d2d315e99ed0d712ee3d48b0f52c007e4aaff738fa2fa52df01bcbd2844d188cb0e436f59e5c7dc85bb9fdb39778b1a4267b40dbded250735be4173c741e4d6f8aca1dede246d36ee7a3e3334e907a039d863587427e8c5c8ef16d3ab02c19392333504a4fd6c4895053ebed9994e3bec970ea7673f6d989659eae0dba3f69bdb34e2748d10fa9b86d54882a6f7eaf980ee15797c27e8f5116310077926a2ee89117833f64749d8e26500ec"], 0x9) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x3, 0x200883) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000140)=0x77) 14:53:14 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) [ 989.355866] audit: type=1400 audit(1676818394.176:1453): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=19304 comm="syz-executor.0" 14:53:14 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737865e3203a"], 0x9) 14:53:14 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x85) (async) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:14 executing program 4: r0 = socket(0x1, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001180)={0x6c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x2, 0x3d}, @fda={0x66646185, 0x3, 0x0, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}, @free_buffer, @dead_binder_done, @increfs], 0x1000, 0x0, &(0x7f0000000180)="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"}) 14:53:14 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) (async) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73786563203aa74d38a04797e15b882f0809bd93157d6a0227098c8d2d315e99ed0d712ee3d48b0f52c007e4aaff738fa2fa52df01bcbd2844d188cb0e436f59e5c7dc85bb9fdb39778b1a4267b40dbded250735be4173c741e4d6f8aca1dede246d36ee7a3e3334e907a039d863587427e8c5c8ef16d3ab02c19392333504a4fd6c4895053ebed9994e3bec970ea7673f6d989659eae0dba3f69bdb34e2748d10fa9b86d54882a6f7eaf980ee15797c27e8f5116310077926a2ee89117833f64749d8e26500ec"], 0x9) (async) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x3, 0x200883) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000140)=0x77) 14:53:14 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6578655daefbcda62a9848c6c36f2e8a7974283a2e2d00"], 0x9) 14:53:14 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x64, r1, 0x124, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async, rerun: 64) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10c8, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x74}, @void, @val={0xc, 0x99, {0x6, 0x3c}}}}, [@NL80211_ATTR_VENDOR_DATA={0x83, 0xc5, "1b0d3d6dbb4d83558573b48a95a249400ae028511f6b0053cf7f874632259e5166018ff7aa03080319dbe3b1dd50238c2e7b121046bdd63a0ce38841140c5dae0f568cf6e9ff4eba86d4ce1db28bc4d533e34fa7fb54de84aba6d41870c0c4dcb5ccab417547b17fdaaa4b25a7e59c6020933bea3e32dcef49f1a8a34ae014"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xddf0}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3f}]}, 0x10c8}}, 0x4800) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, r3, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008090}, 0x2000001c) (async, rerun: 32) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) (rerun: 32) 14:53:14 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737865e3203a"], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="737865e3203a"], 0x9) 14:53:14 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:14 executing program 4: r0 = socket(0x1, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001180)={0x6c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x2, 0x3d}, @fda={0x66646185, 0x3, 0x0, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}, @free_buffer, @dead_binder_done, @increfs], 0x1000, 0x0, &(0x7f0000000180)="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"}) 14:53:14 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73786563203aa74d38a04797e15b882f0809bd93157d6a0227098c8d2d315e99ed0d712ee3d48b0f52c007e4aaff738fa2fa52df01bcbd2844d188cb0e436f59e5c7dc85bb9fdb39778b1a4267b40dbded250735be4173c741e4d6f8aca1dede246d36ee7a3e3334e907a039d863587427e8c5c8ef16d3ab02c19392333504a4fd6c4895053ebed9994e3bec970ea7673f6d989659eae0dba3f69bdb34e2748d10fa9b86d54882a6f7eaf980ee15797c27e8f5116310077926a2ee89117833f64749d8e26500ec"], 0x9) (async) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x3, 0x200883) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000140)=0x77) 14:53:14 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6578655daefbcda62a9848c6c36f2e8a7974283a2e2d00"], 0x9) 14:53:14 executing program 1: r0 = socket(0x6c, 0x800, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x4c, 0x20, 0x400, 0x70bd25, 0x25dfdbfe, {0x2, 0x10, 0x10, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7f}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xcc}, @FRA_FLOW={0x8}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x9065}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4890}, 0x10) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x18b001) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:14 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:14 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) ioctl$TIOCNXCL(r1, 0x540d) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000140)=0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) write$apparmor_exec(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b8c2b0db84c20105e7007d22def47203f259f1d888bf2f33cb4807d25cb7e80f66ca8acb2d494355be8aef192f8fc65ca20a88279be51d54c0473879324c1adeea2000000000000000000008000000000", @ANYRESOCT=r0, @ANYRESDEC=r3], 0x9) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f00000000c0)) 14:53:14 executing program 1: r0 = socket(0x6c, 0x800, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x4c, 0x20, 0x400, 0x70bd25, 0x25dfdbfe, {0x2, 0x10, 0x10, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7f}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xcc}, @FRA_FLOW={0x8}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x9065}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4890}, 0x10) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x18b001) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) (async) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:14 executing program 4: r0 = socket(0x1, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001180)={0x6c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x2, 0x3d}, @fda={0x66646185, 0x3, 0x0, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}, @free_buffer, @dead_binder_done, @increfs], 0x1000, 0x0, &(0x7f0000000180)="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"}) 14:53:14 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6578655daefbcda62a9848c6c36f2e8a7974283a2e2d00"], 0x9) 14:53:14 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400030000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250f0000000c0099007f0000005100000030001b80050001003f0000000500010023000000050001000d0000000400030004000200040002000400030004000200"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4) write$apparmor_exec(r0, 0x0, 0xf) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 14:53:14 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000500)) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r2, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="8e000000", @ANYRES16=r2, @ANYBLOB="00082bbd7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000888}, 0x4008000) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x11c, r2, 0xf4afe3c182eb2f3d, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2c}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f384d3f78b781566bad244ab34"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0xd, 0x4, "d0c0453e0f09fe4a15"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "44a4b7282dfe9f9343e9d892c8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "db57355d01103c9d5e617979b5"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fd664c7fcfb006571bf2597dea"}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, '}K'}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5aa261644811da1d3eeb4a80db"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ac604ff68ca1526f9b8f159587"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7da98fd077"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e584f2b3990d3be8173e042c74"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc0}, 0x8044) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000380)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="20022abd7000fbdbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="d7d623142fba2cb2ac3781eac206270f59"], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x20, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000085}, 0x400c010) ioctl$TIOCNXCL(r4, 0x540d) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004040}, 0x4881) 14:53:14 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x98, 0x24, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xd, 0x2}, {0x22ecc1e9a112acaa, 0x2}, {0xd, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x80}, @TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xff, 0x8, 0xbd05, 0x1, 0x1, 0x1, 0x5}}, {0xe, 0x2, [0x1, 0x2, 0xff, 0x8, 0x9]}}, {{0x1c, 0x1, {0xa0, 0x6, 0xc, 0x4, 0x0, 0x5, 0x10001, 0x1}}, {0x6, 0x2, [0x4]}}]}, @TCA_RATE={0x6, 0x5, {0x2f, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3f}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040050}, 0x20008814) socket(0x1, 0x3, 0x0) 14:53:14 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 32) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000140)=0x1) (async, rerun: 32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async) write$apparmor_exec(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b8c2b0db84c20105e7007d22def47203f259f1d888bf2f33cb4807d25cb7e80f66ca8acb2d494355be8aef192f8fc65ca20a88279be51d54c0473879324c1adeea2000000000000000000008000000000", @ANYRESOCT=r0, @ANYRESDEC=r3], 0x9) (async) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') (async, rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$TIOCNXCL(r4, 0x540d) (async, rerun: 64) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f00000000c0)) 14:53:14 executing program 1: r0 = socket(0x6c, 0x800, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x4c, 0x20, 0x400, 0x70bd25, 0x25dfdbfe, {0x2, 0x10, 0x10, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7f}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xcc}, @FRA_FLOW={0x8}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x9065}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4890}, 0x10) (async, rerun: 64) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x7, 0x18b001) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) (async, rerun: 64) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) (rerun: 64) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:14 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xf415) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x200, 0x44}}}}, [@NL80211_ATTR_VENDOR_DATA={0x37, 0xc5, "65b17ed96831f47ed68134ac7b94945ab81bd6f1f2e0c98a00ad4347742a4dbab3b340a5659ca0ea3954ac298e38209c54ab23"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x4) 14:53:14 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400030000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250f0000000c0099007f0000005100000030001b80050001003f0000000500010023000000050001000d0000000400030004000200040002000400030004000200"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) write$apparmor_exec(r0, 0x0, 0xf) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 14:53:14 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x98, 0x24, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xd, 0x2}, {0x22ecc1e9a112acaa, 0x2}, {0xd, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x80}, @TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xff, 0x8, 0xbd05, 0x1, 0x1, 0x1, 0x5}}, {0xe, 0x2, [0x1, 0x2, 0xff, 0x8, 0x9]}}, {{0x1c, 0x1, {0xa0, 0x6, 0xc, 0x4, 0x0, 0x5, 0x10001, 0x1}}, {0x6, 0x2, [0x4]}}]}, @TCA_RATE={0x6, 0x5, {0x2f, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3f}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040050}, 0x20008814) (async, rerun: 64) socket(0x1, 0x3, 0x0) (rerun: 64) 14:53:14 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000500)) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r2, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="8e000000", @ANYRES16=r2, @ANYBLOB="00082bbd7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000888}, 0x4008000) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x11c, r2, 0xf4afe3c182eb2f3d, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2c}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f384d3f78b781566bad244ab34"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0xd, 0x4, "d0c0453e0f09fe4a15"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "44a4b7282dfe9f9343e9d892c8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "db57355d01103c9d5e617979b5"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fd664c7fcfb006571bf2597dea"}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, '}K'}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5aa261644811da1d3eeb4a80db"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ac604ff68ca1526f9b8f159587"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7da98fd077"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e584f2b3990d3be8173e042c74"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc0}, 0x8044) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000380)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="20022abd7000fbdbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="d7d623142fba2cb2ac3781eac206270f59"], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x20, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000085}, 0x400c010) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x20, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000085}, 0x400c010) ioctl$TIOCNXCL(r4, 0x540d) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004040}, 0x4881) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004040}, 0x4881) 14:53:14 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000140)=0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async) write$apparmor_exec(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b8c2b0db84c20105e7007d22def47203f259f1d888bf2f33cb4807d25cb7e80f66ca8acb2d494355be8aef192f8fc65ca20a88279be51d54c0473879324c1adeea2000000000000000000008000000000", @ANYRESOCT=r0, @ANYRESDEC=r3], 0x9) (async) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f00000000c0)) 14:53:14 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) (async, rerun: 32) socket$phonet(0x23, 0x2, 0x1) (async, rerun: 32) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xf415) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x200, 0x44}}}}, [@NL80211_ATTR_VENDOR_DATA={0x37, 0xc5, "65b17ed96831f47ed68134ac7b94945ab81bd6f1f2e0c98a00ad4347742a4dbab3b340a5659ca0ea3954ac298e38209c54ab23"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) (async) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x4) 14:53:14 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxeg :'], 0x9) 14:53:15 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x98, 0x24, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xd, 0x2}, {0x22ecc1e9a112acaa, 0x2}, {0xd, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x80}, @TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xff, 0x8, 0xbd05, 0x1, 0x1, 0x1, 0x5}}, {0xe, 0x2, [0x1, 0x2, 0xff, 0x8, 0x9]}}, {{0x1c, 0x1, {0xa0, 0x6, 0xc, 0x4, 0x0, 0x5, 0x10001, 0x1}}, {0x6, 0x2, [0x4]}}]}, @TCA_RATE={0x6, 0x5, {0x2f, 0x80}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3f}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040050}, 0x20008814) (async) socket(0x1, 0x3, 0x0) 14:53:15 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000500)) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r2, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="8e000000", @ANYRES16=r2, @ANYBLOB="00082bbd7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000888}, 0x4008000) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x11c, r2, 0xf4afe3c182eb2f3d, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2c}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f384d3f78b781566bad244ab34"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0xd, 0x4, "d0c0453e0f09fe4a15"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "44a4b7282dfe9f9343e9d892c8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "db57355d01103c9d5e617979b5"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fd664c7fcfb006571bf2597dea"}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, '}K'}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5aa261644811da1d3eeb4a80db"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ac604ff68ca1526f9b8f159587"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7da98fd077"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e584f2b3990d3be8173e042c74"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc0}, 0x8044) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000380)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="20022abd7000fbdbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="d7d623142fba2cb2ac3781eac206270f59"], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x20, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000085}, 0x400c010) ioctl$TIOCNXCL(r4, 0x540d) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004040}, 0x4881) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000500)) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r2, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="8e000000", @ANYRES16=r2, @ANYBLOB="00082bbd7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000888}, 0x4008000) (async) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x11c, r2, 0xf4afe3c182eb2f3d, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2c}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f384d3f78b781566bad244ab34"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0xd, 0x4, "d0c0453e0f09fe4a15"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "44a4b7282dfe9f9343e9d892c8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "db57355d01103c9d5e617979b5"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fd664c7fcfb006571bf2597dea"}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, '}K'}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5aa261644811da1d3eeb4a80db"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ac604ff68ca1526f9b8f159587"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7da98fd077"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e584f2b3990d3be8173e042c74"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc0}, 0x8044) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000380)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="20022abd7000fbdbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="d7d623142fba2cb2ac3781eac206270f59"], 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x20, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000085}, 0x400c010) (async) ioctl$TIOCNXCL(r4, 0x540d) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x208, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004040}, 0x4881) (async) 14:53:15 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400030000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250f0000000c0099007f0000005100000030001b80050001003f0000000500010023000000050001000d0000000400030004000200040002000400030004000200"], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) write$apparmor_exec(r0, 0x0, 0xf) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 14:53:15 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) 14:53:15 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxeg :'], 0x9) 14:53:15 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) (async) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xf415) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x200, 0x44}}}}, [@NL80211_ATTR_VENDOR_DATA={0x37, 0xc5, "65b17ed96831f47ed68134ac7b94945ab81bd6f1f2e0c98a00ad4347742a4dbab3b340a5659ca0ea3954ac298e38209c54ab23"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) (async) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x4) 14:53:15 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0xf) 14:53:15 executing program 4: ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x12, "11337627fe649be461f2da5e1cba036e638bab9f8f9ccc2a00c6d53068bb691f57501d7bd3e65986a68c3e240b0ca4df30947b40014055adb8825908d2abaa41c65ef9132dc1cc18034ec25efd95007352f9f2205a98e8a28263697d64a0345ebcd87cfe134e9f1c5cb08fb8dc5344143407cbe58d94b459dcd8031fdf53aef8a48e3ab8429c44a496c772ae3529431529ee6c793ecf70b1b4367060a23bc3d01ecec9e27f5737fc89175f0c8b29408bb5781589dfe076344ff24d5770952fd0721587d0e9d100b98b0434198fca026fd5b576df77ceccd370f027e3b6a81faf93594dec9fad2c0b5ac617b74752cfbbdfe3d15b02e78370f1e1ed1e94f31d1bad475262665b3c6ae6727f08c3208426533291d4f3a6078b1048c9240f1bc04d199f7a55d7fdf067ac7abc7557ba2d5b24d1e8fbe1dc8b521bab572858e597708b62cdcfa82861b551dcafac0c8a4148c2a3e7392b17083b746124920d999adcf813e872f2da771765e68148724918ae52229b3a87d113a8c85ea74c8512808ecf67658f18b6fbed99861bce681b07eb5be65a6816dc2e120306af9e38b6d08b51027bd8f7ce80e20eca1f63838d1cdaa4398a7ace0abd3186ac5f9bc3b7f6a6eefaa1f604ccdc6585e4fc0535b883e07aac1ce948354c3c4ed8585102a1d3095b8b196756cdd8b505900598d01d4bc6b9e7b5679a3c720444c8dd70a02958a4"}) socket(0x1e, 0x3, 0x1f) 14:53:15 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) (async) 14:53:15 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_newneigh={0x30, 0x1c, 0x100, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x10, 0x8, 0x9}, [@NDA_IFINDEX={0x8, 0x8, r1}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x810) write$apparmor_exec(r0, 0x0, 0xf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000140)={0x3}) 14:53:15 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxeg :'], 0x9) 14:53:15 executing program 4: ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x12, "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"}) (async) socket(0x1e, 0x3, 0x1f) 14:53:15 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0xf) 14:53:15 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRES64=r3], 0x9) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x7, 0x26, 0x40, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x8000, 0x10, 0xffff8001, 0x39}}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r7, 0x540d) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4639}, [@exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x2, 0x3, 0x4, 0x0, 0x50, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}]}, &(0x7f0000000140)='GPL\x00', 0x401, 0x0, 0x0, 0x2300, 0x2, '\x00', r6, 0x18, r7, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x8, 0xf1, 0x9}, 0x10, 0x0, r2, 0x0, &(0x7f00000002c0)=[r1, r1, r4, r1, r3, r3]}, 0x80) 14:53:15 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRESDEC=r1], 0x9) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000200)) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14:53:15 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_newneigh={0x30, 0x1c, 0x100, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x10, 0x8, 0x9}, [@NDA_IFINDEX={0x8, 0x8, r1}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x810) write$apparmor_exec(r0, 0x0, 0xf) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000140)={0x3}) 14:53:15 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) 14:53:15 executing program 4: ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x12, "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"}) socket(0x1e, 0x3, 0x1f) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x12, "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"}) (async) socket(0x1e, 0x3, 0x1f) (async) 14:53:15 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0xf) 14:53:15 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 64) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRESDEC=r1], 0x9) (rerun: 64) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000200)) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14:53:15 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRES64=r3], 0x9) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x7, 0x26, 0x40, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x8000, 0x10, 0xffff8001, 0x39}}) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r7, 0x540d) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4639}, [@exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x2, 0x3, 0x4, 0x0, 0x50, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}]}, &(0x7f0000000140)='GPL\x00', 0x401, 0x0, 0x0, 0x2300, 0x2, '\x00', r6, 0x18, r7, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x8, 0xf1, 0x9}, 0x10, 0x0, r2, 0x0, &(0x7f00000002c0)=[r1, r1, r4, r1, r3, r3]}, 0x80) 14:53:15 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) 14:53:15 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a1f94124e5b87559bdb27f60aaea9ac598810e133dbb022cf9aa4d82f3032985f37b21d8bd4d113f0ed8f54e8c3282862fd26fc8b735ac01e10ace65fae45a5a98159eed4a27a06efb93eba37c9efd9e07028b2fa26aaaeda811051c0725ef510e7fa09fe103bece0b3c5a4105b68436cf68485b94443032bea1975907cf7843a67bbffe4a07407410f1c794d338b7f408765051768835c6666907cd8378d7bdf26e8d2d6a26ade0c779d64fafc426c2940"], 0x9) 14:53:15 executing program 4: socket(0x15, 0x3, 0x0) 14:53:15 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_newneigh={0x30, 0x1c, 0x100, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x10, 0x8, 0x9}, [@NDA_IFINDEX={0x8, 0x8, r1}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x810) write$apparmor_exec(r0, 0x0, 0xf) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000140)={0x3}) 14:53:15 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCNXCL(r1, 0x540d) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYRES64=r3], 0x9) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) (async) ioctl$TIOCNXCL(r4, 0x540d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x7, 0x26, 0x40, @local, @dev={0xfe, 0x80, '\x00', 0x14}, 0x8000, 0x10, 0xffff8001, 0x39}}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r7, 0x540d) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4639}, [@exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x2, 0x3, 0x4, 0x0, 0x50, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}]}, &(0x7f0000000140)='GPL\x00', 0x401, 0x0, 0x0, 0x2300, 0x2, '\x00', r6, 0x18, r7, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x8, 0xf1, 0x9}, 0x10, 0x0, r2, 0x0, &(0x7f00000002c0)=[r1, r1, r4, r1, r3, r3]}, 0x80) 14:53:15 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 64) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRESDEC=r1], 0x9) (async, rerun: 64) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000200)) (async) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14:53:15 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) 14:53:15 executing program 4: socket(0x15, 0x3, 0x0) 14:53:15 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="650900000000000000d7554be08cb5293332923763f7529aa26c561424f510b1f48f77da3e8003a67893fc7590eb269a9cdbe8f60c65a90c3a8c9bdc2ecd8af8eafe4afd531c02ff814afa37c948dbc8317f3aab57f2fc4b1d797020d0a102166ab685cb14cf15629a67274201b4c662bed3300fbe5bc73c776a44331f66e765bbf3e300956d629d84ed5d518a14294c74e17e930ec96168688dac50dd"], 0x9) 14:53:15 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a1f94124e5b87559bdb27f60aaea9ac598810e133dbb022cf9aa4d82f3032985f37b21d8bd4d113f0ed8f54e8c3282862fd26fc8b735ac01e10ace65fae45a5a98159eed4a27a06efb93eba37c9efd9e07028b2fa26aaaeda811051c0725ef510e7fa09fe103bece0b3c5a4105b68436cf68485b94443032bea1975907cf7843a67bbffe4a07407410f1c794d338b7f408765051768835c6666907cd8378d7bdf26e8d2d6a26ade0c779d64fafc426c2940"], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a1f94124e5b87559bdb27f60aaea9ac598810e133dbb022cf9aa4d82f3032985f37b21d8bd4d113f0ed8f54e8c3282862fd26fc8b735ac01e10ace65fae45a5a98159eed4a27a06efb93eba37c9efd9e07028b2fa26aaaeda811051c0725ef510e7fa09fe103bece0b3c5a4105b68436cf68485b94443032bea1975907cf7843a67bbffe4a07407410f1c794d338b7f408765051768835c6666907cd8378d7bdf26e8d2d6a26ade0c779d64fafc426c2940"], 0x9) (async) 14:53:15 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x26, 0x5, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:15 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x68) 14:53:15 executing program 4: socket(0x15, 0x3, 0x0) 14:53:15 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$TIOCNXCL(r2, 0x540d) 14:53:15 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x68) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$apparmor_exec(r0, 0x0, 0x68) (async) 14:53:15 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="650900000000000000d7554be08cb5293332923763f7529aa26c561424f510b1f48f77da3e8003a67893fc7590eb269a9cdbe8f60c65a90c3a8c9bdc2ecd8af8eafe4afd531c02ff814afa37c948dbc8317f3aab57f2fc4b1d797020d0a102166ab685cb14cf15629a67274201b4c662bed3300fbe5bc73c776a44331f66e765bbf3e300956d629d84ed5d518a14294c74e17e930ec96168688dac50dd"], 0x9) 14:53:15 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket(0x26, 0x5, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:15 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a1f94124e5b87559bdb27f60aaea9ac598810e133dbb022cf9aa4d82f3032985f37b21d8bd4d113f0ed8f54e8c3282862fd26fc8b735ac01e10ace65fae45a5a98159eed4a27a06efb93eba37c9efd9e07028b2fa26aaaeda811051c0725ef510e7fa09fe103bece0b3c5a4105b68436cf68485b94443032bea1975907cf7843a67bbffe4a07407410f1c794d338b7f408765051768835c6666907cd8378d7bdf26e8d2d6a26ade0c779d64fafc426c2940"], 0x9) 14:53:15 executing program 4: socket(0x1, 0x3, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x10000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) 14:53:15 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x68) 14:53:15 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="650900000000000000d7554be08cb5293332923763f7529aa26c561424f510b1f48f77da3e8003a67893fc7590eb269a9cdbe8f60c65a90c3a8c9bdc2ecd8af8eafe4afd531c02ff814afa37c948dbc8317f3aab57f2fc4b1d797020d0a102166ab685cb14cf15629a67274201b4c662bed3300fbe5bc73c776a44331f66e765bbf3e300956d629d84ed5d518a14294c74e17e930ec96168688dac50dd"], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="650900000000000000d7554be08cb5293332923763f7529aa26c561424f510b1f48f77da3e8003a67893fc7590eb269a9cdbe8f60c65a90c3a8c9bdc2ecd8af8eafe4afd531c02ff814afa37c948dbc8317f3aab57f2fc4b1d797020d0a102166ab685cb14cf15629a67274201b4c662bed3300fbe5bc73c776a44331f66e765bbf3e300956d629d84ed5d518a14294c74e17e930ec96168688dac50dd"], 0x9) (async) 14:53:15 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket(0x26, 0x5, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:15 executing program 4: socket(0x1, 0x3, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x10000) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) 14:53:15 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100), 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r2, @ANYBLOB="d31a2d97ce661a1ed2d3c2877cde4ce2b44f50de1b2c7ba8bb2867", @ANYRESHEX=r2], 0xf) 14:53:15 executing program 2: ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000000c0)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000080)) 14:53:15 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:16 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x9) 14:53:16 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2, 0x80000000}) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:16 executing program 4: socket(0x1, 0x3, 0x0) (async) socket(0x1, 0x3, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x10000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) 14:53:16 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100), 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r2, @ANYBLOB="d31a2d97ce661a1ed2d3c2877cde4ce2b44f50de1b2c7ba8bb2867", @ANYRESHEX=r2], 0xf) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r2, @ANYBLOB="d31a2d97ce661a1ed2d3c2877cde4ce2b44f50de1b2c7ba8bb2867", @ANYRESHEX=r2], 0xf) 14:53:16 executing program 2: ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000000c0)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000080)) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000000c0)) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000080)) (async) 14:53:16 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:16 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x9) 14:53:16 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:16 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2, 0x80000000}) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2, 0x80000000}) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) 14:53:16 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x9) 14:53:16 executing program 4: socket(0x1, 0x3, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4007, 0x0}, 0xfffffdf9) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xff}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) 14:53:16 executing program 2: ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f00000000c0)) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000080)) 14:53:16 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100), 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r2, @ANYBLOB="d31a2d97ce661a1ed2d3c2877cde4ce2b44f50de1b2c7ba8bb2867", @ANYRESHEX=r2], 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100), 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r2, @ANYBLOB="d31a2d97ce661a1ed2d3c2877cde4ce2b44f50de1b2c7ba8bb2867", @ANYRESHEX=r2], 0xf) (async) 14:53:16 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000080)={@any, 0x10001, 0x5, 0x356}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x6, [0xae, 0x8ee, 0x0, 0x7fff, 0x0, 0x7ffffffffffffffd]}) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0xf) 14:53:16 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4a1136db125ec8c8727cf10f66"], 0x5) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80) ioctl$TIOCNXCL(r1, 0x540d) 14:53:16 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r2, 0x80000000}) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:16 executing program 4: socket(0x1, 0x3, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4007, 0x0}, 0xfffffdf9) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xff}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) 14:53:16 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:16 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100a, 0x1}) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0xf) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/11], 0xb) r2 = gettid() ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r2}) syz_open_dev$radio(&(0x7f0000000280), 0x3, 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf25510000000a000600ffffffffffff000005008a000300000005008a000300000005008a000300000005008a00020000000a000400080211000001000005008a0001000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 14:53:16 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000080)={@any, 0x10001, 0x5, 0x356}) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (rerun: 32) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x6, [0xae, 0x8ee, 0x0, 0x7fff, 0x0, 0x7ffffffffffffffd]}) (async) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0xf) 14:53:16 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4a1136db125ec8c8727cf10f66"], 0x5) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80) ioctl$TIOCNXCL(r1, 0x540d) 14:53:16 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="737800010000"], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r1, 0x8001, {0x0, 0x0, 0x0, 0x5, 0x473, 0x0, 0x5, 0x1, 0x8, "004d5db0540b12e52d2fdd2722e1661f1e17a47d022215fb0159704ef4eee1b28a6b352ea8b0cda0667fd17c4086a6e8e6685dfd6623a15e872a2925140ae879", "701341eb4b71989c49be127b8a93fb910b0eb9c7301ae3fd4492e8c0bc9474f942b99a696e47540b3f0c5a34b04c4c9c5b109e8625b68dbcd6dc4e7b9862f262", "f86ee000c9972187b587c24c9ff0f3eeeb6c77baeeaa8fc0e8b2a43bd007de2e", [0x8, 0x3]}}) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) 14:53:16 executing program 4: socket(0x1, 0x3, 0x0) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4007, 0x0}, 0xfffffdf9) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xff}, 0x8) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) 14:53:16 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:16 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100a, 0x1}) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0xf) (async) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/11], 0xb) r2 = gettid() ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r2}) (async) syz_open_dev$radio(&(0x7f0000000280), 0x3, 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf25510000000a000600ffffffffffff000005008a000300000005008a000300000005008a000300000005008a00020000000a000400080211000001000005008a0001000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 14:53:16 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4a1136db125ec8c8727cf10f66"], 0x5) socket$bt_bnep(0x1f, 0x3, 0x4) (async) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80) ioctl$TIOCNXCL(r1, 0x540d) 14:53:16 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000080)={@any, 0x10001, 0x5, 0x356}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x6, [0xae, 0x8ee, 0x0, 0x7fff, 0x0, 0x7ffffffffffffffd]}) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0xf) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000080)={@any, 0x10001, 0x5, 0x356}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x6, [0xae, 0x8ee, 0x0, 0x7fff, 0x0, 0x7ffffffffffffffd]}) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r2, 0x0, 0xf) (async) 14:53:16 executing program 4: socket(0x1e, 0x2, 0x0) 14:53:16 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:16 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="737800010000"], 0x9) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r1, 0x8001, {0x0, 0x0, 0x0, 0x5, 0x473, 0x0, 0x5, 0x1, 0x8, "004d5db0540b12e52d2fdd2722e1661f1e17a47d022215fb0159704ef4eee1b28a6b352ea8b0cda0667fd17c4086a6e8e6685dfd6623a15e872a2925140ae879", "701341eb4b71989c49be127b8a93fb910b0eb9c7301ae3fd4492e8c0bc9474f942b99a696e47540b3f0c5a34b04c4c9c5b109e8625b68dbcd6dc4e7b9862f262", "f86ee000c9972187b587c24c9ff0f3eeeb6c77baeeaa8fc0e8b2a43bd007de2e", [0x8, 0x3]}}) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) 14:53:16 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x57, 0x20, 0x6, 0x0, 0x800, 0x3f, 0x7f, 0x9e, 0x4, 0x40, 0x40, 0x81, 0x0, 0x4, 0xff, 0x81, 0xd4, 0x81, 0x16, '\x00', 0xff, 0x8000000000000}) 14:53:16 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 14:53:16 executing program 4: socket(0x1e, 0x2, 0x0) 14:53:16 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100a, 0x1}) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0xf) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/11], 0xb) gettid() (async) r2 = gettid() ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r2}) (async) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)={r2}) syz_open_dev$radio(&(0x7f0000000280), 0x3, 0x2) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000fddbdf25510000000a000600ffffffffffff000005008a000300000005008a000300000005008a000300000005008a00020000000a000400080211000001000005008a0001000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 14:53:16 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="737800010000"], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r1, 0x8001, {0x0, 0x0, 0x0, 0x5, 0x473, 0x0, 0x5, 0x1, 0x8, "004d5db0540b12e52d2fdd2722e1661f1e17a47d022215fb0159704ef4eee1b28a6b352ea8b0cda0667fd17c4086a6e8e6685dfd6623a15e872a2925140ae879", "701341eb4b71989c49be127b8a93fb910b0eb9c7301ae3fd4492e8c0bc9474f942b99a696e47540b3f0c5a34b04c4c9c5b109e8625b68dbcd6dc4e7b9862f262", "f86ee000c9972187b587c24c9ff0f3eeeb6c77baeeaa8fc0e8b2a43bd007de2e", [0x8, 0x3]}}) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="737800010000"], 0x9) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r1, 0x8001, {0x0, 0x0, 0x0, 0x5, 0x473, 0x0, 0x5, 0x1, 0x8, "004d5db0540b12e52d2fdd2722e1661f1e17a47d022215fb0159704ef4eee1b28a6b352ea8b0cda0667fd17c4086a6e8e6685dfd6623a15e872a2925140ae879", "701341eb4b71989c49be127b8a93fb910b0eb9c7301ae3fd4492e8c0bc9474f942b99a696e47540b3f0c5a34b04c4c9c5b109e8625b68dbcd6dc4e7b9862f262", "f86ee000c9972187b587c24c9ff0f3eeeb6c77baeeaa8fc0e8b2a43bd007de2e", [0x8, 0x3]}}) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) (async) 14:53:16 executing program 2: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {@fixed}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x2, 0x2, 0x5, 0x208, 0x1, 0x20, '\x00', r1, r2, 0x5, 0x4}, 0x48) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:16 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x57, 0x20, 0x6, 0x0, 0x800, 0x3f, 0x7f, 0x9e, 0x4, 0x40, 0x40, 0x81, 0x0, 0x4, 0xff, 0x81, 0xd4, 0x81, 0x16, '\x00', 0xff, 0x8000000000000}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x57, 0x20, 0x6, 0x0, 0x800, 0x3f, 0x7f, 0x9e, 0x4, 0x40, 0x40, 0x81, 0x0, 0x4, 0xff, 0x81, 0xd4, 0x81, 0x16, '\x00', 0xff, 0x8000000000000}) (async) 14:53:16 executing program 4: socket(0x1e, 0x2, 0x0) 14:53:16 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) (async, rerun: 32) ioctl$TIOCNXCL(r0, 0x540d) (async, rerun: 32) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) 14:53:16 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getnexthop={0x44, 0x6a, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r3}, @NHA_FDB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20080800}, 0x40) 14:53:16 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xe1, 0x7fffffff, 0x24, @local, @loopback, 0x40, 0x1, 0x200, 0x8}}) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, 0x0, 0xa01, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xb1, 0xc5, "fc37d195a26e23ea8907e5e781068440c03077065ce9b0e268d67bc37f65d988ef5dcda2c21200d6699f8ca73772319503a0ab70084041af1e33de457a51b1ff4d6cc56bd462163a78a3fe5157ebcd7df80347df3a2386e8279f793c3963fe7c0207d029ada6be09be6fd885c21969a0031ae44afaced2a0aadf6289a6a4207ecad2b29c8b37747d99aeaab80a096d2f175b0a4781c12d489b1a20ae155bf156ba1bf10d7452a25e5c342d11ba"}, @NL80211_ATTR_VENDOR_DATA={0x75, 0xc5, "dded9437ae7ee3efa6a610d1d755a1f446ed621f2a2d4bd0fe0f9aa27d527efb6833242ec0734109acd1b0e6fcca83c675a0b3ff5f3a550f84b64bd522813a03ee72d3c37414e2a041ee7a0ed58024e0747a599105241e6d53d27e40ca27764852ff08eed6e7346f2fa65f9d885435bbdb"}]}, 0x150}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd9}, [@exit, @generic={0x8, 0x8, 0xf, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x4, 0x0, 0x2, 0x18, 0x10}, @jmp={0x5, 0x0, 0x7, 0x3, 0x6, 0xfffffffffffffffc, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xc, 0x2, 0x6, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00, 0x0, '\x00', r2, 0x1e, r3, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x8, 0x80000000, 0x3}, 0x10, 0x0, r4, 0x0, &(0x7f00000002c0)=[r5, 0x1, r6, 0x1, 0xffffffffffffffff]}, 0x80) 14:53:16 executing program 2: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {@fixed}]}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x2, 0x2, 0x5, 0x208, 0x1, 0x20, '\x00', r1, r2, 0x5, 0x4}, 0x48) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:16 executing program 4: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:16 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x57, 0x20, 0x6, 0x0, 0x800, 0x3f, 0x7f, 0x9e, 0x4, 0x40, 0x40, 0x81, 0x0, 0x4, 0xff, 0x81, 0xd4, 0x81, 0x16, '\x00', 0xff, 0x8000000000000}) 14:53:16 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', '/proc/thread-self/attr/exec\x00'}, 0x22) (async) 14:53:17 executing program 2: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {@fixed}]}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) (rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x2, 0x2, 0x5, 0x208, 0x1, 0x20, '\x00', r1, r2, 0x5, 0x4}, 0x48) (async) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:17 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getnexthop={0x44, 0x6a, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r3}, @NHA_FDB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20080800}, 0x40) 14:53:17 executing program 4: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) [ 992.089472] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:17 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xe1, 0x7fffffff, 0x24, @local, @loopback, 0x40, 0x1, 0x200, 0x8}}) (async, rerun: 64) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async, rerun: 64) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, 0x0, 0xa01, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xb1, 0xc5, "fc37d195a26e23ea8907e5e781068440c03077065ce9b0e268d67bc37f65d988ef5dcda2c21200d6699f8ca73772319503a0ab70084041af1e33de457a51b1ff4d6cc56bd462163a78a3fe5157ebcd7df80347df3a2386e8279f793c3963fe7c0207d029ada6be09be6fd885c21969a0031ae44afaced2a0aadf6289a6a4207ecad2b29c8b37747d99aeaab80a096d2f175b0a4781c12d489b1a20ae155bf156ba1bf10d7452a25e5c342d11ba"}, @NL80211_ATTR_VENDOR_DATA={0x75, 0xc5, "dded9437ae7ee3efa6a610d1d755a1f446ed621f2a2d4bd0fe0f9aa27d527efb6833242ec0734109acd1b0e6fcca83c675a0b3ff5f3a550f84b64bd522813a03ee72d3c37414e2a041ee7a0ed58024e0747a599105241e6d53d27e40ca27764852ff08eed6e7346f2fa65f9d885435bbdb"}]}, 0x150}, 0x1, 0x0, 0x0, 0x8080}, 0x1) (rerun: 64) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd9}, [@exit, @generic={0x8, 0x8, 0xf, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x4, 0x0, 0x2, 0x18, 0x10}, @jmp={0x5, 0x0, 0x7, 0x3, 0x6, 0xfffffffffffffffc, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xc, 0x2, 0x6, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00, 0x0, '\x00', r2, 0x1e, r3, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x8, 0x80000000, 0x3}, 0x10, 0x0, r4, 0x0, &(0x7f00000002c0)=[r5, 0x1, r6, 0x1, 0xffffffffffffffff]}, 0x80) 14:53:17 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:17 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a7ee49a92dc2e6b7d2867e4102e85ea683549eadc04ae50977fc4ed55af4bd88426250344d6e8b508b6bca88fff853f096a18e29baafd"], 0x9) 14:53:17 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) 14:53:17 executing program 4: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:17 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getnexthop={0x44, 0x6a, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r3}, @NHA_FDB={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20080800}, 0x40) 14:53:17 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) 14:53:17 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a7ee49a92dc2e6b7d2867e4102e85ea683549eadc04ae50977fc4ed55af4bd88426250344d6e8b508b6bca88fff853f096a18e29baafd"], 0x9) 14:53:17 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xe1, 0x7fffffff, 0x24, @local, @loopback, 0x40, 0x1, 0x200, 0x8}}) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, 0x0, 0xa01, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xb1, 0xc5, "fc37d195a26e23ea8907e5e781068440c03077065ce9b0e268d67bc37f65d988ef5dcda2c21200d6699f8ca73772319503a0ab70084041af1e33de457a51b1ff4d6cc56bd462163a78a3fe5157ebcd7df80347df3a2386e8279f793c3963fe7c0207d029ada6be09be6fd885c21969a0031ae44afaced2a0aadf6289a6a4207ecad2b29c8b37747d99aeaab80a096d2f175b0a4781c12d489b1a20ae155bf156ba1bf10d7452a25e5c342d11ba"}, @NL80211_ATTR_VENDOR_DATA={0x75, 0xc5, "dded9437ae7ee3efa6a610d1d755a1f446ed621f2a2d4bd0fe0f9aa27d527efb6833242ec0734109acd1b0e6fcca83c675a0b3ff5f3a550f84b64bd522813a03ee72d3c37414e2a041ee7a0ed58024e0747a599105241e6d53d27e40ca27764852ff08eed6e7346f2fa65f9d885435bbdb"}]}, 0x150}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd9}, [@exit, @generic={0x8, 0x8, 0xf, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x4, 0x0, 0x2, 0x18, 0x10}, @jmp={0x5, 0x0, 0x7, 0x3, 0x6, 0xfffffffffffffffc, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xc, 0x2, 0x6, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00, 0x0, '\x00', r2, 0x1e, r3, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x8, 0x80000000, 0x3}, 0x10, 0x0, r4, 0x0, &(0x7f00000002c0)=[r5, 0x1, r6, 0x1, 0xffffffffffffffff]}, 0x80) [ 992.278639] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:17 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) (async) 14:53:17 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73996509203a"], 0x9) getitimer(0x2, &(0x7f0000000080)) 14:53:17 executing program 4: r0 = socket(0x25, 0x3, 0xffffffff) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xff}, 0x2) 14:53:17 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:17 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x8, 0x2, 0x18) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000040)=0x2) write$apparmor_exec(r1, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:17 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a7ee49a92dc2e6b7d2867e4102e85ea683549eadc04ae50977fc4ed55af4bd88426250344d6e8b508b6bca88fff853f096a18e29baafd"], 0x9) [ 992.390735] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:17 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) 14:53:17 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73996509203a"], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73996509203a"], 0x9) getitimer(0x2, &(0x7f0000000080)) 14:53:17 executing program 4: socket(0x25, 0x3, 0xffffffff) (async) r0 = socket(0x25, 0x3, 0xffffffff) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xff}, 0x2) 14:53:17 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:17 executing program 0: r0 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, r0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="65786563203a2e2d0038445d20d4b42e57222efe7114facf0e4e43ebb00e29ba61bb87cdbba6f8cfa21e12bc3f78fcc7b5170968dd9b12610be0cadb05d726236599b59a15408c6394cd43f02112ef16caa95f5c000373b55afaea367fb6169a7daf5d32414256740397d18cd4bba6a1cba3ff0d4c8b203b985aefd640b3efd08b55d146626efa15f6a2dcf42745cc825906ef786d4b9d20a6fabab703c1113993de282503bf5a48bb4097bf55d706b34dbe54b7ff6095880dec35021d79fb862c655b79f6622439b10b3301de4fb99472b312382e86858743d6eb3c0f2d5d8abb904bf9d87e5c9b213415c0f0dc"], 0x9) 14:53:17 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x8, 0x2, 0x18) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000040)=0x2) (async) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000040)=0x2) write$apparmor_exec(r1, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:17 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}, @register_looper, @request_death={0x400c630e, 0x3}, @acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x2, 0x23}, @flat=@weak_binder, @fda={0x66646185, 0xa, 0x0, 0xc}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x400}], 0xfb, 0x0, &(0x7f0000000180)="8f89fb2d04ed52c0c61b20aebf8a470954e4671376c878713119096d82c4029c05c73c9ecce55634ab0f40d71112d00a1e2b51de51752c5c5c35b85b463836761d6d9021ccfebf64664699f65f11e5916e7a32f42dd908228c16ec3deb7b08879443945e5ca55ef3cdd3518b4229bdc677664efbae6c056b14c14d2b3abf4c2890e1e43fa7a8e5e6e5505fcc1613ac0f5a004ab8aba1076fdfac32f1b1977106078695c3371f669668ae44fb82f423fecbbecca85349326dce7b9569db43efe7897d311ed39ffbe353ce9ec355e81e4fb597951f3c954c09b8acca48ed024198300d3acb12362c2c86ad564dc3f3829529e0da8dc0baddf15cdc38"}) 14:53:17 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73996509203a"], 0x9) getitimer(0x2, &(0x7f0000000080)) 14:53:17 executing program 4: r0 = socket(0x25, 0x3, 0xffffffff) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xff}, 0x2) 14:53:17 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async, rerun: 64) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async, rerun: 64) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r2 = socket(0x8, 0x2, 0x18) (rerun: 64) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000040)=0x2) (async) write$apparmor_exec(r1, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:17 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}, @register_looper, @request_death={0x400c630e, 0x3}, @acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x2, 0x23}, @flat=@weak_binder, @fda={0x66646185, 0xa, 0x0, 0xc}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x400}], 0xfb, 0x0, &(0x7f0000000180)="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"}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x9) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}, @register_looper, @request_death={0x400c630e, 0x3}, @acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x2, 0x23}, @flat=@weak_binder, @fda={0x66646185, 0xa, 0x0, 0xc}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x400}], 0xfb, 0x0, &(0x7f0000000180)="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"}) (async) 14:53:17 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {}]}) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x9) 14:53:17 executing program 0: r0 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, r0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="65786563203a2e2d0038445d20d4b42e57222efe7114facf0e4e43ebb00e29ba61bb87cdbba6f8cfa21e12bc3f78fcc7b5170968dd9b12610be0cadb05d726236599b59a15408c6394cd43f02112ef16caa95f5c000373b55afaea367fb6169a7daf5d32414256740397d18cd4bba6a1cba3ff0d4c8b203b985aefd640b3efd08b55d146626efa15f6a2dcf42745cc825906ef786d4b9d20a6fabab703c1113993de282503bf5a48bb4097bf55d706b34dbe54b7ff6095880dec35021d79fb862c655b79f6622439b10b3301de4fb99472b312382e86858743d6eb3c0f2d5d8abb904bf9d87e5c9b213415c0f0dc"], 0x9) add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r0) (async) keyctl$search(0xa, 0x0, &(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, r0) (async) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="65786563203a2e2d0038445d20d4b42e57222efe7114facf0e4e43ebb00e29ba61bb87cdbba6f8cfa21e12bc3f78fcc7b5170968dd9b12610be0cadb05d726236599b59a15408c6394cd43f02112ef16caa95f5c000373b55afaea367fb6169a7daf5d32414256740397d18cd4bba6a1cba3ff0d4c8b203b985aefd640b3efd08b55d146626efa15f6a2dcf42745cc825906ef786d4b9d20a6fabab703c1113993de282503bf5a48bb4097bf55d706b34dbe54b7ff6095880dec35021d79fb862c655b79f6622439b10b3301de4fb99472b312382e86858743d6eb3c0f2d5d8abb904bf9d87e5c9b213415c0f0dc"], 0x9) (async) 14:53:17 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x100100000, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) socket(0xb, 0x6, 0x401) 14:53:17 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {}]}) (async) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x9) 14:53:17 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x74, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}, @register_looper, @request_death={0x400c630e, 0x3}, @acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x0, 0x2, 0x23}, @flat=@weak_binder, @fda={0x66646185, 0xa, 0x0, 0xc}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x400}], 0xfb, 0x0, &(0x7f0000000180)="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"}) 14:53:17 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:17 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:17 executing program 0: add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) r0 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$search(0xa, 0x0, &(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, r0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="65786563203a2e2d0038445d20d4b42e57222efe7114facf0e4e43ebb00e29ba61bb87cdbba6f8cfa21e12bc3f78fcc7b5170968dd9b12610be0cadb05d726236599b59a15408c6394cd43f02112ef16caa95f5c000373b55afaea367fb6169a7daf5d32414256740397d18cd4bba6a1cba3ff0d4c8b203b985aefd640b3efd08b55d146626efa15f6a2dcf42745cc825906ef786d4b9d20a6fabab703c1113993de282503bf5a48bb4097bf55d706b34dbe54b7ff6095880dec35021d79fb862c655b79f6622439b10b3301de4fb99472b312382e86858743d6eb3c0f2d5d8abb904bf9d87e5c9b213415c0f0dc"], 0x9) 14:53:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x100100000, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) (async) socket(0xb, 0x6, 0x401) 14:53:17 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{}, {}]}) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x9) (async) write$apparmor_exec(r2, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x9) 14:53:17 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0xf) 14:53:17 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', ':.-\x00Q\x9e?L\xcc[f\xd2\x04\xdc\xebD\xd4Wv\xa6\x92\x13\xc9\xa0\xf7\xe1\x9b\xf8\x02\xd2\x8ca\x19\x17[\xdc^\xc2\ajPi\x88\xc8\x10C\x0e\xe2\xa2.q\xfe\x028\x04\xa2\xac\x883\x15\x89PMW=\x91p\x8cC\xd3e@\xb1\xc8\xb1\xe7\xb1v,\xd1\xac8K\xede\xa1YQ\x01D0[\xa2\xeaY\x0e\x02\xd3\x85\xc3\xb4H>y\apU\xa4\xe4\xae\xe3V\x1b\xf1\x80\x1bfTCl\r\x11\xf6\x1f\x85\xf4\xec\xd8\xfei\xdc\xb5]/\x15QC\xe4\xe6\x94\xdf\x99\x9e\x90\xd9?\xb1\b\x06#\x8b\xb7u]\x17\xc5>\x05\xeb\x05\xcae\x9cV\x8c\xd0\xb4;\f\x92\fc\xa0\x89Ds\x8d0\b\xd0\xf6\xc6\x8f\xf9\xd7V\xb9x\xb6\xe5a\xf02gVU'}, 0xc9) 14:53:17 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a91c47a80658d20efaaca1bdbb36170ed047b404cceb831ab08f6ed22a0b5ace57b163384045fc31c324bd1bebc3d4172affe578ea0fb4d348e98e47db934d4cb7be390af27e10975616cface98ba47341a1bb011aaa83122f69bd74f5c3e35d00a6390024ca7dcd7d91b796e6c7856f7474d4427e8849fabc0f1e51f84c1ef5a45d4f1e671f7541aba14bc4d08499e5911bb99d6b6e338c5ff2b9d94b6affca77e42668bb823a3ed1346f9986d8201b04acf0596bf3bf527bd34610943c5bb1468d9a1c90bb89a34f24ab415072cafd417747dce8e13"], 0x9) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 14:53:17 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x100100000, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) (async) socket(0xb, 0x6, 0x401) 14:53:17 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x410, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getstats={0x1c, 0x5e, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '\x00'}, 0x6) 14:53:17 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0xf) 14:53:17 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', ':.-\x00Q\x9e?L\xcc[f\xd2\x04\xdc\xebD\xd4Wv\xa6\x92\x13\xc9\xa0\xf7\xe1\x9b\xf8\x02\xd2\x8ca\x19\x17[\xdc^\xc2\ajPi\x88\xc8\x10C\x0e\xe2\xa2.q\xfe\x028\x04\xa2\xac\x883\x15\x89PMW=\x91p\x8cC\xd3e@\xb1\xc8\xb1\xe7\xb1v,\xd1\xac8K\xede\xa1YQ\x01D0[\xa2\xeaY\x0e\x02\xd3\x85\xc3\xb4H>y\apU\xa4\xe4\xae\xe3V\x1b\xf1\x80\x1bfTCl\r\x11\xf6\x1f\x85\xf4\xec\xd8\xfei\xdc\xb5]/\x15QC\xe4\xe6\x94\xdf\x99\x9e\x90\xd9?\xb1\b\x06#\x8b\xb7u]\x17\xc5>\x05\xeb\x05\xcae\x9cV\x8c\xd0\xb4;\f\x92\fc\xa0\x89Ds\x8d0\b\xd0\xf6\xc6\x8f\xf9\xd7V\xb9x\xb6\xe5a\xf02gVU'}, 0xc9) 14:53:17 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a91c47a80658d20efaaca1bdbb36170ed047b404cceb831ab08f6ed22a0b5ace57b163384045fc31c324bd1bebc3d4172affe578ea0fb4d348e98e47db934d4cb7be390af27e10975616cface98ba47341a1bb011aaa83122f69bd74f5c3e35d00a6390024ca7dcd7d91b796e6c7856f7474d4427e8849fabc0f1e51f84c1ef5a45d4f1e671f7541aba14bc4d08499e5911bb99d6b6e338c5ff2b9d94b6affca77e42668bb823a3ed1346f9986d8201b04acf0596bf3bf527bd34610943c5bb1468d9a1c90bb89a34f24ab415072cafd417747dce8e13"], 0x9) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 14:53:17 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:18 executing program 4: r0 = socket(0x1, 0x4, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1, 0xd3}) 14:53:18 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x410, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x14) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getstats={0x1c, 0x5e, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '\x00'}, 0x6) [ 993.080987] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:18 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', ':.-\x00Q\x9e?L\xcc[f\xd2\x04\xdc\xebD\xd4Wv\xa6\x92\x13\xc9\xa0\xf7\xe1\x9b\xf8\x02\xd2\x8ca\x19\x17[\xdc^\xc2\ajPi\x88\xc8\x10C\x0e\xe2\xa2.q\xfe\x028\x04\xa2\xac\x883\x15\x89PMW=\x91p\x8cC\xd3e@\xb1\xc8\xb1\xe7\xb1v,\xd1\xac8K\xede\xa1YQ\x01D0[\xa2\xeaY\x0e\x02\xd3\x85\xc3\xb4H>y\apU\xa4\xe4\xae\xe3V\x1b\xf1\x80\x1bfTCl\r\x11\xf6\x1f\x85\xf4\xec\xd8\xfei\xdc\xb5]/\x15QC\xe4\xe6\x94\xdf\x99\x9e\x90\xd9?\xb1\b\x06#\x8b\xb7u]\x17\xc5>\x05\xeb\x05\xcae\x9cV\x8c\xd0\xb4;\f\x92\fc\xa0\x89Ds\x8d0\b\xd0\xf6\xc6\x8f\xf9\xd7V\xb9x\xb6\xe5a\xf02gVU'}, 0xc9) 14:53:18 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x8, 0x4) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, 0x0, 0xf) 14:53:18 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a91c47a80658d20efaaca1bdbb36170ed047b404cceb831ab08f6ed22a0b5ace57b163384045fc31c324bd1bebc3d4172affe578ea0fb4d348e98e47db934d4cb7be390af27e10975616cface98ba47341a1bb011aaa83122f69bd74f5c3e35d00a6390024ca7dcd7d91b796e6c7856f7474d4427e8849fabc0f1e51f84c1ef5a45d4f1e671f7541aba14bc4d08499e5911bb99d6b6e338c5ff2b9d94b6affca77e42668bb823a3ed1346f9986d8201b04acf0596bf3bf527bd34610943c5bb1468d9a1c90bb89a34f24ab415072cafd417747dce8e13"], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a91c47a80658d20efaaca1bdbb36170ed047b404cceb831ab08f6ed22a0b5ace57b163384045fc31c324bd1bebc3d4172affe578ea0fb4d348e98e47db934d4cb7be390af27e10975616cface98ba47341a1bb011aaa83122f69bd74f5c3e35d00a6390024ca7dcd7d91b796e6c7856f7474d4427e8849fabc0f1e51f84c1ef5a45d4f1e671f7541aba14bc4d08499e5911bb99d6b6e338c5ff2b9d94b6affca77e42668bb823a3ed1346f9986d8201b04acf0596bf3bf527bd34610943c5bb1468d9a1c90bb89a34f24ab415072cafd417747dce8e13"], 0x9) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 14:53:18 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) 14:53:18 executing program 4: r0 = socket(0x1, 0x4, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1, 0xd3}) 14:53:18 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '{.,\'..*[-}///[\x00'}, 0x15) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:18 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfffc}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x20}, @NL80211_ATTR_IE={0x131, 0x2a, [@perr={0x84, 0x123, {0x8, 0x13, [@ext={{}, @broadcast, 0x7fff, @device_a, 0x2b}, @not_ext={{}, @device_a, 0x6, "", 0x8}, @not_ext={{}, @broadcast, 0x8, "", 0x1}, @not_ext={{}, @broadcast, 0x3, "", 0x3d}, @ext={{}, @device_b, 0x8c4d, @broadcast, 0x2e}, @ext={{}, @device_b, 0x1, @broadcast, 0x11}, @not_ext={{}, @device_b, 0x401, "", 0x40}, @ext={{}, @device_a, 0x8, @device_a, 0x3c}, @not_ext={{}, @device_a, 0x4, "", 0x14}, @not_ext={{}, @device_a, 0x200, "", 0x3a}, @ext={{}, @broadcast, 0x9, @broadcast, 0x24}, @ext={{}, @device_b, 0xd4, @device_b, 0xa}, @not_ext={{}, @device_a, 0xfffff687, "", 0x29}, @ext={{}, @broadcast, 0x4, @broadcast, 0x16}, @not_ext={{}, @device_a, 0x0, "", 0x30}, @not_ext={{}, @broadcast, 0xff, "", 0x9}, @not_ext={{}, @device_a, 0xe85, "", 0x3f}, @not_ext={{}, @device_b, 0x7c, "", 0x1}, @not_ext={{}, @device_b, 0x3, "", 0x1b}]}}, @mesh_chsw={0x76, 0x6, {0x2, 0x8, 0x15}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffc}, @NL80211_ATTR_IE={0x1d, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xccc4}, @NL80211_ATTR_IE={0x22, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x19, 0x14, "9abe4a5da75e551a7263c68ed3877b458cd56e66"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3664}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8c}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x40088c1) write$apparmor_exec(r0, 0x0, 0xf) 14:53:18 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:18 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x410, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getstats={0x1c, 0x5e, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '\x00'}, 0x6) 14:53:18 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) [ 993.257830] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:18 executing program 4: r0 = socket(0x1, 0x4, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1, 0xd3}) 14:53:18 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfffc}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x20}, @NL80211_ATTR_IE={0x131, 0x2a, [@perr={0x84, 0x123, {0x8, 0x13, [@ext={{}, @broadcast, 0x7fff, @device_a, 0x2b}, @not_ext={{}, @device_a, 0x6, "", 0x8}, @not_ext={{}, @broadcast, 0x8, "", 0x1}, @not_ext={{}, @broadcast, 0x3, "", 0x3d}, @ext={{}, @device_b, 0x8c4d, @broadcast, 0x2e}, @ext={{}, @device_b, 0x1, @broadcast, 0x11}, @not_ext={{}, @device_b, 0x401, "", 0x40}, @ext={{}, @device_a, 0x8, @device_a, 0x3c}, @not_ext={{}, @device_a, 0x4, "", 0x14}, @not_ext={{}, @device_a, 0x200, "", 0x3a}, @ext={{}, @broadcast, 0x9, @broadcast, 0x24}, @ext={{}, @device_b, 0xd4, @device_b, 0xa}, @not_ext={{}, @device_a, 0xfffff687, "", 0x29}, @ext={{}, @broadcast, 0x4, @broadcast, 0x16}, @not_ext={{}, @device_a, 0x0, "", 0x30}, @not_ext={{}, @broadcast, 0xff, "", 0x9}, @not_ext={{}, @device_a, 0xe85, "", 0x3f}, @not_ext={{}, @device_b, 0x7c, "", 0x1}, @not_ext={{}, @device_b, 0x3, "", 0x1b}]}}, @mesh_chsw={0x76, 0x6, {0x2, 0x8, 0x15}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffc}, @NL80211_ATTR_IE={0x1d, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xccc4}, @NL80211_ATTR_IE={0x22, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x19, 0x14, "9abe4a5da75e551a7263c68ed3877b458cd56e66"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3664}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8c}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x40088c1) write$apparmor_exec(r0, 0x0, 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfffc}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x20}, @NL80211_ATTR_IE={0x131, 0x2a, [@perr={0x84, 0x123, {0x8, 0x13, [@ext={{}, @broadcast, 0x7fff, @device_a, 0x2b}, @not_ext={{}, @device_a, 0x6, "", 0x8}, @not_ext={{}, @broadcast, 0x8, "", 0x1}, @not_ext={{}, @broadcast, 0x3, "", 0x3d}, @ext={{}, @device_b, 0x8c4d, @broadcast, 0x2e}, @ext={{}, @device_b, 0x1, @broadcast, 0x11}, @not_ext={{}, @device_b, 0x401, "", 0x40}, @ext={{}, @device_a, 0x8, @device_a, 0x3c}, @not_ext={{}, @device_a, 0x4, "", 0x14}, @not_ext={{}, @device_a, 0x200, "", 0x3a}, @ext={{}, @broadcast, 0x9, @broadcast, 0x24}, @ext={{}, @device_b, 0xd4, @device_b, 0xa}, @not_ext={{}, @device_a, 0xfffff687, "", 0x29}, @ext={{}, @broadcast, 0x4, @broadcast, 0x16}, @not_ext={{}, @device_a, 0x0, "", 0x30}, @not_ext={{}, @broadcast, 0xff, "", 0x9}, @not_ext={{}, @device_a, 0xe85, "", 0x3f}, @not_ext={{}, @device_b, 0x7c, "", 0x1}, @not_ext={{}, @device_b, 0x3, "", 0x1b}]}}, @mesh_chsw={0x76, 0x6, {0x2, 0x8, 0x15}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffc}, @NL80211_ATTR_IE={0x1d, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xccc4}, @NL80211_ATTR_IE={0x22, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x19, 0x14, "9abe4a5da75e551a7263c68ed3877b458cd56e66"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3664}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8c}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x40088c1) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) 14:53:18 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '{.,\'..*[-}///[\x00'}, 0x15) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:18 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:18 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="b70000000000"], 0x9) [ 993.394254] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:18 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) 14:53:18 executing program 4: socket(0x28, 0x3, 0x0) 14:53:18 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 64) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', '{.,\'..*[-}///[\x00'}, 0x15) (async, rerun: 64) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:18 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfffc}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x20}, @NL80211_ATTR_IE={0x131, 0x2a, [@perr={0x84, 0x123, {0x8, 0x13, [@ext={{}, @broadcast, 0x7fff, @device_a, 0x2b}, @not_ext={{}, @device_a, 0x6, "", 0x8}, @not_ext={{}, @broadcast, 0x8, "", 0x1}, @not_ext={{}, @broadcast, 0x3, "", 0x3d}, @ext={{}, @device_b, 0x8c4d, @broadcast, 0x2e}, @ext={{}, @device_b, 0x1, @broadcast, 0x11}, @not_ext={{}, @device_b, 0x401, "", 0x40}, @ext={{}, @device_a, 0x8, @device_a, 0x3c}, @not_ext={{}, @device_a, 0x4, "", 0x14}, @not_ext={{}, @device_a, 0x200, "", 0x3a}, @ext={{}, @broadcast, 0x9, @broadcast, 0x24}, @ext={{}, @device_b, 0xd4, @device_b, 0xa}, @not_ext={{}, @device_a, 0xfffff687, "", 0x29}, @ext={{}, @broadcast, 0x4, @broadcast, 0x16}, @not_ext={{}, @device_a, 0x0, "", 0x30}, @not_ext={{}, @broadcast, 0xff, "", 0x9}, @not_ext={{}, @device_a, 0xe85, "", 0x3f}, @not_ext={{}, @device_b, 0x7c, "", 0x1}, @not_ext={{}, @device_b, 0x3, "", 0x1b}]}}, @mesh_chsw={0x76, 0x6, {0x2, 0x8, 0x15}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffc}, @NL80211_ATTR_IE={0x1d, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x6}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xccc4}, @NL80211_ATTR_IE={0x22, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x19, 0x14, "9abe4a5da75e551a7263c68ed3877b458cd56e66"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3664}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8c}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x40088c1) write$apparmor_exec(r0, 0x0, 0xf) 14:53:18 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) 14:53:18 executing program 4: socket(0x28, 0x3, 0x0) 14:53:18 executing program 3: sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x100, 0x70b52c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, &(0x7f0000000040)}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000100)={"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"}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000500)) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:18 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="b70000000000"], 0x9) 14:53:18 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000100)=0x1336) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getaddr={0x9c, 0x16, 0x400, 0x70bd2a, 0x25dfdbfd, {0xa, 0x8, 0x50}, [@IFA_CACHEINFO={0x14, 0x6, {0xa6, 0xa5, 0x80000001, 0x80}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x800}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x7fffffff, 0x80000001, 0x4}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004080) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000280)={0x2, 0xc, 0x4, 0x20, 0x40, {}, {0x2, 0x2, 0xd4, 0x0, 0x4, 0x1, "9761e2e2"}, 0xdec, 0x4, {}, 0x401}) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0xfffffffffffffffa) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)={0x8000, 0x4}) 14:53:18 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) write$apparmor_exec(r0, 0x0, 0xf) 14:53:18 executing program 4: socket(0x28, 0x3, 0x0) 14:53:18 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) 14:53:18 executing program 3: sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x100, 0x70b52c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, &(0x7f0000000040)}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000100)={"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"}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000500)) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x100, 0x70b52c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, &(0x7f0000000040)}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000100)={"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"}) (async) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000500)) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) 14:53:18 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="b70000000000"], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="b70000000000"], 0x9) 14:53:18 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000100)=0x1336) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getaddr={0x9c, 0x16, 0x400, 0x70bd2a, 0x25dfdbfd, {0xa, 0x8, 0x50}, [@IFA_CACHEINFO={0x14, 0x6, {0xa6, 0xa5, 0x80000001, 0x80}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x800}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x7fffffff, 0x80000001, 0x4}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004080) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000280)={0x2, 0xc, 0x4, 0x20, 0x40, {}, {0x2, 0x2, 0xd4, 0x0, 0x4, 0x1, "9761e2e2"}, 0xdec, 0x4, {}, 0x401}) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0xfffffffffffffffa) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)={0x8000, 0x4}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000100)=0x1336) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getaddr={0x9c, 0x16, 0x400, 0x70bd2a, 0x25dfdbfd, {0xa, 0x8, 0x50}, [@IFA_CACHEINFO={0x14, 0x6, {0xa6, 0xa5, 0x80000001, 0x80}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x800}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x7fffffff, 0x80000001, 0x4}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004080) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000280)={0x2, 0xc, 0x4, 0x20, 0x40, {}, {0x2, 0x2, 0xd4, 0x0, 0x4, 0x1, "9761e2e2"}, 0xdec, 0x4, {}, 0x401}) (async) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0xfffffffffffffffa) (async) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)={0x8000, 0x4}) (async) [ 993.696624] kauditd_printk_skb: 45 callbacks suppressed [ 993.696635] audit: type=1400 audit(1676818398.617:1499): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=20047 comm="syz-executor.0" 14:53:18 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) (async) write$apparmor_exec(r0, 0x0, 0xf) 14:53:18 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fbdfdf250f000000050000008f59ceb0ce945199c44f5d5a"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000000)={0x7}) socket(0x8, 0x6, 0x0) 14:53:18 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) 14:53:18 executing program 3: sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x100, 0x70b52c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x53}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44000) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, &(0x7f0000000040)}) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 64) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000100)={"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"}) (rerun: 64) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000500)) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:18 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0xfffffffffffffffd) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$reject(0x13, 0x0, 0x4aa, 0x199, r1) 14:53:18 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) 14:53:18 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 32) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) (rerun: 32) write$apparmor_exec(r0, 0x0, 0xf) [ 993.851408] audit: type=1400 audit(1676818398.767:1500): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=20062 comm="syz-executor.0" 14:53:18 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000100)=0x1336) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getaddr={0x9c, 0x16, 0x400, 0x70bd2a, 0x25dfdbfd, {0xa, 0x8, 0x50}, [@IFA_CACHEINFO={0x14, 0x6, {0xa6, 0xa5, 0x80000001, 0x80}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x800}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x7fffffff, 0x80000001, 0x4}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004080) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000280)={0x2, 0xc, 0x4, 0x20, 0x40, {}, {0x2, 0x2, 0xd4, 0x0, 0x4, 0x1, "9761e2e2"}, 0xdec, 0x4, {}, 0x401}) (async) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0xfffffffffffffffa) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)={0x8000, 0x4}) 14:53:18 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fbdfdf250f000000050000008f59ceb0ce945199c44f5d5a"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async, rerun: 64) ioctl$TIOCNXCL(r0, 0x540d) (rerun: 64) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000000)={0x7}) socket(0x8, 0x6, 0x0) 14:53:18 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) keyctl$search(0xa, 0x0, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0xfffffffffffffffd) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x1) (async) r1 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r1) (async) keyctl$reject(0x13, 0x0, 0x4aa, 0x199, r1) 14:53:18 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fbdfdf250f000000050000008f59ceb0ce945199c44f5d5a"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000000)={0x7}) socket(0x8, 0x6, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fbdfdf250f000000050000008f59ceb0ce945199c44f5d5a"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000000)={0x7}) (async) socket(0x8, 0x6, 0x0) (async) [ 993.942519] audit: type=1400 audit(1676818398.857:1501): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20089 comm="syz-executor.1" 14:53:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1f}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x48884) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7fff) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x4, 0x800, 0x1, 0x2, 0xc, "928720acb0436d18edcd8239fdd544cce4561f"}) 14:53:18 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) write$apparmor_exec(r0, 0x0, 0xf) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x0, 0x1}) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:53:18 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 14:53:18 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)={'stack ', ':.-\x00'}, 0xa) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000080)) 14:53:19 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0xfffffffffffffffd) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$reject(0x13, 0x0, 0x4aa, 0x199, r1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) keyctl$search(0xa, 0x0, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0xfffffffffffffffd) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x1) (async) add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r1) (async) keyctl$reject(0x13, 0x0, 0x4aa, 0x199, r1) (async) [ 994.049216] audit: type=1400 audit(1676818398.967:1502): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20118 comm="syz-executor.1" 14:53:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1f}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x48884) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7fff) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x4, 0x800, 0x1, 0x2, 0xc, "928720acb0436d18edcd8239fdd544cce4561f"}) 14:53:19 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 14:53:19 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) (async) write$apparmor_exec(r0, 0x0, 0xf) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:53:19 executing program 4: socket(0x1, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000000)={0xc7, 0x0, 0x1}) 14:53:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1f}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x48884) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7fff) (async) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x4, 0x800, 0x1, 0x2, 0xc, "928720acb0436d18edcd8239fdd544cce4561f"}) [ 994.142842] audit: type=1400 audit(1676818399.027:1503): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20121 comm="syz-executor.2" 14:53:19 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)={'stack ', ':.-\x00'}, 0xa) (async, rerun: 32) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000080)) (rerun: 32) 14:53:19 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '/proc/thread-self/attr/exec\x00'}, 0x21) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 14:53:19 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73786563203abb902a454c0a993dc53cdadc5047c2c91b049a3144b5c79473e4bcb3d92fedd740e5f90c667a4f7757ebd1205e43d7ed51ca4c20"], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"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"}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400de11b7093c05ef", @ANYRESOCT=r1, @ANYBLOB="00042dbd7000ffdbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4014) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000080)) 14:53:19 executing program 4: socket(0x1, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000000)={0xc7, 0x0, 0x1}) [ 994.225114] audit: type=1400 audit(1676818399.027:1504): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=20123 comm="syz-executor.3" 14:53:19 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) (async) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) (async) write$apparmor_exec(r0, 0x0, 0xf) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:53:19 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0x9) 14:53:19 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "6236f3affd17de922f5c448e2348d62ef19007c5eca6787f98adfbaaf25af028aa260d0fe98d645832cf2dd47cc62bdf12122c790482c9885cd382c7e3f06abd", 0x30}, 0x48, 0xfffffffffffffffa) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:19 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)={'stack ', ':.-\x00'}, 0xa) (async) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000080)) 14:53:19 executing program 4: socket(0x1, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000000)={0xc7, 0x0, 0x1}) socket(0x1, 0x3, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000000)={0xc7, 0x0, 0x1}) (async) 14:53:19 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73786563203abb902a454c0a993dc53cdadc5047c2c91b049a3144b5c79473e4bcb3d92fedd740e5f90c667a4f7757ebd1205e43d7ed51ca4c20"], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"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"}) (async, rerun: 32) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400de11b7093c05ef", @ANYRESOCT=r1, @ANYBLOB="00042dbd7000ffdbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4014) (rerun: 32) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000080)) [ 994.361950] audit: type=1400 audit(1676818399.097:1505): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20145 comm="syz-executor.2" 14:53:19 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0x9) (async) 14:53:19 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 14:53:19 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000100)={0x2, 0xfffffff9, [{0x3f, 0x0, 0x7}, {0x2, 0x0, 0x10000}]}) ioctl$KVM_CAP_HYPERV_SYNIC(r1, 0x4068aea3, &(0x7f0000000080)) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='exec :.Q\x00'], 0x9) 14:53:19 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "6236f3affd17de922f5c448e2348d62ef19007c5eca6787f98adfbaaf25af028aa260d0fe98d645832cf2dd47cc62bdf12122c790482c9885cd382c7e3f06abd", 0x30}, 0x48, 0xfffffffffffffffa) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) [ 994.461919] audit: type=1400 audit(1676818399.107:1506): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=20133 comm="syz-executor.0" 14:53:19 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0x9) 14:53:19 executing program 4: socket(0x15, 0x800, 0x400004) 14:53:19 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0x9) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 14:53:19 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73786563203abb902a454c0a993dc53cdadc5047c2c91b049a3144b5c79473e4bcb3d92fedd740e5f90c667a4f7757ebd1205e43d7ed51ca4c20"], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"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"}) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400de11b7093c05ef", @ANYRESOCT=r1, @ANYBLOB="00042dbd7000ffdbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4014) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000080)) 14:53:19 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000100)={0x2, 0xfffffff9, [{0x3f, 0x0, 0x7}, {0x2, 0x0, 0x10000}]}) ioctl$KVM_CAP_HYPERV_SYNIC(r1, 0x4068aea3, &(0x7f0000000080)) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='exec :.Q\x00'], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000100)={0x2, 0xfffffff9, [{0x3f, 0x0, 0x7}, {0x2, 0x0, 0x10000}]}) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r1, 0x4068aea3, &(0x7f0000000080)) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='exec :.Q\x00'], 0x9) (async) 14:53:19 executing program 4: socket(0x15, 0x800, 0x400004) [ 994.588176] audit: type=1400 audit(1676818399.117:1507): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=20146 comm="syz-executor.3" 14:53:19 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "6236f3affd17de922f5c448e2348d62ef19007c5eca6787f98adfbaaf25af028aa260d0fe98d645832cf2dd47cc62bdf12122c790482c9885cd382c7e3f06abd", 0x30}, 0x48, 0xfffffffffffffffa) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "6236f3affd17de922f5c448e2348d62ef19007c5eca6787f98adfbaaf25af028aa260d0fe98d645832cf2dd47cc62bdf12122c790482c9885cd382c7e3f06abd", 0x30}, 0x48, 0xfffffffffffffffa) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) 14:53:19 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) syz_open_dev$loop(&(0x7f0000000340), 0x8000000000000001, 0xc40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x194, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1c, 0xc5, "11f50e7e24f5b0bc11c5f9b79aedbdaeff75b58c44984a95"}, @NL80211_ATTR_VENDOR_DATA={0xa8, 0xc5, "fcc45fa1b27e8e6793dc94dfdd8ba74d4f02c28bbd0e8a2af6e2c3ce1404a1bce5747cf7be9737307dd51b7abf5da53e877cf979481db64c94f70a8e11ce3b6100959d4d6a5ed436ce81122ef6b51e4db3c911ffcece884f0d5cc462ddd927f9b28a9143404151983237928b8b595c201af7141956a97d1e1f59b92666caf5045a5767b4e48160b4d4b6eb92b7d850d9cf26288fd4d91edf98df550f6eb469d7e1af5f97"}, @NL80211_ATTR_VENDOR_DATA={0x9b, 0xc5, "366a025f865b29c91c0a0820e6d0f5b4f6eaa805744a42305c1a908d71443b961edfda158c9846df301e75c69c029e6b06b204c3db7dd7421fa17d7244ebd716a71f215919ec8f9249061bab4413fda9d6d51a933727e9932a64f34e252c847576dbc7f81b3bef136643aafc25c9a5df2f25fe4ecdf550c318078e464b4263fd4f5a70d63487b35b90a9ed70d03959a9905f0db18def54"}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfff}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x10) 14:53:19 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_exec(r2, 0x0, 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$apparmor_exec(r2, 0x0, 0x9) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) 14:53:19 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) 14:53:19 executing program 4: socket(0x15, 0x800, 0x400004) 14:53:19 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) syz_open_dev$loop(&(0x7f0000000340), 0x8000000000000001, 0xc40000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x194, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1c, 0xc5, "11f50e7e24f5b0bc11c5f9b79aedbdaeff75b58c44984a95"}, @NL80211_ATTR_VENDOR_DATA={0xa8, 0xc5, "fcc45fa1b27e8e6793dc94dfdd8ba74d4f02c28bbd0e8a2af6e2c3ce1404a1bce5747cf7be9737307dd51b7abf5da53e877cf979481db64c94f70a8e11ce3b6100959d4d6a5ed436ce81122ef6b51e4db3c911ffcece884f0d5cc462ddd927f9b28a9143404151983237928b8b595c201af7141956a97d1e1f59b92666caf5045a5767b4e48160b4d4b6eb92b7d850d9cf26288fd4d91edf98df550f6eb469d7e1af5f97"}, @NL80211_ATTR_VENDOR_DATA={0x9b, 0xc5, "366a025f865b29c91c0a0820e6d0f5b4f6eaa805744a42305c1a908d71443b961edfda158c9846df301e75c69c029e6b06b204c3db7dd7421fa17d7244ebd716a71f215919ec8f9249061bab4413fda9d6d51a933727e9932a64f34e252c847576dbc7f81b3bef136643aafc25c9a5df2f25fe4ecdf550c318078e464b4263fd4f5a70d63487b35b90a9ed70d03959a9905f0db18def54"}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfff}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x10) 14:53:19 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) [ 994.708624] audit: type=1400 audit(1676818399.127:1508): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20142 comm="syz-executor.1" 14:53:19 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000100)={0x2, 0xfffffff9, [{0x3f, 0x0, 0x7}, {0x2, 0x0, 0x10000}]}) ioctl$KVM_CAP_HYPERV_SYNIC(r1, 0x4068aea3, &(0x7f0000000080)) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='exec :.Q\x00'], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000100)={0x2, 0xfffffff9, [{0x3f, 0x0, 0x7}, {0x2, 0x0, 0x10000}]}) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r1, 0x4068aea3, &(0x7f0000000080)) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='exec :.Q\x00'], 0x9) (async) 14:53:19 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(r0, 0x0, 0xf) 14:53:19 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x6, 0x6000}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) socket(0x1, 0x3, 0x0) 14:53:19 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) (async) 14:53:19 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:19 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6586a4c2acf8c905a89365fc98e6b14db344789d36e63e598cfdab29b326f08e09ae20e88dc7e3eab54045efa30c4ec40177c8155644d33fccedb52d1a03dd"], 0x9) 14:53:19 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) syz_open_dev$loop(&(0x7f0000000340), 0x8000000000000001, 0xc40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x194, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1c, 0xc5, "11f50e7e24f5b0bc11c5f9b79aedbdaeff75b58c44984a95"}, @NL80211_ATTR_VENDOR_DATA={0xa8, 0xc5, "fcc45fa1b27e8e6793dc94dfdd8ba74d4f02c28bbd0e8a2af6e2c3ce1404a1bce5747cf7be9737307dd51b7abf5da53e877cf979481db64c94f70a8e11ce3b6100959d4d6a5ed436ce81122ef6b51e4db3c911ffcece884f0d5cc462ddd927f9b28a9143404151983237928b8b595c201af7141956a97d1e1f59b92666caf5045a5767b4e48160b4d4b6eb92b7d850d9cf26288fd4d91edf98df550f6eb469d7e1af5f97"}, @NL80211_ATTR_VENDOR_DATA={0x9b, 0xc5, "366a025f865b29c91c0a0820e6d0f5b4f6eaa805744a42305c1a908d71443b961edfda158c9846df301e75c69c029e6b06b204c3db7dd7421fa17d7244ebd716a71f215919ec8f9249061bab4413fda9d6d51a933727e9932a64f34e252c847576dbc7f81b3bef136643aafc25c9a5df2f25fe4ecdf550c318078e464b4263fd4f5a70d63487b35b90a9ed70d03959a9905f0db18def54"}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfff}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x10) 14:53:19 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) write$apparmor_exec(r0, 0x0, 0xf) 14:53:19 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x6, 0x6000}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) socket(0x1, 0x3, 0x0) 14:53:19 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6586a4c2acf8c905a89365fc98e6b14db344789d36e63e598cfdab29b326f08e09ae20e88dc7e3eab54045efa30c4ec40177c8155644d33fccedb52d1a03dd"], 0x9) 14:53:19 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[], 0x9) (async) 14:53:19 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) write$apparmor_exec(r0, 0x0, 0xf) 14:53:19 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:19 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x6, 0x6000}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) socket(0x1, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x6, 0x6000}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) (async) socket(0x1, 0x3, 0x0) (async) 14:53:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x4}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xa2c, 0x6, 0x7, 0x7fff, 0x5, 0x40, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4}, {0x1, 0x2}, {0x7, 0x4}, {0x5, 0x1}, {0x3, 0x2}, {}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0xa}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x4}, {0x4, 0x8}, {0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x6c, 0x2f, 0x48, 0x9, 0x36, 0x24, 0x36, 0xb, 0xc, 0xc, 0xc, 0x24, 0x1f]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x5, 0x2, 0x3, 0x1, 0x6, 0x401]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x3f, 0x4, 0x1ff, 0x800, 0x9, 0x7, 0x2]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0x2, 0x4, 0x6, 0x81, 0x2]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x2, 0x36, 0x36, 0x6, 0x3, 0x60, 0x6, 0x6, 0x60, 0x4d, 0x60, 0x4, 0x1, 0x4, 0x4, 0x4, 0x1, 0xb, 0x18, 0x9, 0x6, 0x1, 0x18, 0x6c, 0x6b, 0x30, 0x12, 0x30]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x1b, 0x60, 0x60, 0x16, 0x1, 0x1, 0xb, 0x36, 0x3, 0xc, 0x39, 0x1, 0x30, 0x24, 0x5, 0x24, 0x12, 0x9, 0x30, 0x2, 0x6, 0x36, 0xc, 0x6c, 0x48, 0x6, 0x24, 0xc, 0x30, 0x3, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x16, 0x60, 0x3, 0x11, 0xb, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xab9, 0x9, 0x8, 0xfffd, 0xffff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa21d, 0x2, 0x754a, 0x5, 0x9, 0x4fe, 0x893, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x80, 0x400, 0x400, 0x5, 0x5, 0x8, 0x2]}}]}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x20}, 0x890) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:20 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="6586a4c2acf8c905a89365fc98e6b14db344789d36e63e598cfdab29b326f08e09ae20e88dc7e3eab54045efa30c4ec40177c8155644d33fccedb52d1a03dd"], 0x9) 14:53:20 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:20 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TCSBRKP(r0, 0x5425, 0x3) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:20 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000580)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCEXCL(r1, 0x540c) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3cc, 0x0, 0xa, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe79d, 0x36}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x100}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac04, 0xfac05, 0xfac08, 0xfac05, 0xfac08]}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @acl_policy, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}], @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x198, 0x7f, [@supported_rates={0x1, 0x1, [{0x16, 0x1}]}, @ibss={0x6, 0x2, 0x1}, @perr={0x84, 0xc2, {0x3, 0xc, [@not_ext={{}, @device_b, 0xc6a, "", 0xe}, @ext={{}, @broadcast, 0x4, @broadcast, 0x1a}, @not_ext={{}, @device_a, 0x1f, "", 0x30}, @not_ext={{}, @device_b, 0x0, "", 0x1a}, @ext={{}, @device_a, 0x0, @broadcast, 0xc}, @ext={{}, @device_b, 0x3, @device_a, 0x18}, @ext={{}, @device_a, 0x2, @device_b, 0x2b}, @not_ext={{}, @device_b, 0x3, "", 0x3f}, @ext={{}, @broadcast, 0x0, @device_b, 0x3b}, @ext={{}, @device_b, 0xffffffe5, @broadcast, 0x3c}, @not_ext={{}, @broadcast, 0x8, "", 0x1c}, @not_ext={{}, @device_a, 0x7fffffff, "", 0x20}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x68, 0x8}}, @perr={0x84, 0xa2, {0x20, 0xa, [@ext={{}, @device_a, 0x1ff, @device_a, 0x31}, @not_ext={{}, @device_b, 0x332, "", 0x39}, @not_ext={{}, @broadcast, 0x7, "", 0x34}, @ext={{}, @broadcast, 0x3, @broadcast, 0x3a}, @not_ext={{}, @broadcast, 0x7ff, "", 0x27}, @not_ext={{}, @broadcast, 0xbe7, "", 0x27}, @not_ext={{}, @device_b, 0x4, "", 0x18}, @ext={{}, @broadcast, 0x0, @device_b, 0x16}, @ext={{}, @device_b, 0x8999, @device_b, 0x1c}, @ext={{}, @device_a, 0x40, @broadcast, 0x22}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x0, 0x8, 0x0, 0x2b9, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x4, 0x1}}]}], @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac05, 0xfac06, 0xfac08, 0xfac0b]}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac05]}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac01, 0xfac0b, 0xfac0f, 0xfac0d, 0xfac0d, 0xfac14]}, @NL80211_ATTR_AKM_SUITES={0x28, 0x4c, [0xfac05, 0xfac09, 0xfac06, 0xfac13, 0xfac05, 0xfac05, 0x0, 0xfac11, 0xfac09]}], @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x4, 0xffff, 0x1, 0x2, 0x8, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x6, 0x3, 0x6c, 0x2, 0x12, 0x16, 0xb, 0x30, 0xfe4f421e63c8fe15, 0x5, 0x6c, 0x6, 0x18, 0x6c, 0x1, 0x60, 0x2, 0x5, 0x9, 0x2, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0xfffd, 0x100, 0x7, 0x800, 0x2, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000040)) 14:53:20 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000000)) socket(0x1, 0x3, 0x0) 14:53:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x4}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xa2c, 0x6, 0x7, 0x7fff, 0x5, 0x40, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4}, {0x1, 0x2}, {0x7, 0x4}, {0x5, 0x1}, {0x3, 0x2}, {}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0xa}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x4}, {0x4, 0x8}, {0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x6c, 0x2f, 0x48, 0x9, 0x36, 0x24, 0x36, 0xb, 0xc, 0xc, 0xc, 0x24, 0x1f]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x5, 0x2, 0x3, 0x1, 0x6, 0x401]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x3f, 0x4, 0x1ff, 0x800, 0x9, 0x7, 0x2]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0x2, 0x4, 0x6, 0x81, 0x2]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x2, 0x36, 0x36, 0x6, 0x3, 0x60, 0x6, 0x6, 0x60, 0x4d, 0x60, 0x4, 0x1, 0x4, 0x4, 0x4, 0x1, 0xb, 0x18, 0x9, 0x6, 0x1, 0x18, 0x6c, 0x6b, 0x30, 0x12, 0x30]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x1b, 0x60, 0x60, 0x16, 0x1, 0x1, 0xb, 0x36, 0x3, 0xc, 0x39, 0x1, 0x30, 0x24, 0x5, 0x24, 0x12, 0x9, 0x30, 0x2, 0x6, 0x36, 0xc, 0x6c, 0x48, 0x6, 0x24, 0xc, 0x30, 0x3, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x16, 0x60, 0x3, 0x11, 0xb, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xab9, 0x9, 0x8, 0xfffd, 0xffff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa21d, 0x2, 0x754a, 0x5, 0x9, 0x4fe, 0x893, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x80, 0x400, 0x400, 0x5, 0x5, 0x8, 0x2]}}]}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x20}, 0x890) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x4}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xa2c, 0x6, 0x7, 0x7fff, 0x5, 0x40, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4}, {0x1, 0x2}, {0x7, 0x4}, {0x5, 0x1}, {0x3, 0x2}, {}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0xa}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x4}, {0x4, 0x8}, {0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x6c, 0x2f, 0x48, 0x9, 0x36, 0x24, 0x36, 0xb, 0xc, 0xc, 0xc, 0x24, 0x1f]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x5, 0x2, 0x3, 0x1, 0x6, 0x401]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x3f, 0x4, 0x1ff, 0x800, 0x9, 0x7, 0x2]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0x2, 0x4, 0x6, 0x81, 0x2]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x2, 0x36, 0x36, 0x6, 0x3, 0x60, 0x6, 0x6, 0x60, 0x4d, 0x60, 0x4, 0x1, 0x4, 0x4, 0x4, 0x1, 0xb, 0x18, 0x9, 0x6, 0x1, 0x18, 0x6c, 0x6b, 0x30, 0x12, 0x30]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x1b, 0x60, 0x60, 0x16, 0x1, 0x1, 0xb, 0x36, 0x3, 0xc, 0x39, 0x1, 0x30, 0x24, 0x5, 0x24, 0x12, 0x9, 0x30, 0x2, 0x6, 0x36, 0xc, 0x6c, 0x48, 0x6, 0x24, 0xc, 0x30, 0x3, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x16, 0x60, 0x3, 0x11, 0xb, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xab9, 0x9, 0x8, 0xfffd, 0xffff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa21d, 0x2, 0x754a, 0x5, 0x9, 0x4fe, 0x893, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x80, 0x400, 0x400, 0x5, 0x5, 0x8, 0x2]}}]}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x20}, 0x890) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) 14:53:20 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 14:53:20 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:20 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) (async, rerun: 64) ioctl$TIOCNXCL(r0, 0x540d) (async, rerun: 64) ioctl$TCSBRKP(r0, 0x5425, 0x3) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:20 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000580)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCEXCL(r1, 0x540c) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3cc, 0x0, 0xa, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe79d, 0x36}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x100}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac04, 0xfac05, 0xfac08, 0xfac05, 0xfac08]}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @acl_policy, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}], @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x198, 0x7f, [@supported_rates={0x1, 0x1, [{0x16, 0x1}]}, @ibss={0x6, 0x2, 0x1}, @perr={0x84, 0xc2, {0x3, 0xc, [@not_ext={{}, @device_b, 0xc6a, "", 0xe}, @ext={{}, @broadcast, 0x4, @broadcast, 0x1a}, @not_ext={{}, @device_a, 0x1f, "", 0x30}, @not_ext={{}, @device_b, 0x0, "", 0x1a}, @ext={{}, @device_a, 0x0, @broadcast, 0xc}, @ext={{}, @device_b, 0x3, @device_a, 0x18}, @ext={{}, @device_a, 0x2, @device_b, 0x2b}, @not_ext={{}, @device_b, 0x3, "", 0x3f}, @ext={{}, @broadcast, 0x0, @device_b, 0x3b}, @ext={{}, @device_b, 0xffffffe5, @broadcast, 0x3c}, @not_ext={{}, @broadcast, 0x8, "", 0x1c}, @not_ext={{}, @device_a, 0x7fffffff, "", 0x20}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x68, 0x8}}, @perr={0x84, 0xa2, {0x20, 0xa, [@ext={{}, @device_a, 0x1ff, @device_a, 0x31}, @not_ext={{}, @device_b, 0x332, "", 0x39}, @not_ext={{}, @broadcast, 0x7, "", 0x34}, @ext={{}, @broadcast, 0x3, @broadcast, 0x3a}, @not_ext={{}, @broadcast, 0x7ff, "", 0x27}, @not_ext={{}, @broadcast, 0xbe7, "", 0x27}, @not_ext={{}, @device_b, 0x4, "", 0x18}, @ext={{}, @broadcast, 0x0, @device_b, 0x16}, @ext={{}, @device_b, 0x8999, @device_b, 0x1c}, @ext={{}, @device_a, 0x40, @broadcast, 0x22}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x0, 0x8, 0x0, 0x2b9, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x4, 0x1}}]}], @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac05, 0xfac06, 0xfac08, 0xfac0b]}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac05]}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac01, 0xfac0b, 0xfac0f, 0xfac0d, 0xfac0d, 0xfac14]}, @NL80211_ATTR_AKM_SUITES={0x28, 0x4c, [0xfac05, 0xfac09, 0xfac06, 0xfac13, 0xfac05, 0xfac05, 0x0, 0xfac11, 0xfac09]}], @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x4, 0xffff, 0x1, 0x2, 0x8, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x6, 0x3, 0x6c, 0x2, 0x12, 0x16, 0xb, 0x30, 0xfe4f421e63c8fe15, 0x5, 0x6c, 0x6, 0x18, 0x6c, 0x1, 0x60, 0x2, 0x5, 0x9, 0x2, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0xfffd, 0x100, 0x7, 0x800, 0x2, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000040)) 14:53:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x4}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xa2c, 0x6, 0x7, 0x7fff, 0x5, 0x40, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4}, {0x1, 0x2}, {0x7, 0x4}, {0x5, 0x1}, {0x3, 0x2}, {}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0xa}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x4}, {0x4, 0x8}, {0x3}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x6c, 0x2f, 0x48, 0x9, 0x36, 0x24, 0x36, 0xb, 0xc, 0xc, 0xc, 0x24, 0x1f]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x5, 0x2, 0x3, 0x1, 0x6, 0x401]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x3f, 0x4, 0x1ff, 0x800, 0x9, 0x7, 0x2]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0x2, 0x4, 0x6, 0x81, 0x2]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x2, 0x36, 0x36, 0x6, 0x3, 0x60, 0x6, 0x6, 0x60, 0x4d, 0x60, 0x4, 0x1, 0x4, 0x4, 0x4, 0x1, 0xb, 0x18, 0x9, 0x6, 0x1, 0x18, 0x6c, 0x6b, 0x30, 0x12, 0x30]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x1b, 0x60, 0x60, 0x16, 0x1, 0x1, 0xb, 0x36, 0x3, 0xc, 0x39, 0x1, 0x30, 0x24, 0x5, 0x24, 0x12, 0x9, 0x30, 0x2, 0x6, 0x36, 0xc, 0x6c, 0x48, 0x6, 0x24, 0xc, 0x30, 0x3, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x16, 0x60, 0x3, 0x11, 0xb, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xab9, 0x9, 0x8, 0xfffd, 0xffff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa21d, 0x2, 0x754a, 0x5, 0x9, 0x4fe, 0x893, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x80, 0x400, 0x400, 0x5, 0x5, 0x8, 0x2]}}]}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x20}, 0x890) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:20 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000000)) (async) socket(0x1, 0x3, 0x0) 14:53:20 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:20 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:20 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCNXCL(r0, 0x540d) ioctl$TCSBRKP(r0, 0x5425, 0x3) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:20 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000580)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCEXCL(r1, 0x540c) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) ioctl$TIOCNXCL(r2, 0x540d) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3cc, 0x0, 0xa, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe79d, 0x36}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x100}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac04, 0xfac05, 0xfac08, 0xfac05, 0xfac08]}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @acl_policy, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}], @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x198, 0x7f, [@supported_rates={0x1, 0x1, [{0x16, 0x1}]}, @ibss={0x6, 0x2, 0x1}, @perr={0x84, 0xc2, {0x3, 0xc, [@not_ext={{}, @device_b, 0xc6a, "", 0xe}, @ext={{}, @broadcast, 0x4, @broadcast, 0x1a}, @not_ext={{}, @device_a, 0x1f, "", 0x30}, @not_ext={{}, @device_b, 0x0, "", 0x1a}, @ext={{}, @device_a, 0x0, @broadcast, 0xc}, @ext={{}, @device_b, 0x3, @device_a, 0x18}, @ext={{}, @device_a, 0x2, @device_b, 0x2b}, @not_ext={{}, @device_b, 0x3, "", 0x3f}, @ext={{}, @broadcast, 0x0, @device_b, 0x3b}, @ext={{}, @device_b, 0xffffffe5, @broadcast, 0x3c}, @not_ext={{}, @broadcast, 0x8, "", 0x1c}, @not_ext={{}, @device_a, 0x7fffffff, "", 0x20}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x68, 0x8}}, @perr={0x84, 0xa2, {0x20, 0xa, [@ext={{}, @device_a, 0x1ff, @device_a, 0x31}, @not_ext={{}, @device_b, 0x332, "", 0x39}, @not_ext={{}, @broadcast, 0x7, "", 0x34}, @ext={{}, @broadcast, 0x3, @broadcast, 0x3a}, @not_ext={{}, @broadcast, 0x7ff, "", 0x27}, @not_ext={{}, @broadcast, 0xbe7, "", 0x27}, @not_ext={{}, @device_b, 0x4, "", 0x18}, @ext={{}, @broadcast, 0x0, @device_b, 0x16}, @ext={{}, @device_b, 0x8999, @device_b, 0x1c}, @ext={{}, @device_a, 0x40, @broadcast, 0x22}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0x0, 0x8, 0x0, 0x2b9, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x4, 0x1}}]}], @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac05, 0xfac06, 0xfac08, 0xfac0b]}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac05]}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac01, 0xfac0b, 0xfac0f, 0xfac0d, 0xfac0d, 0xfac14]}, @NL80211_ATTR_AKM_SUITES={0x28, 0x4c, [0xfac05, 0xfac09, 0xfac06, 0xfac13, 0xfac05, 0xfac05, 0x0, 0xfac11, 0xfac09]}], @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x4, 0xffff, 0x1, 0x2, 0x8, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x6, 0x3, 0x6c, 0x2, 0x12, 0x16, 0xb, 0x30, 0xfe4f421e63c8fe15, 0x5, 0x6c, 0x6, 0x18, 0x6c, 0x1, 0x60, 0x2, 0x5, 0x9, 0x2, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0xfffd, 0x100, 0x7, 0x800, 0x2, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000040)) 14:53:20 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) 14:53:20 executing program 4: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000000)) socket(0x1, 0x3, 0x0) 14:53:20 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:20 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x54}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7c}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x41}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$KVM_NMI(r0, 0xae9a) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f00000000c0)=ANY=[], 0xf) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 14:53:20 executing program 1: sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x69}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000815}, 0xc0000) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="737865632884203afe32bc1e1ddb58f8246ad18078"], 0x9) 14:53:20 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000080)) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:20 executing program 4: socket(0x1, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) ioctl$KDMKTONE(r0, 0x4b30, 0x80) 14:53:20 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) (async) 14:53:20 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/218, 0xda}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/41, 0x29}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000200)=""/13, 0xd}], 0x5, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000000440)=""/202, 0xca}], 0x4, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:20 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x54}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7c}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x41}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$KVM_NMI(r0, 0xae9a) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f00000000c0)=ANY=[], 0xf) (async) write$apparmor_exec(r2, &(0x7f00000000c0)=ANY=[], 0xf) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 14:53:20 executing program 1: sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x69}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000815}, 0xc0000) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="737865632884203afe32bc1e1ddb58f8246ad18078"], 0x9) 14:53:20 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) 14:53:20 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000080)) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:20 executing program 4: socket(0x1, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) (async) ioctl$KDMKTONE(r0, 0x4b30, 0x80) 14:53:20 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) process_vm_readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/218, 0xda}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/41, 0x29}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000200)=""/13, 0xd}], 0x5, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000000440)=""/202, 0xca}], 0x4, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:20 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x54}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7c}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x41}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$KVM_NMI(r0, 0xae9a) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f00000000c0)=ANY=[], 0xf) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x54}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7c}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x41}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) ioctl$KVM_NMI(r0, 0xae9a) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r2, &(0x7f00000000c0)=ANY=[], 0xf) (async) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) (async) 14:53:20 executing program 1: sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x69}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000815}, 0xc0000) (async) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x69}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000815}, 0xc0000) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="737865632884203afe32bc1e1ddb58f8246ad18078"], 0x9) 14:53:20 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73786563203a0eb39b75fba432982229e51950802514d0175a277d17a42674546db6e90fcd1c2df793b454e18c2903c72f4b3a7a392bdfd6fbf8ff201ae94537e44c04f8334e8ca19aa7504f78f9a03fef629d32ef7e8fa38b1bbb2ed7b5bc38a6bbea72e021bf8dcfcd1591fa471f6962fae4", @ANYRESHEX=r1], 0x9) 14:53:20 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/218, 0xda}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/41, 0x29}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000200)=""/13, 0xd}], 0x5, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000000440)=""/202, 0xca}], 0x4, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) 14:53:20 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000080)) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:20 executing program 4: socket(0x1, 0x3, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) (async) ioctl$KDMKTONE(r0, 0x4b30, 0x80) 14:53:20 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x4, 0x4) ioctl$TIOCNXCL(r3, 0x540d) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r1], 0xf) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)) ioctl$TIOCNXCL(r4, 0x540d) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 14:53:20 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e06aff6477013295020d4eda2c21e5271707c9d6ab2ac78cffdffb13fd9db5f24a97a1644cd04aff817989fd9a0eab3234eac3b291504c24444e6af318320b1d5bf1d611bad9ecf0ad8317c0d7944aa3a4442b52205cdc892bf52a05657b17e871481db17cb54b86162eb81b1c19b1aa49fe3efb", @ANYRES8=r2, @ANYRES64=r0, @ANYRESHEX=r3], 0x9) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x1d6a) 14:53:20 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73786563203a0eb39b75fba432982229e51950802514d0175a277d17a42674546db6e90fcd1c2df793b454e18c2903c72f4b3a7a392bdfd6fbf8ff201ae94537e44c04f8334e8ca19aa7504f78f9a03fef629d32ef7e8fa38b1bbb2ed7b5bc38a6bbea72e021bf8dcfcd1591fa471f6962fae4", @ANYRESHEX=r1], 0x9) 14:53:20 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65786506cb56e3227a2e2d00011a0ae6"], 0x9) 14:53:20 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x4, 0x4) ioctl$TIOCNXCL(r3, 0x540d) (async) ioctl$TIOCNXCL(r3, 0x540d) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r1], 0xf) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)) ioctl$TIOCNXCL(r4, 0x540d) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 14:53:21 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2e}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x2000c090) write$apparmor_exec(r0, 0x0, 0xf) 14:53:21 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65786506cb56e3227a2e2d00011a0ae6"], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65786506cb56e3227a2e2d00011a0ae6"], 0x9) (async) 14:53:21 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7f}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x20}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x200}, @NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c004}, 0x20000000) socket(0x1, 0x3, 0x0) 14:53:21 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73786563203a0eb39b75fba432982229e51950802514d0175a277d17a42674546db6e90fcd1c2df793b454e18c2903c72f4b3a7a392bdfd6fbf8ff201ae94537e44c04f8334e8ca19aa7504f78f9a03fef629d32ef7e8fa38b1bbb2ed7b5bc38a6bbea72e021bf8dcfcd1591fa471f6962fae4", @ANYRESHEX=r1], 0x9) 14:53:21 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x4, 0x4) ioctl$TIOCNXCL(r3, 0x540d) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r1], 0xf) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)) ioctl$TIOCNXCL(r4, 0x540d) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x4, 0x4) (async) ioctl$TIOCNXCL(r3, 0x540d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESHEX=r1], 0xf) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r5, 0x540d) (async) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000080)) (async) ioctl$TIOCNXCL(r4, 0x540d) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) 14:53:21 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e06aff6477013295020d4eda2c21e5271707c9d6ab2ac78cffdffb13fd9db5f24a97a1644cd04aff817989fd9a0eab3234eac3b291504c24444e6af318320b1d5bf1d611bad9ecf0ad8317c0d7944aa3a4442b52205cdc892bf52a05657b17e871481db17cb54b86162eb81b1c19b1aa49fe3efb", @ANYRES8=r2, @ANYRES64=r0, @ANYRESHEX=r3], 0x9) (async) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x1d6a) 14:53:21 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2e}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x2000c090) write$apparmor_exec(r0, 0x0, 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2e}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x2000c090) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) 14:53:21 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7f}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x20}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x200}, @NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c004}, 0x20000000) socket(0x1, 0x3, 0x0) 14:53:21 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65786506cb56e3227a2e2d00011a0ae6"], 0x9) 14:53:21 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73f88d3a203a"], 0x9) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x2a040) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) mmap$binder(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1, 0x11, r3, 0x8) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r2, 0x8, {0x0, 0x0, 0x0, 0x386e, 0x3e, 0x0, 0x9, 0x9, 0x1, "ff6dfd7c2b1661d40de8b34a53ea486e9d3b18c810c68c18c1cdf6e398b9ac883cdd2b65e5c95b52e8a7b45165cd2f1f01c95ccdfac404b6fbf2ed1ca056b3fd", "20009134104c09d0713d09778634d00f06c4ff89a0f36aa5428c7e7c12d5a448851e72400d98795a1db8c95e0c4e829edb29230d06f89bd311a4d3fb2b224939", "fcc4d9889965408dd6d68469870360f9fcdcfe0a0aa3fb857f5c46b7ca29155e", [0x6, 0x1]}}) 14:53:21 executing program 3: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:21 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2e}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x2000c090) (async) write$apparmor_exec(r0, 0x0, 0xf) 14:53:21 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="e06aff6477013295020d4eda2c21e5271707c9d6ab2ac78cffdffb13fd9db5f24a97a1644cd04aff817989fd9a0eab3234eac3b291504c24444e6af318320b1d5bf1d611bad9ecf0ad8317c0d7944aa3a4442b52205cdc892bf52a05657b17e871481db17cb54b86162eb81b1c19b1aa49fe3efb", @ANYRES8=r2, @ANYRES64=r0, @ANYRESHEX=r3], 0x9) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x1d6a) 14:53:21 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7f}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x20}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x200}, @NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c004}, 0x20000000) (async) socket(0x1, 0x3, 0x0) 14:53:21 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='exec1:.-\x00'], 0x9) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x8}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) 14:53:21 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73f88d3a203a"], 0x9) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x2a040) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async) mmap$binder(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1, 0x11, r3, 0x8) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r2, 0x8, {0x0, 0x0, 0x0, 0x386e, 0x3e, 0x0, 0x9, 0x9, 0x1, "ff6dfd7c2b1661d40de8b34a53ea486e9d3b18c810c68c18c1cdf6e398b9ac883cdd2b65e5c95b52e8a7b45165cd2f1f01c95ccdfac404b6fbf2ed1ca056b3fd", "20009134104c09d0713d09778634d00f06c4ff89a0f36aa5428c7e7c12d5a448851e72400d98795a1db8c95e0c4e829edb29230d06f89bd311a4d3fb2b224939", "fcc4d9889965408dd6d68469870360f9fcdcfe0a0aa3fb857f5c46b7ca29155e", [0x6, 0x1]}}) 14:53:21 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7151, 0x400, 0x5, 0x1414, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x4, 0x3, 0x1, 0x2, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @exit, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r1}]}, &(0x7f0000000140)='syzkaller\x00', 0xfab, 0xd, &(0x7f0000000180)=""/13, 0x41100, 0x16, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xe, 0x10000, 0x7ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1]}, 0x80) 14:53:21 executing program 3: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:21 executing program 1: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:21 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73f88d3a203a"], 0x9) (async) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x2a040) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) (async) mmap$binder(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1, 0x11, r3, 0x8) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r2, 0x8, {0x0, 0x0, 0x0, 0x386e, 0x3e, 0x0, 0x9, 0x9, 0x1, "ff6dfd7c2b1661d40de8b34a53ea486e9d3b18c810c68c18c1cdf6e398b9ac883cdd2b65e5c95b52e8a7b45165cd2f1f01c95ccdfac404b6fbf2ed1ca056b3fd", "20009134104c09d0713d09778634d00f06c4ff89a0f36aa5428c7e7c12d5a448851e72400d98795a1db8c95e0c4e829edb29230d06f89bd311a4d3fb2b224939", "fcc4d9889965408dd6d68469870360f9fcdcfe0a0aa3fb857f5c46b7ca29155e", [0x6, 0x1]}}) 14:53:21 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='exec1:.-\x00'], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='exec1:.-\x00'], 0x9) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x8}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) 14:53:21 executing program 4: socket(0x1, 0x3, 0x3) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000000)={0x1, 0x0, [{}]}) 14:53:21 executing program 3: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) 14:53:21 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7151, 0x400, 0x5, 0x1414, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x4, 0x3, 0x1, 0x2, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @exit, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r1}]}, &(0x7f0000000140)='syzkaller\x00', 0xfab, 0xd, &(0x7f0000000180)=""/13, 0x41100, 0x16, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xe, 0x10000, 0x7ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1]}, 0x80) 14:53:21 executing program 1: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:21 executing program 4: socket(0x1, 0x3, 0x3) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000000)={0x1, 0x0, [{}]}) 14:53:21 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x9) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0x514e, 0x4, 0x8001}) 14:53:21 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='exec1:.-\x00'], 0x9) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x8}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) 14:53:21 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7151, 0x400, 0x5, 0x1414, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x4, 0x3, 0x1, 0x2, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @exit, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r1}]}, &(0x7f0000000140)='syzkaller\x00', 0xfab, 0xd, &(0x7f0000000180)=""/13, 0x41100, 0x16, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xe, 0x10000, 0x7ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1]}, 0x80) 14:53:21 executing program 3: ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000040)) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) prctl$PR_CAPBSET_DROP(0x18, 0x16) 14:53:21 executing program 1: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:21 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x9) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$TIOCNXCL(r2, 0x540d) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0x514e, 0x4, 0x8001}) (async) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0x514e, 0x4, 0x8001}) 14:53:21 executing program 4: socket(0x1, 0x3, 0x3) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000000)={0x1, 0x0, [{}]}) 14:53:21 executing program 3: ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000040)) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) prctl$PR_CAPBSET_DROP(0x18, 0x16) 14:53:21 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65786563203aae2d00"], 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:53:21 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0xc4, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x0, 0x0, 0x9}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @free_buffer, @dead_binder_done, @register_looper, @dead_binder_done, @dead_binder_done, @decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x110a, 0x2}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x0, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0xe8, 0x0, &(0x7f0000000300)="39f4a353f3d01591aebea086874751d653a920965769e961837811b86a9f63b24f19405e4fa87f34a96281634c5326b3bb005af65c91a5d5c2e8ffc0a631cd79cfcd2fee4f30f865dc4e2c23a9486f0afd33920f133620f153b05ecd436409bc07274cd5b5f9f35133e506fd197fac383d240d8c60894e335be32f474a1268f9d9d6a488a2cf9742aa2c6b9766ba88c7e14dff9dacf2a521667dcac4f141555b43db648e812d89cc3926522d7cf46feb30344e4d0e29bfab9c89af74a34cc8c16d7062c41e690c83524e2c1a2be8c76e0a354136fa6cd4ce0faae8e0a4bfba53d086077c4a064067"}) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73785a34559e"], 0x9) 14:53:21 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, &(0x7f0000000040)}) write$apparmor_exec(r0, 0x0, 0xf) 14:53:21 executing program 4: socket(0x1, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x1) 14:53:21 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x9) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$TIOCNXCL(r2, 0x540d) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0x514e, 0x4, 0x8001}) 14:53:21 executing program 3: ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000040)) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) prctl$PR_CAPBSET_DROP(0x18, 0x16) 14:53:21 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0xc4, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x0, 0x0, 0x9}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @free_buffer, @dead_binder_done, @register_looper, @dead_binder_done, @dead_binder_done, @decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x110a, 0x2}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x0, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0xe8, 0x0, &(0x7f0000000300)="39f4a353f3d01591aebea086874751d653a920965769e961837811b86a9f63b24f19405e4fa87f34a96281634c5326b3bb005af65c91a5d5c2e8ffc0a631cd79cfcd2fee4f30f865dc4e2c23a9486f0afd33920f133620f153b05ecd436409bc07274cd5b5f9f35133e506fd197fac383d240d8c60894e335be32f474a1268f9d9d6a488a2cf9742aa2c6b9766ba88c7e14dff9dacf2a521667dcac4f141555b43db648e812d89cc3926522d7cf46feb30344e4d0e29bfab9c89af74a34cc8c16d7062c41e690c83524e2c1a2be8c76e0a354136fa6cd4ce0faae8e0a4bfba53d086077c4a064067"}) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73785a34559e"], 0x9) 14:53:21 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, &(0x7f0000000040)}) write$apparmor_exec(r0, 0x0, 0xf) 14:53:21 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65786563203aae2d00"], 0x9) (async, rerun: 32) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 32) 14:53:21 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="786562206e9e61cd2dd554ce12514e6aee0155cc9f0d8b468b9688bd7e619e49db3410343cd7249b8ce6653e27b48b5a914c2f366d7db1c724d47fa62089d15e9b031fe80281b85e920663559b0136ef5f3857254d7e0f32e9bc3f6f2d28a4418cc1ac196730453c7224f3fe4e3a297ea4e15f042e5dafd0318c58d9b70ed2ef4eccfece1e04ae4f8f7eb157305d55af976a351ab1c65a11078452c9f64de1af3d45716d1dc4d00add0f"], 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @exit_looper, @exit_looper, @clear_death, @request_death], 0x4c, 0x0, &(0x7f0000000140)="63fd7c166e81a82869764ce4be55a9a3a4811f53570d7539c60acff80172bb13665d7b8e09e82af95325a63201747af1752187e95aa5b027f727e8b626f67ef543443607213a51ddce29f195"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000200)=0xe68e) 14:53:21 executing program 4: socket(0x1, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x1) socket(0x1, 0x3, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x1) (async) 14:53:21 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x7, &(0x7f0000000080)=0x2) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000140)=0x1) ioctl$TIOCNXCL(r1, 0x540d) socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000100)={0xfffffffffffffffc, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100}) 14:53:21 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0xc4, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x0, 0x0, 0x9}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @free_buffer, @dead_binder_done, @register_looper, @dead_binder_done, @dead_binder_done, @decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x110a, 0x2}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x0, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0xe8, 0x0, &(0x7f0000000300)="39f4a353f3d01591aebea086874751d653a920965769e961837811b86a9f63b24f19405e4fa87f34a96281634c5326b3bb005af65c91a5d5c2e8ffc0a631cd79cfcd2fee4f30f865dc4e2c23a9486f0afd33920f133620f153b05ecd436409bc07274cd5b5f9f35133e506fd197fac383d240d8c60894e335be32f474a1268f9d9d6a488a2cf9742aa2c6b9766ba88c7e14dff9dacf2a521667dcac4f141555b43db648e812d89cc3926522d7cf46feb30344e4d0e29bfab9c89af74a34cc8c16d7062c41e690c83524e2c1a2be8c76e0a354136fa6cd4ce0faae8e0a4bfba53d086077c4a064067"}) (async, rerun: 32) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73785a34559e"], 0x9) (rerun: 32) 14:53:22 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="786562206e9e61cd2dd554ce12514e6aee0155cc9f0d8b468b9688bd7e619e49db3410343cd7249b8ce6653e27b48b5a914c2f366d7db1c724d47fa62089d15e9b031fe80281b85e920663559b0136ef5f3857254d7e0f32e9bc3f6f2d28a4418cc1ac196730453c7224f3fe4e3a297ea4e15f042e5dafd0318c58d9b70ed2ef4eccfece1e04ae4f8f7eb157305d55af976a351ab1c65a11078452c9f64de1af3d45716d1dc4d00add0f"], 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @exit_looper, @exit_looper, @clear_death, @request_death], 0x4c, 0x0, &(0x7f0000000140)="63fd7c166e81a82869764ce4be55a9a3a4811f53570d7539c60acff80172bb13665d7b8e09e82af95325a63201747af1752187e95aa5b027f727e8b626f67ef543443607213a51ddce29f195"}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000200)=0xe68e) 14:53:22 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, &(0x7f0000000040)}) (async) write$apparmor_exec(r0, 0x0, 0xf) 14:53:22 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65786563203aae2d00"], 0x9) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14:53:22 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x7, &(0x7f0000000080)=0x2) (async, rerun: 32) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async, rerun: 32) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000140)=0x1) (rerun: 32) ioctl$TIOCNXCL(r1, 0x540d) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000100)={0xfffffffffffffffc, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100}) 14:53:22 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="786562206e9e61cd2dd554ce12514e6aee0155cc9f0d8b468b9688bd7e619e49db3410343cd7249b8ce6653e27b48b5a914c2f366d7db1c724d47fa62089d15e9b031fe80281b85e920663559b0136ef5f3857254d7e0f32e9bc3f6f2d28a4418cc1ac196730453c7224f3fe4e3a297ea4e15f042e5dafd0318c58d9b70ed2ef4eccfece1e04ae4f8f7eb157305d55af976a351ab1c65a11078452c9f64de1af3d45716d1dc4d00add0f"], 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @exit_looper, @exit_looper, @clear_death, @request_death], 0x4c, 0x0, &(0x7f0000000140)="63fd7c166e81a82869764ce4be55a9a3a4811f53570d7539c60acff80172bb13665d7b8e09e82af95325a63201747af1752187e95aa5b027f727e8b626f67ef543443607213a51ddce29f195"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000200)=0xe68e) 14:53:22 executing program 4: socket(0x1, 0x3, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x1) 14:53:22 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:22 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="9a0d6563203a2e2d00"], 0x9) 14:53:22 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:22 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x7, &(0x7f0000000080)=0x2) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000140)=0x1) ioctl$TIOCNXCL(r1, 0x540d) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000100)={0xfffffffffffffffc, 0x7}) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100}) (rerun: 32) 14:53:22 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="786562206e9e61cd2dd554ce12514e6aee0155cc9f0d8b468b9688bd7e619e49db3410343cd7249b8ce6653e27b48b5a914c2f366d7db1c724d47fa62089d15e9b031fe80281b85e920663559b0136ef5f3857254d7e0f32e9bc3f6f2d28a4418cc1ac196730453c7224f3fe4e3a297ea4e15f042e5dafd0318c58d9b70ed2ef4eccfece1e04ae4f8f7eb157305d55af976a351ab1c65a11078452c9f64de1af3d45716d1dc4d00add0f"], 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @exit_looper, @exit_looper, @clear_death, @request_death], 0x4c, 0x0, &(0x7f0000000140)="63fd7c166e81a82869764ce4be55a9a3a4811f53570d7539c60acff80172bb13665d7b8e09e82af95325a63201747af1752187e95aa5b027f727e8b626f67ef543443607213a51ddce29f195"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000200)=0xe68e) 14:53:22 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xd006, 0x2, 0x2, 0x4000], 0x5c86, 0x0, 0x10001}) 14:53:22 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="9a0d6563203a2e2d00"], 0x9) 14:53:22 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) 14:53:22 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$apparmor_exec(r0, 0x0, 0xf) (async) 14:53:22 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:22 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="9a0d6563203a2e2d00"], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="9a0d6563203a2e2d00"], 0x9) (async) 14:53:22 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x9) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000000c0)={0x514e, 0x4, 0x8001}) 14:53:22 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xd006, 0x2, 0x2, 0x4000], 0x5c86, 0x0, 0x10001}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xd006, 0x2, 0x2, 0x4000], 0x5c86, 0x0, 0x10001}) (async) 14:53:22 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:22 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) 14:53:22 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:22 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008054) r2 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:22 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/4096) write$apparmor_exec(0xffffffffffffffff, 0x0, 0xffffffffffffffb0) 14:53:22 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7151, 0x400, 0x5, 0x1414, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x4, 0x3, 0x1, 0x2, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @exit, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r1}]}, &(0x7f0000000140)='syzkaller\x00', 0xfab, 0xd, &(0x7f0000000180)=""/13, 0x41100, 0x16, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xe, 0x10000, 0x7ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1]}, 0x80) 14:53:22 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="739a091912a2"], 0x9) 14:53:22 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xd006, 0x2, 0x2, 0x4000], 0x5c86, 0x0, 0x10001}) 14:53:22 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 14:53:22 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008054) r2 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:22 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/4096) write$apparmor_exec(0xffffffffffffffff, 0x0, 0xffffffffffffffb0) 14:53:22 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000f3139d482a2620aa5e5d1758d031a253c85c071478ba"], 0x9) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '-%:\x00'}, 0x9) 14:53:22 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="739a091912a2"], 0x9) 14:53:22 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x3) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:22 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) syz_open_dev$loop(&(0x7f0000000340), 0x8000000000000001, 0xc40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x194, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x1c, 0xc5, "11f50e7e24f5b0bc11c5f9b79aedbdaeff75b58c44984a95"}, @NL80211_ATTR_VENDOR_DATA={0xa8, 0xc5, "fcc45fa1b27e8e6793dc94dfdd8ba74d4f02c28bbd0e8a2af6e2c3ce1404a1bce5747cf7be9737307dd51b7abf5da53e877cf979481db64c94f70a8e11ce3b6100959d4d6a5ed436ce81122ef6b51e4db3c911ffcece884f0d5cc462ddd927f9b28a9143404151983237928b8b595c201af7141956a97d1e1f59b92666caf5045a5767b4e48160b4d4b6eb92b7d850d9cf26288fd4d91edf98df550f6eb469d7e1af5f97"}, @NL80211_ATTR_VENDOR_DATA={0x9b, 0xc5, "366a025f865b29c91c0a0820e6d0f5b4f6eaa805744a42305c1a908d71443b961edfda158c9846df301e75c69c029e6b06b204c3db7dd7421fa17d7244ebd716a71f215919ec8f9249061bab4413fda9d6d51a933727e9932a64f34e252c847576dbc7f81b3bef136643aafc25c9a5df2f25fe4ecdf550c318078e464b4263fd4f5a70d63487b35b90a9ed70d03959a9905f0db18def54"}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfff}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x10) 14:53:22 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000f3139d482a2620aa5e5d1758d031a253c85c071478ba"], 0x9) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '-%:\x00'}, 0x9) 14:53:22 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/4096) (async) write$apparmor_exec(0xffffffffffffffff, 0x0, 0xffffffffffffffb0) 14:53:22 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x3) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:22 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="739a091912a2"], 0x9) 14:53:22 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008054) r2 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, r2) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:22 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73786563203abb902a454c0a993dc53cdadc5047c2c91b049a3144b5c79473e4bcb3d92fedd740e5f90c667a4f7757ebd1205e43d7ed51ca4c20"], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000200)={"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"}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400de11b7093c05ef", @ANYRESOCT=r1, @ANYBLOB="00042dbd7000ffdbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4014) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000080)) 14:53:22 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000f3139d482a2620aa5e5d1758d031a253c85c071478ba"], 0x9) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '-%:\x00'}, 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000f3139d482a2620aa5e5d1758d031a253c85c071478ba"], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '-%:\x00'}, 0x9) (async) 14:53:22 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid\x00') 14:53:22 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x3) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) 14:53:22 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)={'stack ', '\xff\xff\xff\xff'}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f00000000c0)={'stack ', 'stack '}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x10) 14:53:22 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73786563203a7ee49a92dc2e6b7d2867e4102e85ea683549eadc04ae50977fc4ed55af4bd88426250344d6e8b508b6bca88fff853f096a18e29baafd"], 0x9) 14:53:22 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73787db955afbf30bad23d6563203a"], 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newtclass={0x74, 0x28, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0x9}, {0xfff2, 0xfff3}, {0x1, 0x8}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0xbcd}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7bce}, @TCA_QFQ_LMAX={0x8, 0x2, 0x30c}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6e4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) 14:53:22 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x9) 14:53:22 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) (async) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid\x00') 14:53:22 executing program 3: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x1) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r1, 0x4068aea3, &(0x7f0000000180)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14:53:23 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xe1, 0x7fffffff, 0x24, @local, @loopback, 0x40, 0x1, 0x200, 0x8}}) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, 0x0, 0xa01, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xb1, 0xc5, "fc37d195a26e23ea8907e5e781068440c03077065ce9b0e268d67bc37f65d988ef5dcda2c21200d6699f8ca73772319503a0ab70084041af1e33de457a51b1ff4d6cc56bd462163a78a3fe5157ebcd7df80347df3a2386e8279f793c3963fe7c0207d029ada6be09be6fd885c21969a0031ae44afaced2a0aadf6289a6a4207ecad2b29c8b37747d99aeaab80a096d2f175b0a4781c12d489b1a20ae155bf156ba1bf10d7452a25e5c342d11ba"}, @NL80211_ATTR_VENDOR_DATA={0x75, 0xc5, "dded9437ae7ee3efa6a610d1d755a1f446ed621f2a2d4bd0fe0f9aa27d527efb6833242ec0734109acd1b0e6fcca83c675a0b3ff5f3a550f84b64bd522813a03ee72d3c37414e2a041ee7a0ed58024e0747a599105241e6d53d27e40ca27764852ff08eed6e7346f2fa65f9d885435bbdb"}]}, 0x150}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r4, 0x540d) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r5, 0x540d) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd9}, [@exit, @generic={0x8, 0x8, 0xf, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x4, 0x0, 0x2, 0x18, 0x10}, @jmp={0x5, 0x0, 0x7, 0x3, 0x6, 0xfffffffffffffffc, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xc, 0x2, 0x6, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00, 0x0, '\x00', r2, 0x1e, r3, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x8, 0x80000000, 0x3}, 0x10, 0x0, r4, 0x0, &(0x7f00000002c0)=[r5, 0x1, r6, 0x1, 0xffffffffffffffff]}, 0x80) 14:53:23 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x9) (async) [ 998.080521] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:23 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)={'stack ', '\xff\xff\xff\xff'}, 0xa) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f00000000c0)={'stack ', 'stack '}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x10) 14:53:23 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73787db955afbf30bad23d6563203a"], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73787db955afbf30bad23d6563203a"], 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newtclass={0x74, 0x28, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0x9}, {0xfff2, 0xfff3}, {0x1, 0x8}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0xbcd}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7bce}, @TCA_QFQ_LMAX={0x8, 0x2, 0x30c}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6e4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) 14:53:23 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0xf) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid\x00') 14:53:23 executing program 3: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x1) (async, rerun: 32) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r1, 0x4068aea3, &(0x7f0000000180)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) (async) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14:53:23 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x9) 14:53:23 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)={'stack ', '\xff\xff\xff\xff'}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f00000000c0)={'stack ', 'stack '}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x10) [ 998.186917] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:23 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:23 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000140)={'stack ', '\xff\xff\xff\xff'}, 0xa) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r0, &(0x7f00000000c0)={'stack ', 'stack '}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x10) 14:53:23 executing program 3: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x1) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r1, 0x4068aea3, &(0x7f0000000180)) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) (async, rerun: 32) write$apparmor_exec(r0, &(0x7f00000000c0)=ANY=[], 0xf) (async, rerun: 32) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 14:53:23 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec!;'], 0x9) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0xfff, 0x10000}) [ 998.295928] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:23 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73787db955afbf30bad23d6563203a"], 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newtclass={0x74, 0x28, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0x9}, {0xfff2, 0xfff3}, {0x1, 0x8}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0xbcd}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7bce}, @TCA_QFQ_LMAX={0x8, 0x2, 0x30c}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6e4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73787db955afbf30bad23d6563203a"], 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}}, 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newtclass={0x74, 0x28, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0x9}, {0xfff2, 0xfff3}, {0x1, 0x8}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0xbcd}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7bce}, @TCA_QFQ_LMAX={0x8, 0x2, 0x30c}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6e4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) (async) 14:53:23 executing program 4: socket(0x1e, 0x2, 0x0) 14:53:23 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:23 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="650000003d0d6429af"], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)={0x9c, 0x4, 0xfd, 0x0, 0xb5, 0x9f, 0x1, 0x6, 0x3, 0x1, 0x3, 0x0, 0x0, 0x101, 0x1, 0x98, 0x9d, 0x6, 0x0, '\x00', 0x2}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20004000) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 14:53:23 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xf415) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x200, 0x44}}}}, [@NL80211_ATTR_VENDOR_DATA={0x37, 0xc5, "65b17ed96831f47ed68134ac7b94945ab81bd6f1f2e0c98a00ad4347742a4dbab3b340a5659ca0ea3954ac298e38209c54ab23"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x4) 14:53:23 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async, rerun: 32) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec!;'], 0x9) (async, rerun: 32) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0xfff, 0x10000}) 14:53:23 executing program 4: socket(0x1e, 0x2, 0x0) [ 998.473022] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:23 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="a1e5b62593d6fa1436190fcc8f305d7954638148"], 0x9) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000280)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe2a2, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c000) 14:53:23 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:23 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="650000003d0d6429af"], 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)={0x9c, 0x4, 0xfd, 0x0, 0xb5, 0x9f, 0x1, 0x6, 0x3, 0x1, 0x3, 0x0, 0x0, 0x101, 0x1, 0x98, 0x9d, 0x6, 0x0, '\x00', 0x2}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20004000) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="650000003d0d6429af"], 0x9) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)={0x9c, 0x4, 0xfd, 0x0, 0xb5, 0x9f, 0x1, 0x6, 0x3, 0x1, 0x3, 0x0, 0x0, 0x101, 0x1, 0x98, 0x9d, 0x6, 0x0, '\x00', 0x2}) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20004000) (async) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async) 14:53:23 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec!;'], 0x9) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0xfff, 0x10000}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec!;'], 0x9) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0xfff, 0x10000}) (async) 14:53:23 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xf415) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x200, 0x44}}}}, [@NL80211_ATTR_VENDOR_DATA={0x37, 0xc5, "65b17ed96831f47ed68134ac7b94945ab81bd6f1f2e0c98a00ad4347742a4dbab3b340a5659ca0ea3954ac298e38209c54ab23"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x4) 14:53:23 executing program 4: socket(0x1e, 0x2, 0x0) 14:53:23 executing program 5: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:23 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="a1e5b62593d6fa1436190fcc8f305d7954638148"], 0x9) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000280)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe2a2, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c000) 14:53:23 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x9) 14:53:23 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="650000003d0d6429af"], 0x9) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)={0x9c, 0x4, 0xfd, 0x0, 0xb5, 0x9f, 0x1, 0x6, 0x3, 0x1, 0x3, 0x0, 0x0, 0x101, 0x1, 0x98, 0x9d, 0x6, 0x0, '\x00', 0x2}) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20004000) (rerun: 64) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 14:53:23 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xf415) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x200, 0x44}}}}, [@NL80211_ATTR_VENDOR_DATA={0x37, 0xc5, "65b17ed96831f47ed68134ac7b94945ab81bd6f1f2e0c98a00ad4347742a4dbab3b340a5659ca0ea3954ac298e38209c54ab23"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x4) 14:53:23 executing program 4: socket(0x0, 0x2, 0x0) 14:53:23 executing program 5: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:23 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="a1e5b62593d6fa1436190fcc8f305d7954638148"], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="a1e5b62593d6fa1436190fcc8f305d7954638148"], 0x9) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000280)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe2a2, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c000) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe2a2, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c000) 14:53:23 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x9) (async) 14:53:23 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x6, {0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x12, 0x6, 0x19, "3cec28d0ba7cfaf56ca727161501d2da2e3a99f99573887bd623a50c3be9988162b9f044f5004d9adef1379301855f6a55c7e613ccb58ec5dda74ac070a99900", "5a5efb4dcc4418ecc702f08a7c5c55c362c993a9ece1b78958d20cafe73b45d18d2420ebf21023f8f8f53a8640a08903833c263d598b8444c907416c49eda300", "bf8af44d5d67b4904a76ae974bdb66f0bda1e442cdcfdaa2b7ebb509096a375c", [0x10001, 0x8]}}) 14:53:23 executing program 5: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:23 executing program 4: socket(0x0, 0x2, 0x0) 14:53:23 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xf415) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x200, 0x44}}}}, [@NL80211_ATTR_VENDOR_DATA={0x37, 0xc5, "65b17ed96831f47ed68134ac7b94945ab81bd6f1f2e0c98a00ad4347742a4dbab3b340a5659ca0ea3954ac298e38209c54ab23"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000840) 14:53:23 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x9, 0x8000}) 14:53:23 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x9) 14:53:23 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x9, 0x8000}) 14:53:23 executing program 5: r0 = socket(0x0, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) [ 998.981319] kauditd_printk_skb: 122 callbacks suppressed [ 998.981331] audit: type=1400 audit(1676818403.897:1631): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=20880 comm="syz-executor.0" 14:53:23 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xf415) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 14:53:23 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x6, {0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x12, 0x6, 0x19, "3cec28d0ba7cfaf56ca727161501d2da2e3a99f99573887bd623a50c3be9988162b9f044f5004d9adef1379301855f6a55c7e613ccb58ec5dda74ac070a99900", "5a5efb4dcc4418ecc702f08a7c5c55c362c993a9ece1b78958d20cafe73b45d18d2420ebf21023f8f8f53a8640a08903833c263d598b8444c907416c49eda300", "bf8af44d5d67b4904a76ae974bdb66f0bda1e442cdcfdaa2b7ebb509096a375c", [0x10001, 0x8]}}) 14:53:23 executing program 4: socket(0x0, 0x2, 0x0) 14:53:24 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '!^-\'\x00'}, 0xa) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:24 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xf415) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) [ 999.083658] audit: type=1400 audit(1676818403.907:1632): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20884 comm="syz-executor.2" 14:53:24 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x0, 0x9, 0x8000}) 14:53:24 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '!^-\'\x00'}, 0xa) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:24 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x6, {0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x12, 0x6, 0x19, "3cec28d0ba7cfaf56ca727161501d2da2e3a99f99573887bd623a50c3be9988162b9f044f5004d9adef1379301855f6a55c7e613ccb58ec5dda74ac070a99900", "5a5efb4dcc4418ecc702f08a7c5c55c362c993a9ece1b78958d20cafe73b45d18d2420ebf21023f8f8f53a8640a08903833c263d598b8444c907416c49eda300", "bf8af44d5d67b4904a76ae974bdb66f0bda1e442cdcfdaa2b7ebb509096a375c", [0x10001, 0x8]}}) [ 999.160995] audit: type=1400 audit(1676818404.077:1633): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20904 comm="syz-executor.1" 14:53:24 executing program 4: socket(0x1e, 0x0, 0x0) 14:53:24 executing program 5: r0 = socket(0x0, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:24 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xf415) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) [ 999.241610] audit: type=1400 audit(1676818404.107:1634): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=20903 comm="syz-executor.0" 14:53:24 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '!^-\'\x00'}, 0xa) (async) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', '!^-\'\x00'}, 0xa) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:24 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x41}}}}, [@NL80211_ATTR_SSID={0x1b, 0x34, @random="6240c61e3721094a57793dd69dfe2c2552fdd749cb8c20"}, @NL80211_ATTR_PMK={0x14, 0xfe, "62b08fd39d2aa11be1e8a08e93599720"}, @NL80211_ATTR_PMK={0x14, 0xfe, "997d85384a03d11fc77cf460547675d1"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x8, 0xa49, 0x20, 0x0, 0x6, 0x100000, 0x103000, '\x00', 0x8001}) 14:53:24 executing program 4: socket(0x1e, 0x0, 0x0) 14:53:24 executing program 5: r0 = socket(0x0, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) [ 999.320936] audit: type=1400 audit(1676818404.227:1635): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20916 comm="syz-executor.2" 14:53:24 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) 14:53:24 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000000)=0xf415) [ 999.391980] audit: type=1400 audit(1676818404.227:1636): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20920 comm="syz-executor.1" 14:53:24 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x41}}}}, [@NL80211_ATTR_SSID={0x1b, 0x34, @random="6240c61e3721094a57793dd69dfe2c2552fdd749cb8c20"}, @NL80211_ATTR_PMK={0x14, 0xfe, "62b08fd39d2aa11be1e8a08e93599720"}, @NL80211_ATTR_PMK={0x14, 0xfe, "997d85384a03d11fc77cf460547675d1"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x8, 0xa49, 0x20, 0x0, 0x6, 0x100000, 0x103000, '\x00', 0x8001}) 14:53:24 executing program 4: socket(0x1e, 0x0, 0x0) 14:53:24 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x28) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = socket(0x2b, 0x5, 0xff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x42441000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="001f0100", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf254b0000000c00990006000000070000000600f700039200000600f700061f0000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000001c0)=0xfffffff7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000002e00000125bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f3ff0c000f000c000a000b0008000b00d683000008000bc00100000008000b000008000008000b000800000008000b000000800108000b00fbffffff08000b000100800008000b00ffffffff08000b004dfe000008000b0007000000"], 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x4) 14:53:24 executing program 5: r0 = socket(0x1, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) [ 999.467242] audit: type=1400 audit(1676818404.237:1637): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=20922 comm="syz-executor.0" 14:53:24 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) 14:53:24 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) socket$phonet(0x23, 0x2, 0x1) 14:53:24 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) [ 999.542547] audit: type=1400 audit(1676818404.337:1638): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20936 comm="syz-executor.2" 14:53:24 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x41}}}}, [@NL80211_ATTR_SSID={0x1b, 0x34, @random="6240c61e3721094a57793dd69dfe2c2552fdd749cb8c20"}, @NL80211_ATTR_PMK={0x14, 0xfe, "62b08fd39d2aa11be1e8a08e93599720"}, @NL80211_ATTR_PMK={0x14, 0xfe, "997d85384a03d11fc77cf460547675d1"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x8, 0xa49, 0x20, 0x0, 0x6, 0x100000, 0x103000, '\x00', 0x8001}) 14:53:24 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x28) (async, rerun: 64) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = socket(0x2b, 0x5, 0xff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x42441000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="001f0100", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf254b0000000c00990006000000070000000600f700039200000600f700061f0000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000001c0)=0xfffffff7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000002e00000125bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f3ff0c000f000c000a000b0008000b00d683000008000bc00100000008000b000008000008000b000800000008000b000000800108000b00fbffffff08000b000100800008000b00ffffffff08000b004dfe000008000b0007000000"], 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x4) 14:53:24 executing program 5: r0 = socket(0x1, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:24 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) socket$phonet(0x23, 0x2, 0x1) [ 999.649182] audit: type=1400 audit(1676818404.407:1639): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20935 comm="syz-executor.1" 14:53:24 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) 14:53:24 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) (async) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) 14:53:24 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40400e0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) [ 999.717028] audit: type=1400 audit(1676818404.427:1640): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=":.-" pid=20942 comm="syz-executor.0" 14:53:24 executing program 5: r0 = socket(0x1, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:24 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x28) (async, rerun: 32) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) r1 = socket(0x2b, 0x5, 0xff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x42441000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="001f0100", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf254b0000000c00990006000000070000000600f700039200000600f700061f0000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f00000001c0)=0xfffffff7) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000002e00000125bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f3ff0c000f000c000a000b0008000b00d683000008000bc00100000008000b000008000008000b000800000008000b000000800108000b00fbffffff08000b000100800008000b00ffffffff08000b004dfe000008000b0007000000"], 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x4) (rerun: 64) 14:53:24 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec!;'], 0x9) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0xfff, 0x10000}) 14:53:24 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0xe) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 14:53:24 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="65806563203a2e2d00"], 0x9) 14:53:24 executing program 5: socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:24 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="c4c1f850ce0f08260f0134d0660faeb204000000f30fc7b20b00000066b848000f00d0c4e119de2d7f5300000f01f50f0fb92e0000000c0f0d350f000000", 0x3e}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x44126}, @dstype0={0x6, 0x9}], 0x2) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000000c0)={0x8, 0x20, 0xfffffffffffff2d3}) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x9) 14:53:24 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec!;'], 0x9) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0xfff, 0x10000}) 14:53:24 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40400e0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:24 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (rerun: 64) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0xe) (async) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 14:53:24 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="c4c1f850ce0f08260f0134d0660faeb204000000f30fc7b20b00000066b848000f00d0c4e119de2d7f5300000f01f50f0fb92e0000000c0f0d350f000000", 0x3e}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x44126}, @dstype0={0x6, 0x9}], 0x2) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000000c0)={0x8, 0x20, 0xfffffffffffff2d3}) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x9) 14:53:24 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x85) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:24 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) 14:53:24 executing program 5: socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:25 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="c4c1f850ce0f08260f0134d0660faeb204000000f30fc7b20b00000066b848000f00d0c4e119de2d7f5300000f01f50f0fb92e0000000c0f0d350f000000", 0x3e}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x44126}, @dstype0={0x6, 0x9}], 0x2) (async, rerun: 64) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f00000000c0)={0x8, 0x20, 0xfffffffffffff2d3}) write$apparmor_exec(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x9) 14:53:25 executing program 0: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0xe) (async) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 14:53:25 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x85) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:25 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40400e0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:25 executing program 5: socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x1f, 0x0, 0x6, 0x8, 0xd}}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x48, r2, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2605, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4000080) socket(0x1a, 0x4, 0x3) 14:53:25 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x85) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:25 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x2, 0x4) 14:53:25 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x5, 0x1}) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:25 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, 0x0, 0x20040801) 14:53:25 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x85) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x1f, 0x0, 0x6, 0x8, 0xd}}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x48, r2, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2605, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4000080) socket(0x1a, 0x4, 0x3) 14:53:25 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, 0x0, 0x20040801) 14:53:25 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x2, 0x4) 14:53:25 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:25 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080)) 14:53:25 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x5, 0x1}) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:25 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, 0x0, 0x20040801) 14:53:25 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x2, 0x4) 14:53:25 executing program 4: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:25 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x5, 0x1}) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:25 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x4, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:25 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080)) 14:53:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x1f, 0x0, 0x6, 0x8, 0xd}}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x48, r2, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2605, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4000080) socket(0x1a, 0x4, 0x3) 14:53:25 executing program 4: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:25 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_USER_PRIO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) keyctl$reject(0x13, 0x0, 0x7, 0xbd14, r1) 14:53:25 executing program 4: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:25 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080)) 14:53:25 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_USER_PRIO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) keyctl$reject(0x13, 0x0, 0x7, 0xbd14, r1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_USER_PRIO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) keyctl$reject(0x13, 0x0, 0x7, 0xbd14, r1) (async) 14:53:25 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:25 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_USER_PRIO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) keyctl$reject(0x13, 0x0, 0x7, 0xbd14, r1) 14:53:25 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:53:25 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:25 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:25 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (async) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_USER_PRIO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) keyctl$reject(0x13, 0x0, 0x7, 0xbd14, r1) 14:53:25 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_USER_PRIO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) keyctl$reject(0x13, 0x0, 0x7, 0xbd14, r1) 14:53:25 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:53:25 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:25 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:25 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_USER_PRIO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) keyctl$reject(0x13, 0x0, 0x7, 0xbd14, r1) 14:53:25 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="060065632053"], 0x9) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000080)) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000100)={0x5c, "476bd013b389b5c9293ac267c9a8f9032eb7be49006af220c9f32939bb196b9f26bdd8139bd1cdaf48e21d7c50750a7f6ca44d47e860a443d84d3958cff5916d29bb6015b2dc0cd243ee2201ebbd2220f945c7033a68770a21dacd42"}) 14:53:25 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:25 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:25 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:53:26 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_USER_PRIO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) keyctl$reject(0x13, 0x0, 0x7, 0xbd14, r1) 14:53:26 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x20, 0x9, 0x5, 0xa, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8, 0x4, 0x200}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004040)={&(0x7f0000000180)=@newtfilter={0x3ec0, 0x2c, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x10}, {0x2, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x20}}, @filter_kind_options=@f_matchall={{0xd}, {0x1744, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x12f94bdd3a2993d9, 0x5}}, @TCA_MATCHALL_ACT={0x1730, 0x2, [@m_sample={0x118, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x120000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xc9, 0x6, "51859f9bdfeca67ae123d92804cd607e5ccc2c83f143d96f58f9b1b573337496589b3181a899639c1ed12e3f7ad0a844e540dc0bda18e9ce39059a687b9b4326d3efb73c2630238378eb7604521c3e26edd07606195949737e31e33e5bba61d126261a869bbb6649c6b6ce9cf2fe9210e4a498aca08e8e63b90b7117859a5e84e71cd967990ad5fb1f7976354266e152b7d64456fb41d4f9fa7b163f4b00bd1e2ae6d031017522cbd4e2d73c6545b6c8a7f7b0f34c1e4c75ddce59df9dce27770859491c07"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x14c, 0x4, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xfffffffb, 0x7, 0x401, 0x2}, 0x5}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x401, 0x8, 0x80000001, 0x7}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="707151d93127"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xcb0f}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x83}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x14}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="e05706475a54"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="e3d653b60691"}]}, {0x90, 0x6, "d1cf213eb5e1a5b99aaedf42f5c3b5c2d42fa499c80f8e4f0054027dc61b4734368161b01a93b1d02e3e871c955ea1144930bd5acdfe98fec5928b39119762c2242beb5c5c28fcfe8a961be78ab3fc7a26349b052458ecb06bc044d57dd7a7347af1275d4aba0d60a0c9e3ee34bfcf815b355790e3384611a96c78a2bd99c1e921a5f7c4a8037e837ff45290"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x180, 0x9, 0x0, 0x0, {{0x8}, {0x120, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xb2, 0x6, {0x7, 'nat\x00', 0x5, 0x1, "406a727c23b35f901f7bb3794faaa7b023d0f7a210f5f208d5dc1e26cbb8f916d201fa1c750fcf28e89873d334600576019507a787caa02e6d3678043deb32519fa65a1562f3799e278c294c97aa291cfd21a8130836c4c107d486b5955ec0f5625b78ec71497a542e8564bac0ebbd23a8f2991c0d2e7cbb82826b9ec6c57024143823dc4f40d685"}}]}, {0x3a, 0x6, "901099ae510ec50a164ff830123d81ad775b901c5a4c435afbb559b154d302d057b05aef324201c627a29cd80f6ac630cc7511233995"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0xf58, 0x1d, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x1, 0x4, 0x10000000, 0xff, 0x7}, 0x0, 0x20, [{0x86a, 0x10001, 0x1000, 0x2, 0x4, 0x1}, {0x3, 0x0, 0x7, 0xfffffc90, 0x20, 0x4}, {0x81, 0x100, 0x6, 0xfffffff9, 0x7fff, 0x7}, {0xa9, 0x20, 0x7, 0x400, 0x100, 0x20}, {0x3, 0x7fffffff, 0x6e, 0x934, 0x91, 0x6}, {0x800, 0x5, 0x1, 0x2, 0xfa85, 0xffff}]}, [{0x3e7, 0xa495, 0x7fff, 0xfffffbff, 0x4, 0x38e}, {0x100, 0xffffffff, 0xfff, 0x3ff, 0xffffffff, 0xfffffff7}, {0x4, 0x4, 0x9, 0xfffffffe, 0x6}, {0x0, 0x1, 0x3, 0x7, 0x5}, {0x884, 0xfffffffe, 0x10000, 0x3, 0x5, 0x2}, {0x1, 0x1, 0x3, 0x1d5, 0x5, 0xffffffff}, {0x1b, 0x6, 0x3, 0x10001, 0xfff, 0x1}, {0x8, 0x60, 0x2, 0x7, 0xe7, 0x3ff}, {0x3, 0x5, 0xe78, 0x14, 0x179, 0xfaf}, {0x7, 0x40, 0x9, 0x127, 0x8, 0x1}, {0x4e8a2f5, 0x4, 0x8, 0x34000000, 0x80000001, 0xb6c7}, {0x5, 0x7f, 0xdf2c, 0x1, 0x3, 0x2}, {0x80, 0x6, 0x5, 0x1000, 0x5e, 0x1000}, {0x10001, 0x4, 0x101, 0x3f, 0x1f39, 0x9}, {0xa80, 0xe51c, 0x5, 0x4, 0x8f9, 0x100}, {0x1, 0x6, 0x400, 0x6c, 0xd1f, 0x9}, {0x7ebe, 0x3, 0x2, 0x9, 0x100, 0x8}, {0x3c, 0x8, 0x7fffffff, 0x0, 0x64f9, 0x9}, {0xfffffff8, 0x1ff, 0x7fff, 0x9, 0xfffffff8, 0x6}, {0x10001, 0x7f, 0xfffff3b8, 0x6, 0x8001, 0x9}, {0x5, 0x5, 0x8, 0x3, 0x6, 0x401}, {0x3, 0x6, 0x22e8, 0x0, 0x4, 0x7f}, {0xe495, 0xff, 0x4e9, 0x4, 0x3f, 0x6}, {0x1, 0x7, 0x0, 0x8, 0xa9ef, 0xee2}, {0xffff, 0x8, 0xa, 0x0, 0x7, 0x1}, {0x3, 0x6, 0x8000, 0x2, 0x2, 0x6}, {0x100, 0x10000, 0x6b, 0x3, 0x1, 0x100}, {0x3, 0x3, 0x0, 0x2, 0x80, 0x3}, {0x10000, 0x6978, 0x20, 0x24f, 0x1, 0x8}, {0x5, 0x5, 0x6c4, 0x3, 0x1, 0xfffffff8}, {0x32, 0xffff7fff, 0x7e3eaf76, 0x1, 0x0, 0x8}, {0xb82, 0x9, 0x0, 0x75390933, 0x1, 0x7bd3f082}, {0x9, 0x2a, 0x1, 0x7f, 0x3}, {0x20, 0x3, 0x668, 0x2, 0xfff, 0x2}, {0x4bd, 0x773, 0x6, 0x0, 0x4, 0x6efd}, {0xfff, 0x2cd5710c, 0x8, 0x0, 0xff, 0x2000000}, {0xd6, 0x200, 0x8, 0x8001, 0xffffffff, 0x712f3c81}, {0x1, 0xbf1, 0xe030, 0x401, 0x2, 0x6}, {0x6, 0x0, 0x8000, 0x7da4, 0x8, 0x6}, {0xff, 0x4b, 0x0, 0xdb, 0x1d, 0x4}, {0x6, 0x2, 0x9, 0x5, 0x701, 0x400}, {0x80000000, 0x8, 0x7, 0x5, 0x77, 0xff}, {0x2, 0x7, 0x9, 0x6, 0x1, 0x3}, {0x10000, 0x9, 0x3, 0x8, 0x1, 0x9f7c}, {0x3f, 0x7fff, 0x1, 0x2, 0x6}, {0x8, 0x7, 0x5, 0xfffffc00, 0x4}, {0x7, 0xaca, 0x1, 0x991, 0x1, 0x9}, {0x81, 0x7, 0x0, 0x8000, 0x1ff, 0x1}, {0x1, 0x7d283733, 0xfff00000, 0xded3, 0x4, 0x205}, {0x9, 0xe9af, 0xea20, 0x5, 0x30f6, 0x12}, {0x6, 0x2, 0x1, 0x52, 0x101, 0x6d}, {0x40, 0x7, 0x2, 0xda93, 0x56c9, 0x3f}, {0x1, 0x7f, 0x9, 0x5, 0x1, 0xd3}, {0x6, 0x9, 0xffffffff, 0x7, 0x3ff, 0x4}, {0x9, 0x4, 0x5, 0x4, 0x4, 0x800}, {0x7fff, 0x81, 0xfffffc01, 0x200, 0x20, 0x3}, {0x3, 0x1, 0x7, 0x1, 0x7f, 0xfffffffa}, {0x9, 0x6, 0x4de, 0x7, 0x0, 0x6f}, {0x8, 0x7fffffff, 0x58f080ec, 0x8, 0x5fa, 0xffffffff}, {0x4, 0x3, 0x677, 0xffff, 0x1, 0xffff}, {0x6, 0x8000000, 0x9, 0xffff, 0x9, 0x9}, {0x9, 0x101, 0x10000, 0x3, 0x70, 0xc58}, {0x10000, 0x0, 0xfffffff9, 0xf5, 0x5, 0xffffffff}, {0xffff, 0xa49f, 0x4, 0xd3f, 0x3266f572, 0x7ff}, {0x3, 0x20, 0xbe, 0x7, 0x5, 0x3}, {0x9, 0x43, 0xffffffff, 0x4, 0x5, 0x1f}, {0x9, 0x8, 0x400, 0x5, 0x0, 0x9}, {0xd04, 0x7, 0x5, 0x9, 0x9, 0x1f}, {0x6, 0x7f, 0x8000, 0x8902, 0x7f, 0x9}, {0x9, 0x3, 0x7, 0x3, 0x8001, 0xffffffff}, {0x3, 0xfffffff8, 0x5, 0x7, 0x4, 0x56}, {0x5c9c, 0x0, 0x4, 0x40, 0x3ff, 0x7}, {0x80000000, 0x6, 0x400, 0x9ff1, 0x6, 0x40}, {0xb5f, 0xd844, 0x400, 0x1, 0x3, 0x7}, {0x11c, 0x9, 0x1, 0x5, 0x7, 0x7fff}, {0x4, 0x3, 0x9, 0x0, 0x2, 0x7}, {0xff, 0x7, 0x9, 0x93, 0x100, 0x9}, {0x5, 0x1, 0xffff, 0x9, 0x0, 0xfffffffc}, {0x9, 0x6, 0xd9a2, 0x0, 0xa5, 0x7}, {0x1, 0x7ff, 0x6e5c, 0xffff, 0x10000, 0x400}, {0x2, 0x5, 0x80, 0x6, 0x1}, {0x0, 0x0, 0x5, 0x200, 0x1, 0x1}, {0x8000, 0x1, 0x2, 0x9, 0x6, 0x7f}, {0x10001, 0x80000001, 0xa5bb, 0x5, 0x2, 0x81}, {0x8, 0x19, 0x6, 0xdd, 0xfffffffe}, {0xa7d3, 0x8655c05, 0x7fff, 0x81, 0x6, 0xfffffffe}, {0x4be9, 0x3c6, 0x3ff, 0xfffff800, 0x400, 0x1}, {0x10001, 0x3, 0x8, 0x0, 0x80000001, 0x20}, {0x4, 0x101, 0x2, 0x9, 0x2, 0xf850}, {0x400, 0xfff, 0x4, 0x2, 0xe2, 0xfaf}, {0x57f, 0x0, 0x0, 0x10000, 0x2, 0x3}, {0x5, 0x6, 0x1, 0x1, 0x10001, 0x9}, {0x4e, 0x4981086b, 0x9, 0x9, 0x7, 0x388b}, {0xeb80, 0x6, 0x9, 0x9, 0x3, 0x1}, {0x2, 0xd6e, 0xfffffff8, 0x3, 0x7, 0x43}, {0xfffffffd, 0x9, 0x3, 0x3, 0x1, 0xfffffffa}, {0x2, 0x0, 0x400, 0x5, 0x7ff, 0x7}, {0x5, 0x0, 0x101, 0x4, 0x7, 0x6}, {0x9, 0x2, 0x200, 0x2, 0x9, 0x3}, {0x3ff, 0xffff, 0x800, 0x0, 0xb365, 0x6}, {0x6, 0x8, 0x4, 0x20, 0x8, 0x9}, {0x0, 0x7fffffff, 0xffff, 0x4, 0x9, 0x4b8}, {0x5, 0x1, 0x9, 0x5, 0xffff, 0x8}, {0x9, 0x7, 0x7f, 0x965, 0x0, 0x81}, {0x4, 0x1000, 0x3f, 0x80000001, 0xfffffffb}, {0x0, 0x1ff, 0x4, 0x3f, 0x8001, 0x3f}, {0xb645, 0x66ef, 0x7, 0xfffffff8, 0x7fffffff, 0x6}, {0xff, 0xffff, 0xb57, 0x7f, 0x93f70315, 0xd8}, {0x81, 0x0, 0x7, 0xee63, 0x6, 0x6}, {0x1, 0x0, 0x3, 0x7fff, 0x4, 0xda}, {0xffffffff, 0x7ff, 0x401, 0xad, 0x131, 0xc48}, {0x1ff, 0x5, 0x3ff, 0x80000001, 0x385, 0x81}, {0xffffff01, 0x1, 0xfffffff9, 0x309, 0x5, 0x3}, {0x10001, 0x7fff, 0x2, 0x7, 0x400, 0x4}, {0x0, 0x9, 0x9, 0x3, 0x4, 0xd3}, {0x2, 0x80, 0x9, 0x5a1, 0x6, 0x7}, {0x5, 0x2, 0xfffc, 0x9, 0xbb91, 0x6}, {0xe8, 0x401, 0x6, 0x3f, 0x200, 0x161d}, {0x7, 0x9e, 0x7, 0x400, 0x9, 0xfff}, {0x0, 0x0, 0x9, 0x100, 0x4, 0x1}, {0x5, 0x1, 0x7ff, 0x8, 0x1, 0x100}, {0x67d, 0x200, 0x7, 0x9, 0x0, 0x9}, {0x2, 0x7, 0x80000001, 0xffffffc1, 0x200, 0x7}, {0x5, 0x3, 0x9, 0x8, 0xeee, 0x6}, {0xe70, 0x6, 0x3, 0x0, 0x7, 0x3}, {0x8, 0x1dd8, 0x8, 0x9, 0x3, 0x6}, {0x6c5, 0x5, 0x1000, 0x9670, 0x94e, 0x7}, {0x599, 0xfffffffa, 0xfffffff8, 0x2, 0xcec, 0x3}], [{0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4}, {0x3, 0x1}, {0x0, 0x2}, {0x4}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0xb404d1810dd8ed98, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x2}, {0x2}, {0xb93decd1058fd884, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x40af9a541e4505da, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x303fb9249f96d993}, {}, {0x4}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0xf, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x5}, {0xdc9394c54f92e55b}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}]}}]}, {0x7b, 0x6, "23ab806a80e784a42c1695f932ec086c10db4e8a09121da87c2b027e4f350ce2925663a5a16d14ba6ce646af4973676cb4dce5d5704a3f7a98193d0a547586e9a3a71ddd14f2282b9587be8f59610b3e56d82a6f55e5a4fce0695db7dec4c47588b2dd4369dbfa26dc52ed7e5298e1de84c8342c2bac75"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x124, 0x1a, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x1f, 0x0, 0x1, 0x1}, @remote, @dev={0xac, 0x14, 0x14, 0x23}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfff, 0x1, 0x1, 0x4}, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1, 0xff, 0x1}}]}, {0xac, 0x6, "22455b4614b321cdc28af8b76d0d792ec5983b9bea8f0db4e810666dc3bd460e25c2afaa9579d33a0b46cd77e90f607175a896a1ad888d17667d432d3ffd2f37377228cc972efab9d2a371c08ad69b82a7ec868b7d0de52a75eafd0bf8b9a7c49223694733bef3c1de2a6472465bbbbf02668fe2f4232912161a5e3762de9107fe1d7575e5696755aaba4d4200db9855f9b132eb4e98e2dbae076b17b5fcb70f9d8eb058be5b8d8b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x8c, 0xd, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="10f4ecf75044"}]}, {0x58, 0x6, "7d0acc4d9b96660afad72f96783bd21379c0e4957e18e5a878b9dbdf93fd9e5bdf72dbc1157e0c1bf031ef713ba76b6f2827bf8bf82c57ee135cdb1eb81ca4800a2966f3ab9e2b4d63b3221fafabcd907c3b2f20"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xec, 0x19, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x100}]}, {0xa4, 0x6, "48da09fc6f1cf145a10b6c28f6af0cc68b98d80507aade552fcbb8f69ab972cce0a068dafa797888d73410490bde482f3b39a7c6e9237f9aa987e5c0cccd981f9be50c1639814694eccace9ac89ed54f81ee25c8f8a496da05eeb74ba454180a9156bf05d00d8cb0261321d74facc49bf29b30bc86f559542e9b00d69c618e5f2f040db419f772d00a0db0bc271a1f2a48fcf1b2150184472fc23121cde7975b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x54, 0x14, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1a, 0x6, "a9cd9c865410e8d8ca7be18894b639c7ee53920726c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x100, 0x16, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6dd}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xc3, 0x6, "30c08d0ecfa25ebde46e81a0ad879d09797a8458288faa4737ec3334e1fa3873c82ddbaf8c4b1fcc724001b6c34e88448c185be2550b1f17af67ac5bf6001871831a9f1130cd5322a1dfc938d86f20d2c0b6ffafcd5f83bbac37abfadd6716161d846a38f82a8ad874a26d4863984676ae8825e5a17112bad57b8a8c366cb76d55b1c056b8bb137e524d21150472554ffed1d64264686b7709556cc7d3b7c30af87926af1911f269e79c6609037af321650bcac3a2f952d911b78b93f912b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_basic={{0xa}, {0x2714, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xead}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x203}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_ACT={0x10d8, 0x3, [@m_skbedit={0x80, 0x3, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0x49, 0x6, "21911f52ef9c5be2815329707eb770beab79d7fba3f659ea97adac591e0312aea88dc4decb69064f3ae1600d8d45599e544bb8bb54c6078c9c29d806ba3ecf3a5d5ed7790d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x1054, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x8, 0xd, 0x8e}, @multicast1, @private=0xa010102, 0xff000000}}]}, {0x1004, 0x6, "560bd343ffc3ffef04eb3c381955d4272bdba22a4151f2e2ce8a43dca7891392fe70d4be70c9cbe7da61da88244e073f054e2e106f33e1024e3c272201b9e685d12422b96eb1f2ab0949e390e7aa4740fb3f72ca55ae28258ead3749b40f4be10af0c41d7c197ccfb2bea321d01e6a71bb0f9be4381677f9c343891a8ecee31abaa5c196f2a3ac728f862d4db9be9232ed0ae61872b9d02d5f050f9d0419183f10733e379707401dd05c54a595560204e563b92b93bb1edc14f9706e92f3cf763be234701e0873d0e64be020409f048797000913338d4d9ad83a020b7866d8641db36b916acee26ebdaebe6aa5853e812846a1af59e63eeab86d29327d55c6fca2867b05fbc71f3108f4ba4f6340697680b67e5190141e176a9c084fefafe9417f324f78c40b2e6cabe36dddb42d212987bb4c71ec55272e6e4e0b65ff0b7e0edb9d15158e9806324cc6ed4e858fdf8686d772034dd9fd5f24a81b0cf8f1f362268f59f195023af7f3d35f5994f65b5a26fbb096127cc70e27c16cdd13b92cfc25754daa80b7789cd089bec73f69c88414d643e08ef2edc695926007f39bfbec3636c0e7bafa3e04e92460f6593adcd117fabb76ba2e463692167ee6c4e8459f5fc7e50c540339d54dd3a5ea468d96c5cf2579e21c782676e394f36de41f6a6d8de73beb74401a93f4778e4dc333ba9f6ca95094697189213ef80b1c411e922e98e690f834ef8489d2021a7b8fe1d7d4b588184d0c153f155f68dea098d759173272d4072dd69d5a479fd209c0e8559357a4d549a36fbee4b1eed9d90a44ec7f2ed00b2f35e4ec304cd609bd33a8d4f3d25605e221075bfb50e6a0d3d1941136915a1b72c64dc9024a60e13462cd181f3dc9b99a4287e5098236b006e3a7885acbfaba205fdd64a270014a912b1bf8324a5486bddd62b9c6d8f8acbf8125ef9aa9368fb291819ef710792248b13adbf62ca8011696e220cdb1206e1406a41be7c2dc18378f36fdf9f536384f042e5901affaab1d23ccfcfc19d6ed33b929a8506b91bc6c85c9eab6fd11e2ad2b765257787400ada5456e7a9803149267dc73cb13aae1e79caa8e5a7d939da17244227791521224b352cc98824370ac6e5e5812b6eaf836567fe5256140881f3f9d5ef1183b8608947b7076944aaa4a70994d7246c2353f1885de7b926f587e5e49c515c5cf7f651674cea59d76088713f9a576794e5c01a9403864ef0a3504143b0b91ed10abab86e564339e52afd1e34b0e97518c427ea571f490ecf013653404d11016176ca776870bd3f17b67499ca929d4cf5f691456e495058cc647314e61ab75711c39dd8b8fe0c29f2b851b39a59c0286859a9618d0da13a1117a020b62ff41e372722ab4574525ba61134c08312b7f77fca52cd49b68cd86d89e2c9d81aebc26af714b5e738f80485d19d5492763888e395bbaa8e349579ff9fa6dcc43ad8ac5ce219b15e2e02170fb796189b8e3813f765e6627ed281a6b272db73a0524283830cc15ae7cf6c9b955ad6c3fa90becd85327fb49af0e65ed22986d7e2b38b91b96579fb1a1a61d739e8c9a9cf0785efc56c8b4559bfda1a7b8f29868eace5bfe919c6916e95698ccceabcddb6e523d04c117d881243facd2715c70b938de653c26d6e5ee6356a57fc5c91ea92084ffe02247a18b63b858a9fa399bf2709cfc2ad5428b1cb1e0e5eb2d9a18c65f973dcf8c8eff2a54912a22815fe8e952c4d9cc3f1fdc1dfdd95d4a51185eaa93bdca3c9d93d20718fab52705f23e67006375d4fdba828f8e6141c5329720528c1b57f2b66103ccfc6a9ff96aa5ca0f251d90318f4ff29cc9b1fb780e0e0112e72b7067de05b1d213dbd557a94a7e90e3b9927ceb94823324ea42f0595ae6e0e25590b9f49d52de9932f3db9b02d8e391018460d801cc40b72aa66801b4ff4af1f64c64fd7ef34940fb24b0103fffdebf6809b00e7a7c0722347fe5186561f7c1fd8445f7c8f2e9fc0eb7d854eeea6b3a5f6a798acaac53f29ad3f67cbccc0906ab25287166ee6accdfe815d74328686f364acf60875e15590856cfb2814c9498e7164a86d7eccc5516d0f02131ae54d2f1844d7b3815e48f88307dd2524333f7ea15660ebec54e118ec64d5eb64c637ca3d4e1a844095a13eceb318f4f8fe891d433d53d1110672493ee080c64e681fd028d732b94ec93acbe0acb7f86df6fab28a415cb2667c277dc520cf310196412290ee3d908ba09173896376af553b0bb63308f2217681d9cf2701b8f86f7688e9e7c3f2a40fbc56e197b51f4714c00471a90bdbc92a9b0890fc9a0636f8043f87cbc1a859893d62a616c202a72c9b7c241a7800f75a269303ca0a612cf9f661ce936b5110c766fdfc6c80d86c12d94762637bea085135c615788f68eea3af842bfc7bc8010188f11ea5387a172e019e0cd32a19714dcf913fbb00ec24bea3763f3e5a7e7efeed522eee29e9bef0d1ca60ff5466553b93a233b5ba2da420c7c125d263c3cf3ac29a4b70d8b177d606de77c84f6294acf6d126c96e56a2a4100858dfe0918c82ec2470a7f1ba2252b46183bd21a022abf4125d7e18c2a676f313485f4e435a843659cd427a32551bbad21dc66ac76ac10d303cd5f9b2aa95d531330372d49a5a6f67fddb8a3b2afd88484e69033a12e0cf8300e13e5f7bf80711ed74c200cae2f73618588d7ae6581686e68e39a1f376aa6b2ffb9156aa802ac7155be921491a8c753732cfa01f9af81bcaca22b5263eb10a2d3a164105fa4bf96fa8710bf6cc5ca8608c089aa8e352cee8e24c43a745a588b359b64c6a1519f81ea7e401c131bff2e92e0c8732342ab34e738dd70d9d8eae4dac7378c865a477b11887f1011a6abd4f732d85ea74b1227388697a22a5e79088dcce5ce40e6cfa4324be47e87602976683c4867b7bfd9e79bd885e0049483d817faa14d5079fd379d884d52180f4eca5554b3de6e9b671c49ec03a2fbf655f36222855a72b43851f5be0ef0800624bfeeffefebb992ef274706743f5a0ccb8a6ee6c5089930d687115abcc78ec1b8b73bd9936cd62f2c99c2ed18467470a64fb3927be8c8c993927d4bbda3da4082df4837230bbd58bd0fa1e4e0aa7daf45bac48ebb80f9613e2039eccd6b4e29592a1d2496d55c5fecda27b743a2691c4fda50a823f82bd12da9aba8a95cce4a84b9f755c5d68f5813e0296b8db6be7d4c3bce39f398128a5f956b9d4aeae749b8b1ade74df8ba1bd06eb3cf2905246d08035cedc0c3999f8dd2eef406a8bbba6f635b146e57ae59c79dd6d3e3f85b8073252677fe9351ee22cdcc43bf75ced9b671bbb696905b6d200d2de3eea10c52328925f82ff6eaeaadc4428628f64e249b0c01ee3a03badf9cb4d5ece758c0ed199055d469192cb9177c26501e3c6e1c54d50a8a88ea34df4911592c5ce686cfe69099c703fbdb0863b28ea623c08ad90d7b7757b7cda475eb70f829c269b4ad43503fe461cd69116cee47cf2e8551742e227268416a597de624b06c8dfb77465a673d031b5556cd7dc32647c3f1d2dc7ed4622857897a933f958c45c8e0c775fd84720dc06ed83cca689ebc801f5f86d1bf67c93bec4894460b3796efaed5f7eb8b5311f7ad9d7ab1cbf5c38f95cbeff411c3e6984ef8c68d1cf6b32f7a031345a5febfdb0fa84edab11b17eff7145aaf0605efea21d6fd230a05aab3994eb9be9038f2431ceba3e93196acf4ff48b7272abcfe56d642fd12e64ada295354c82d29d9e6bc7ae98a83ce00b96a6eb8ea6482cd9e3b20d906a0b355ac3122d1f1f56bd0acd7d9643117e69aa77f75f5d59a3ce54da672964224ad9e91491eb7dfcd709dfdb12982ddc6e12f061a436fd86c324f2ecf1b5f5839b4f4bc0f89911cff9c083770da9b3005f77e6c341bbc30fe9640d16ff284826740b13e8d3862792c3167de111f520d26bce149e9a2214a5445bb96187ec6964c6c4d7f66fdcea440954e234a344e86b47ff804013dd72f2109afe9e7530c8954d8823966f8b21ac944b9e7dfc320256f38c4a010fdc587cd3cfac4966b68bc2e041ca9cdae7461957e40f887fdab35928ea74f949ae2066a6b7886ebfe37bc129c01bfb2196d50ba84187cc1ef75d0d000da5183e40ec42b893e473d6bd3b0275aa2e3b2c5ef2c0f8af9cb328d0efbd36df7152100fc8863b122663d3346843f44ca88488bc7285fc0341443915c44076733c787984353ecce5ed8006c091f919bcd165fda308869c106b948fcd576d5600512f97da6e5f20a269122a4b9e4425e24db53bbeba3c1975e44cc4bfae734f5e6d4ff171270f4a3891eabb6943e7e1ee5a3b39e4f649a932a1c64818f3384933b7c04b772fdc7b3fd8f8ea3b234ab65ec8600798432975f0dcb3e3d218a4d7b20462a39d530ef2c6d107059575fbbfb7e8c81d772c20b404abb326fa73225cdc09dc82c344520fd477be5d092f241ca2496fe6992ce91be7c6f338878e987086090557d0861617e6bb0cbb9b503ecc7b40acb86f753692a491956e6b9ae62427191dac7209f32147ae4ec088b3205d917abae6fb9ba189ca4668228d62fb6d5f1bf889143ef531bbe8aea858f6e2a51415c1bdc60717cc5b41b52eaf68ded9155388518c4950a366042d92103762a2a0c3635ca6f9c51c2b6fe6a86d6d0cadc06a350499086dfa6e404b6628e1f94d38730f3b6f7dfe092a03b482e935b1fad2500e62276bc96eac2fa38c3dac8e7794f4b0596d4719acfea6e6a29d4b72c2ad220a2bdaa82c8d8307cbdc2bf89cafebaad7e8db20162560a7e30c2677d1c9c45682ea222c708c6d76239f905f49e734d269a97d075db6f2091af335647723acf26d4d699b3d841a763c24012ccc20a41c7890897d2a61b654a74ebdf253cb068c407910dc49063efdf85bea3e8b27fec3f3f4f28b51d720d01e1983e1dc0ad29ab469176242590228f64bae5e9ccb895a3d8f5e2fe736b987f7a6055606f04a2c44029a08bfaba0df286259b1de8907508fe7544d31f040192cfe81cd6e3213f2e363152d24d7428f332b10b151595654f2f1872ef4613ba289613a69586c79b0fc83709e3ae3f6aa1a7524d24f6edc484da17abe07e9da30bf60d3aaf29ec8c49c9ac7bc67cc1610d13230d1616500626db8d606b1a261dfcc8b8aaf47eb1d3b9c590fda7a5ec75b634c400e59b0240f9067e07bc5b32e33be4c92c8a88daef51de0d949728d9feae35626802ac5ec0cfa058083013e50ce6a0e4ca6048e2516c005e3987fe132cd5a3cc4b9a21ba3de99c7a541904da1f214e2df1c8b6731cb46c749449b264edf2d1748b80e7e5432715d86008e2a2005618dca46cf12d48eb20e157447cdf1c633930634128230e6e4a387d09b644d463d940d3fd605a2150cf1e1477e899e8ee9a5a1b22b0fbccee9ef0ec6b6ef1daab1c09e1c2eb0654ede07207c50a049ea5ad2682d0e7c824b7eb28a886a9635abd8b9ee03bb64c26499c9facb617dedf7d2cf98365d93523c1133848cd8832c0cb93eaf4d8f31cf4576f6c143f11fe2bd45f56d83ec806e1c770bd70de3a4527bee4c71f2092c102271b7d3a9ea71e2c1bfebe921403d825f5e7b37f2e67134768d8091a942c7f7f628c4adbd1094362caa9606d955f0290cff9b35f9bdd08925c980b4a673766236b8cbe425ce0db3d581a54218f3b039ab74b3ce96fb8d3f69d2628bbfdbab70c18fdaf8c38498906c2962ba9667732f5d2f3b8b3fd5fe129914f18559ff290e8160058fc0d6da52459227d28867d4c9961"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_ACT={0x178, 0x3, [@m_connmark={0x174, 0x2, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x7, 0xffffffffffffffff, 0xfff, 0x6}, 0x8b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x7ff, 0x3, 0x5, 0x89c}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x7, 0x7, 0x2, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x8, 0x7, 0x9, 0x2}, 0xf40c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x1f, 0x8, 0xffff, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x800, 0x7, 0x6, 0xffffffc4}, 0x5}}]}, {0x9a, 0x6, "d7e96d3e125960c11300bdebe01df6b5fce7991c096ee3dbc36bca0e3a06ec5a4d06be496945ae15e4f8d89c5d966ae7151a3021b6241c22ec7c2442d4585c66a3080b09816b806253080349e0d179871c5c42fb5e62eb0fc2464c9577a7665ff171d4e869d6d3272a1a01d2a6004a827862726df06ca36234a0e27cec7d75971bc9551dac9e47f124523427e931022db094b44581bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BASIC_ACT={0x148c, 0x3, [@m_skbedit={0x1038, 0x7, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x70, 0x4, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1add, 0xffffffffffffffff}}]}, {0x35, 0x6, "481fcbefec5e0bbaf3aad25d9961388d105f4a3be256b24c02a15fe2ae051e427fe5a9ba80232335591172d838561da349"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x15c, 0xc, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x3, 0x3, 0x7}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0x0, 0x8, 0x6, 0x1f}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3517}]}, {0xa3, 0x6, "c94e144c37bcdad5460646338dce602422af7f922de06447417d1f1b37733423414c7e57c128efdabfe89db12610081d06585fc30ad76417f776940460f97ede31fd2b6c1e8b42e1a63ec7132f81313d8087c1902f2c36288014d9ba38a2c55698e3ca5fc779217ce21d3ea1cfbe7d7a0c7484a9a248054fe9f37a685c3a4f33b3288f97164753838b13c677638a4ae861828d2c8162e71566572e0df0ba31"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x74, 0x13, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x3b, 0x6, "2192e3648bfb129df7a4eba40b8cac0eb9afba38c54e8a13fa4683593c41d6f18440a56ca7c71aa684b2d49065481d12169e6c3cdc3d83"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0xb8, 0xc, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x10000, 0x10000000, 0x8, 0xeea}}]}, {0x73, 0x6, "2d9eec0ba0d32d5977250985f60a6e2b73601216bb7357e981a009ef7faaa12f5c295b381869a9a75e75819b7307cf4d5e16c3262b9cdf28f68f5c6e1b6ff0c5c3e2d8e412b96740ae5e87acf662c2a1371199cdde231d840e62f2f67709adaeb2e06aa541fa6a658fff9b94f3aae8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x9c, 0xf, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4, 0x80000001, 0x7, 0x800, 0xc361}}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x3, 0x10000000, 0xd, 0x1420800}}]}, {0x44, 0x6, "ee71cabee94ef9dac903a70c232282974af6c83547ff3fa5f541e67359cc9c476ce9cc946dba4ad070e1aa989d22ffd26b522054aef428a62c8c1c81fc6e9dee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xbc, 0xf, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x3, 0x4, 0x4, 0x1c}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe, 0x10001, 0x2, 0xe11f, 0x80000001}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3f, 0x0, 0x8, 0x6, 0x3}, 0x2, r3}}]}, {0x30, 0x6, "eb83243c11dca5fd9fb01560e04584b0852e6a0be44745e99e4c7d9180bb91e0e0a62cd337ec36e49fe3a8a6"}, {0xc, 0x7, {0x1, 0x29e3d9ada5b4bd52}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5d}, @TCA_CHAIN={0x8, 0xb, 0x60eb}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x3ec0}, 0x1, 0x0, 0x0, 0xc045}, 0x24000050) 14:53:26 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040801) 14:53:26 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="060065632053"], 0x9) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000080)) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000100)={0x5c, "476bd013b389b5c9293ac267c9a8f9032eb7be49006af220c9f32939bb196b9f26bdd8139bd1cdaf48e21d7c50750a7f6ca44d47e860a443d84d3958cff5916d29bb6015b2dc0cd243ee2201ebbd2220f945c7033a68770a21dacd42"}) 14:53:26 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:26 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]}) 14:53:26 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_USER_PRIO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 14:53:26 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:53:26 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x20, 0x9, 0x5, 0xa, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8, 0x4, 0x200}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004040)={&(0x7f0000000180)=@newtfilter={0x3ec0, 0x2c, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x10}, {0x2, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x20}}, @filter_kind_options=@f_matchall={{0xd}, {0x1744, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x12f94bdd3a2993d9, 0x5}}, @TCA_MATCHALL_ACT={0x1730, 0x2, [@m_sample={0x118, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x120000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xc9, 0x6, "51859f9bdfeca67ae123d92804cd607e5ccc2c83f143d96f58f9b1b573337496589b3181a899639c1ed12e3f7ad0a844e540dc0bda18e9ce39059a687b9b4326d3efb73c2630238378eb7604521c3e26edd07606195949737e31e33e5bba61d126261a869bbb6649c6b6ce9cf2fe9210e4a498aca08e8e63b90b7117859a5e84e71cd967990ad5fb1f7976354266e152b7d64456fb41d4f9fa7b163f4b00bd1e2ae6d031017522cbd4e2d73c6545b6c8a7f7b0f34c1e4c75ddce59df9dce27770859491c07"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x14c, 0x4, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xfffffffb, 0x7, 0x401, 0x2}, 0x5}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x401, 0x8, 0x80000001, 0x7}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="707151d93127"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xcb0f}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x83}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x14}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="e05706475a54"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="e3d653b60691"}]}, {0x90, 0x6, "d1cf213eb5e1a5b99aaedf42f5c3b5c2d42fa499c80f8e4f0054027dc61b4734368161b01a93b1d02e3e871c955ea1144930bd5acdfe98fec5928b39119762c2242beb5c5c28fcfe8a961be78ab3fc7a26349b052458ecb06bc044d57dd7a7347af1275d4aba0d60a0c9e3ee34bfcf815b355790e3384611a96c78a2bd99c1e921a5f7c4a8037e837ff45290"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x180, 0x9, 0x0, 0x0, {{0x8}, {0x120, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xb2, 0x6, {0x7, 'nat\x00', 0x5, 0x1, "406a727c23b35f901f7bb3794faaa7b023d0f7a210f5f208d5dc1e26cbb8f916d201fa1c750fcf28e89873d334600576019507a787caa02e6d3678043deb32519fa65a1562f3799e278c294c97aa291cfd21a8130836c4c107d486b5955ec0f5625b78ec71497a542e8564bac0ebbd23a8f2991c0d2e7cbb82826b9ec6c57024143823dc4f40d685"}}]}, {0x3a, 0x6, "901099ae510ec50a164ff830123d81ad775b901c5a4c435afbb559b154d302d057b05aef324201c627a29cd80f6ac630cc7511233995"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0xf58, 0x1d, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x1, 0x4, 0x10000000, 0xff, 0x7}, 0x0, 0x20, [{0x86a, 0x10001, 0x1000, 0x2, 0x4, 0x1}, {0x3, 0x0, 0x7, 0xfffffc90, 0x20, 0x4}, {0x81, 0x100, 0x6, 0xfffffff9, 0x7fff, 0x7}, {0xa9, 0x20, 0x7, 0x400, 0x100, 0x20}, {0x3, 0x7fffffff, 0x6e, 0x934, 0x91, 0x6}, {0x800, 0x5, 0x1, 0x2, 0xfa85, 0xffff}]}, [{0x3e7, 0xa495, 0x7fff, 0xfffffbff, 0x4, 0x38e}, {0x100, 0xffffffff, 0xfff, 0x3ff, 0xffffffff, 0xfffffff7}, {0x4, 0x4, 0x9, 0xfffffffe, 0x6}, {0x0, 0x1, 0x3, 0x7, 0x5}, {0x884, 0xfffffffe, 0x10000, 0x3, 0x5, 0x2}, {0x1, 0x1, 0x3, 0x1d5, 0x5, 0xffffffff}, {0x1b, 0x6, 0x3, 0x10001, 0xfff, 0x1}, {0x8, 0x60, 0x2, 0x7, 0xe7, 0x3ff}, {0x3, 0x5, 0xe78, 0x14, 0x179, 0xfaf}, {0x7, 0x40, 0x9, 0x127, 0x8, 0x1}, {0x4e8a2f5, 0x4, 0x8, 0x34000000, 0x80000001, 0xb6c7}, {0x5, 0x7f, 0xdf2c, 0x1, 0x3, 0x2}, {0x80, 0x6, 0x5, 0x1000, 0x5e, 0x1000}, {0x10001, 0x4, 0x101, 0x3f, 0x1f39, 0x9}, {0xa80, 0xe51c, 0x5, 0x4, 0x8f9, 0x100}, {0x1, 0x6, 0x400, 0x6c, 0xd1f, 0x9}, {0x7ebe, 0x3, 0x2, 0x9, 0x100, 0x8}, {0x3c, 0x8, 0x7fffffff, 0x0, 0x64f9, 0x9}, {0xfffffff8, 0x1ff, 0x7fff, 0x9, 0xfffffff8, 0x6}, {0x10001, 0x7f, 0xfffff3b8, 0x6, 0x8001, 0x9}, {0x5, 0x5, 0x8, 0x3, 0x6, 0x401}, {0x3, 0x6, 0x22e8, 0x0, 0x4, 0x7f}, {0xe495, 0xff, 0x4e9, 0x4, 0x3f, 0x6}, {0x1, 0x7, 0x0, 0x8, 0xa9ef, 0xee2}, {0xffff, 0x8, 0xa, 0x0, 0x7, 0x1}, {0x3, 0x6, 0x8000, 0x2, 0x2, 0x6}, {0x100, 0x10000, 0x6b, 0x3, 0x1, 0x100}, {0x3, 0x3, 0x0, 0x2, 0x80, 0x3}, {0x10000, 0x6978, 0x20, 0x24f, 0x1, 0x8}, {0x5, 0x5, 0x6c4, 0x3, 0x1, 0xfffffff8}, {0x32, 0xffff7fff, 0x7e3eaf76, 0x1, 0x0, 0x8}, {0xb82, 0x9, 0x0, 0x75390933, 0x1, 0x7bd3f082}, {0x9, 0x2a, 0x1, 0x7f, 0x3}, {0x20, 0x3, 0x668, 0x2, 0xfff, 0x2}, {0x4bd, 0x773, 0x6, 0x0, 0x4, 0x6efd}, {0xfff, 0x2cd5710c, 0x8, 0x0, 0xff, 0x2000000}, {0xd6, 0x200, 0x8, 0x8001, 0xffffffff, 0x712f3c81}, {0x1, 0xbf1, 0xe030, 0x401, 0x2, 0x6}, {0x6, 0x0, 0x8000, 0x7da4, 0x8, 0x6}, {0xff, 0x4b, 0x0, 0xdb, 0x1d, 0x4}, {0x6, 0x2, 0x9, 0x5, 0x701, 0x400}, {0x80000000, 0x8, 0x7, 0x5, 0x77, 0xff}, {0x2, 0x7, 0x9, 0x6, 0x1, 0x3}, {0x10000, 0x9, 0x3, 0x8, 0x1, 0x9f7c}, {0x3f, 0x7fff, 0x1, 0x2, 0x6}, {0x8, 0x7, 0x5, 0xfffffc00, 0x4}, {0x7, 0xaca, 0x1, 0x991, 0x1, 0x9}, {0x81, 0x7, 0x0, 0x8000, 0x1ff, 0x1}, {0x1, 0x7d283733, 0xfff00000, 0xded3, 0x4, 0x205}, {0x9, 0xe9af, 0xea20, 0x5, 0x30f6, 0x12}, {0x6, 0x2, 0x1, 0x52, 0x101, 0x6d}, {0x40, 0x7, 0x2, 0xda93, 0x56c9, 0x3f}, {0x1, 0x7f, 0x9, 0x5, 0x1, 0xd3}, {0x6, 0x9, 0xffffffff, 0x7, 0x3ff, 0x4}, {0x9, 0x4, 0x5, 0x4, 0x4, 0x800}, {0x7fff, 0x81, 0xfffffc01, 0x200, 0x20, 0x3}, {0x3, 0x1, 0x7, 0x1, 0x7f, 0xfffffffa}, {0x9, 0x6, 0x4de, 0x7, 0x0, 0x6f}, {0x8, 0x7fffffff, 0x58f080ec, 0x8, 0x5fa, 0xffffffff}, {0x4, 0x3, 0x677, 0xffff, 0x1, 0xffff}, {0x6, 0x8000000, 0x9, 0xffff, 0x9, 0x9}, {0x9, 0x101, 0x10000, 0x3, 0x70, 0xc58}, {0x10000, 0x0, 0xfffffff9, 0xf5, 0x5, 0xffffffff}, {0xffff, 0xa49f, 0x4, 0xd3f, 0x3266f572, 0x7ff}, {0x3, 0x20, 0xbe, 0x7, 0x5, 0x3}, {0x9, 0x43, 0xffffffff, 0x4, 0x5, 0x1f}, {0x9, 0x8, 0x400, 0x5, 0x0, 0x9}, {0xd04, 0x7, 0x5, 0x9, 0x9, 0x1f}, {0x6, 0x7f, 0x8000, 0x8902, 0x7f, 0x9}, {0x9, 0x3, 0x7, 0x3, 0x8001, 0xffffffff}, {0x3, 0xfffffff8, 0x5, 0x7, 0x4, 0x56}, {0x5c9c, 0x0, 0x4, 0x40, 0x3ff, 0x7}, {0x80000000, 0x6, 0x400, 0x9ff1, 0x6, 0x40}, {0xb5f, 0xd844, 0x400, 0x1, 0x3, 0x7}, {0x11c, 0x9, 0x1, 0x5, 0x7, 0x7fff}, {0x4, 0x3, 0x9, 0x0, 0x2, 0x7}, {0xff, 0x7, 0x9, 0x93, 0x100, 0x9}, {0x5, 0x1, 0xffff, 0x9, 0x0, 0xfffffffc}, {0x9, 0x6, 0xd9a2, 0x0, 0xa5, 0x7}, {0x1, 0x7ff, 0x6e5c, 0xffff, 0x10000, 0x400}, {0x2, 0x5, 0x80, 0x6, 0x1}, {0x0, 0x0, 0x5, 0x200, 0x1, 0x1}, {0x8000, 0x1, 0x2, 0x9, 0x6, 0x7f}, {0x10001, 0x80000001, 0xa5bb, 0x5, 0x2, 0x81}, {0x8, 0x19, 0x6, 0xdd, 0xfffffffe}, {0xa7d3, 0x8655c05, 0x7fff, 0x81, 0x6, 0xfffffffe}, {0x4be9, 0x3c6, 0x3ff, 0xfffff800, 0x400, 0x1}, {0x10001, 0x3, 0x8, 0x0, 0x80000001, 0x20}, {0x4, 0x101, 0x2, 0x9, 0x2, 0xf850}, {0x400, 0xfff, 0x4, 0x2, 0xe2, 0xfaf}, {0x57f, 0x0, 0x0, 0x10000, 0x2, 0x3}, {0x5, 0x6, 0x1, 0x1, 0x10001, 0x9}, {0x4e, 0x4981086b, 0x9, 0x9, 0x7, 0x388b}, {0xeb80, 0x6, 0x9, 0x9, 0x3, 0x1}, {0x2, 0xd6e, 0xfffffff8, 0x3, 0x7, 0x43}, {0xfffffffd, 0x9, 0x3, 0x3, 0x1, 0xfffffffa}, {0x2, 0x0, 0x400, 0x5, 0x7ff, 0x7}, {0x5, 0x0, 0x101, 0x4, 0x7, 0x6}, {0x9, 0x2, 0x200, 0x2, 0x9, 0x3}, {0x3ff, 0xffff, 0x800, 0x0, 0xb365, 0x6}, {0x6, 0x8, 0x4, 0x20, 0x8, 0x9}, {0x0, 0x7fffffff, 0xffff, 0x4, 0x9, 0x4b8}, {0x5, 0x1, 0x9, 0x5, 0xffff, 0x8}, {0x9, 0x7, 0x7f, 0x965, 0x0, 0x81}, {0x4, 0x1000, 0x3f, 0x80000001, 0xfffffffb}, {0x0, 0x1ff, 0x4, 0x3f, 0x8001, 0x3f}, {0xb645, 0x66ef, 0x7, 0xfffffff8, 0x7fffffff, 0x6}, {0xff, 0xffff, 0xb57, 0x7f, 0x93f70315, 0xd8}, {0x81, 0x0, 0x7, 0xee63, 0x6, 0x6}, {0x1, 0x0, 0x3, 0x7fff, 0x4, 0xda}, {0xffffffff, 0x7ff, 0x401, 0xad, 0x131, 0xc48}, {0x1ff, 0x5, 0x3ff, 0x80000001, 0x385, 0x81}, {0xffffff01, 0x1, 0xfffffff9, 0x309, 0x5, 0x3}, {0x10001, 0x7fff, 0x2, 0x7, 0x400, 0x4}, {0x0, 0x9, 0x9, 0x3, 0x4, 0xd3}, {0x2, 0x80, 0x9, 0x5a1, 0x6, 0x7}, {0x5, 0x2, 0xfffc, 0x9, 0xbb91, 0x6}, {0xe8, 0x401, 0x6, 0x3f, 0x200, 0x161d}, {0x7, 0x9e, 0x7, 0x400, 0x9, 0xfff}, {0x0, 0x0, 0x9, 0x100, 0x4, 0x1}, {0x5, 0x1, 0x7ff, 0x8, 0x1, 0x100}, {0x67d, 0x200, 0x7, 0x9, 0x0, 0x9}, {0x2, 0x7, 0x80000001, 0xffffffc1, 0x200, 0x7}, {0x5, 0x3, 0x9, 0x8, 0xeee, 0x6}, {0xe70, 0x6, 0x3, 0x0, 0x7, 0x3}, {0x8, 0x1dd8, 0x8, 0x9, 0x3, 0x6}, {0x6c5, 0x5, 0x1000, 0x9670, 0x94e, 0x7}, {0x599, 0xfffffffa, 0xfffffff8, 0x2, 0xcec, 0x3}], [{0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4}, {0x3, 0x1}, {0x0, 0x2}, {0x4}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0xb404d1810dd8ed98, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x2}, {0x2}, {0xb93decd1058fd884, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x40af9a541e4505da, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x303fb9249f96d993}, {}, {0x4}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0xf, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x5}, {0xdc9394c54f92e55b}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}]}}]}, {0x7b, 0x6, "23ab806a80e784a42c1695f932ec086c10db4e8a09121da87c2b027e4f350ce2925663a5a16d14ba6ce646af4973676cb4dce5d5704a3f7a98193d0a547586e9a3a71ddd14f2282b9587be8f59610b3e56d82a6f55e5a4fce0695db7dec4c47588b2dd4369dbfa26dc52ed7e5298e1de84c8342c2bac75"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x124, 0x1a, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x1f, 0x0, 0x1, 0x1}, @remote, @dev={0xac, 0x14, 0x14, 0x23}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfff, 0x1, 0x1, 0x4}, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1, 0xff, 0x1}}]}, {0xac, 0x6, "22455b4614b321cdc28af8b76d0d792ec5983b9bea8f0db4e810666dc3bd460e25c2afaa9579d33a0b46cd77e90f607175a896a1ad888d17667d432d3ffd2f37377228cc972efab9d2a371c08ad69b82a7ec868b7d0de52a75eafd0bf8b9a7c49223694733bef3c1de2a6472465bbbbf02668fe2f4232912161a5e3762de9107fe1d7575e5696755aaba4d4200db9855f9b132eb4e98e2dbae076b17b5fcb70f9d8eb058be5b8d8b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x8c, 0xd, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="10f4ecf75044"}]}, {0x58, 0x6, "7d0acc4d9b96660afad72f96783bd21379c0e4957e18e5a878b9dbdf93fd9e5bdf72dbc1157e0c1bf031ef713ba76b6f2827bf8bf82c57ee135cdb1eb81ca4800a2966f3ab9e2b4d63b3221fafabcd907c3b2f20"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xec, 0x19, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x100}]}, {0xa4, 0x6, "48da09fc6f1cf145a10b6c28f6af0cc68b98d80507aade552fcbb8f69ab972cce0a068dafa797888d73410490bde482f3b39a7c6e9237f9aa987e5c0cccd981f9be50c1639814694eccace9ac89ed54f81ee25c8f8a496da05eeb74ba454180a9156bf05d00d8cb0261321d74facc49bf29b30bc86f559542e9b00d69c618e5f2f040db419f772d00a0db0bc271a1f2a48fcf1b2150184472fc23121cde7975b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x54, 0x14, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1a, 0x6, "a9cd9c865410e8d8ca7be18894b639c7ee53920726c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x100, 0x16, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6dd}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xc3, 0x6, "30c08d0ecfa25ebde46e81a0ad879d09797a8458288faa4737ec3334e1fa3873c82ddbaf8c4b1fcc724001b6c34e88448c185be2550b1f17af67ac5bf6001871831a9f1130cd5322a1dfc938d86f20d2c0b6ffafcd5f83bbac37abfadd6716161d846a38f82a8ad874a26d4863984676ae8825e5a17112bad57b8a8c366cb76d55b1c056b8bb137e524d21150472554ffed1d64264686b7709556cc7d3b7c30af87926af1911f269e79c6609037af321650bcac3a2f952d911b78b93f912b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_basic={{0xa}, {0x2714, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xead}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x203}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_ACT={0x10d8, 0x3, [@m_skbedit={0x80, 0x3, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0x49, 0x6, "21911f52ef9c5be2815329707eb770beab79d7fba3f659ea97adac591e0312aea88dc4decb69064f3ae1600d8d45599e544bb8bb54c6078c9c29d806ba3ecf3a5d5ed7790d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x1054, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x8, 0xd, 0x8e}, @multicast1, @private=0xa010102, 0xff000000}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_ACT={0x178, 0x3, [@m_connmark={0x174, 0x2, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x7, 0xffffffffffffffff, 0xfff, 0x6}, 0x8b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x7ff, 0x3, 0x5, 0x89c}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x7, 0x7, 0x2, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x8, 0x7, 0x9, 0x2}, 0xf40c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x1f, 0x8, 0xffff, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x800, 0x7, 0x6, 0xffffffc4}, 0x5}}]}, {0x9a, 0x6, "d7e96d3e125960c11300bdebe01df6b5fce7991c096ee3dbc36bca0e3a06ec5a4d06be496945ae15e4f8d89c5d966ae7151a3021b6241c22ec7c2442d4585c66a3080b09816b806253080349e0d179871c5c42fb5e62eb0fc2464c9577a7665ff171d4e869d6d3272a1a01d2a6004a827862726df06ca36234a0e27cec7d75971bc9551dac9e47f124523427e931022db094b44581bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BASIC_ACT={0x148c, 0x3, [@m_skbedit={0x1038, 0x7, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x70, 0x4, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1add, 0xffffffffffffffff}}]}, {0x35, 0x6, "481fcbefec5e0bbaf3aad25d9961388d105f4a3be256b24c02a15fe2ae051e427fe5a9ba80232335591172d838561da349"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x15c, 0xc, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x3, 0x3, 0x7}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0x0, 0x8, 0x6, 0x1f}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3517}]}, {0xa3, 0x6, "c94e144c37bcdad5460646338dce602422af7f922de06447417d1f1b37733423414c7e57c128efdabfe89db12610081d06585fc30ad76417f776940460f97ede31fd2b6c1e8b42e1a63ec7132f81313d8087c1902f2c36288014d9ba38a2c55698e3ca5fc779217ce21d3ea1cfbe7d7a0c7484a9a248054fe9f37a685c3a4f33b3288f97164753838b13c677638a4ae861828d2c8162e71566572e0df0ba31"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x74, 0x13, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x3b, 0x6, "2192e3648bfb129df7a4eba40b8cac0eb9afba38c54e8a13fa4683593c41d6f18440a56ca7c71aa684b2d49065481d12169e6c3cdc3d83"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0xb8, 0xc, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x10000, 0x10000000, 0x8, 0xeea}}]}, {0x73, 0x6, "2d9eec0ba0d32d5977250985f60a6e2b73601216bb7357e981a009ef7faaa12f5c295b381869a9a75e75819b7307cf4d5e16c3262b9cdf28f68f5c6e1b6ff0c5c3e2d8e412b96740ae5e87acf662c2a1371199cdde231d840e62f2f67709adaeb2e06aa541fa6a658fff9b94f3aae8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x9c, 0xf, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4, 0x80000001, 0x7, 0x800, 0xc361}}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x3, 0x10000000, 0xd, 0x1420800}}]}, {0x44, 0x6, "ee71cabee94ef9dac903a70c232282974af6c83547ff3fa5f541e67359cc9c476ce9cc946dba4ad070e1aa989d22ffd26b522054aef428a62c8c1c81fc6e9dee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xbc, 0xf, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x3, 0x4, 0x4, 0x1c}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe, 0x10001, 0x2, 0xe11f, 0x80000001}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3f, 0x0, 0x8, 0x6, 0x3}, 0x2, r3}}]}, {0x30, 0x6, "eb83243c11dca5fd9fb01560e04584b0852e6a0be44745e99e4c7d9180bb91e0e0a62cd337ec36e49fe3a8a6"}, {0xc, 0x7, {0x1, 0x29e3d9ada5b4bd52}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5d}, @TCA_CHAIN={0x8, 0xb, 0x60eb}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x3ec0}, 0x1, 0x0, 0x0, 0xc045}, 0x24000050) [ 1001.205865] PF_BRIDGE: RTM_NEWNEIGH with invalid address 14:53:26 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="060065632053"], 0x9) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 32) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000080)) (async) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000100)={0x5c, "476bd013b389b5c9293ac267c9a8f9032eb7be49006af220c9f32939bb196b9f26bdd8139bd1cdaf48e21d7c50750a7f6ca44d47e860a443d84d3958cff5916d29bb6015b2dc0cd243ee2201ebbd2220f945c7033a68770a21dacd42"}) 14:53:26 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:26 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_USER_PRIO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x480000, 0x0) 14:53:26 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]}) (async) 14:53:26 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:53:26 executing program 4: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:26 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x20, 0x9, 0x5, 0xa, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8, 0x4, 0x200}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004040)={&(0x7f0000000180)=@newtfilter={0x3ec0, 0x2c, 0x10, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x10}, {0x2, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x20}}, @filter_kind_options=@f_matchall={{0xd}, {0x1744, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x12f94bdd3a2993d9, 0x5}}, @TCA_MATCHALL_ACT={0x1730, 0x2, [@m_sample={0x118, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x120000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0xc9, 0x6, "51859f9bdfeca67ae123d92804cd607e5ccc2c83f143d96f58f9b1b573337496589b3181a899639c1ed12e3f7ad0a844e540dc0bda18e9ce39059a687b9b4326d3efb73c2630238378eb7604521c3e26edd07606195949737e31e33e5bba61d126261a869bbb6649c6b6ce9cf2fe9210e4a498aca08e8e63b90b7117859a5e84e71cd967990ad5fb1f7976354266e152b7d64456fb41d4f9fa7b163f4b00bd1e2ae6d031017522cbd4e2d73c6545b6c8a7f7b0f34c1e4c75ddce59df9dce27770859491c07"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x14c, 0x4, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xfffffffb, 0x7, 0x401, 0x2}, 0x5}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x401, 0x8, 0x80000001, 0x7}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="707151d93127"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xcb0f}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x83}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x14}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="e05706475a54"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="e3d653b60691"}]}, {0x90, 0x6, "d1cf213eb5e1a5b99aaedf42f5c3b5c2d42fa499c80f8e4f0054027dc61b4734368161b01a93b1d02e3e871c955ea1144930bd5acdfe98fec5928b39119762c2242beb5c5c28fcfe8a961be78ab3fc7a26349b052458ecb06bc044d57dd7a7347af1275d4aba0d60a0c9e3ee34bfcf815b355790e3384611a96c78a2bd99c1e921a5f7c4a8037e837ff45290"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0x180, 0x9, 0x0, 0x0, {{0x8}, {0x120, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xb2, 0x6, {0x7, 'nat\x00', 0x5, 0x1, "406a727c23b35f901f7bb3794faaa7b023d0f7a210f5f208d5dc1e26cbb8f916d201fa1c750fcf28e89873d334600576019507a787caa02e6d3678043deb32519fa65a1562f3799e278c294c97aa291cfd21a8130836c4c107d486b5955ec0f5625b78ec71497a542e8564bac0ebbd23a8f2991c0d2e7cbb82826b9ec6c57024143823dc4f40d685"}}]}, {0x3a, 0x6, "901099ae510ec50a164ff830123d81ad775b901c5a4c435afbb559b154d302d057b05aef324201c627a29cd80f6ac630cc7511233995"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0xf58, 0x1d, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x1, 0x4, 0x10000000, 0xff, 0x7}, 0x0, 0x20, [{0x86a, 0x10001, 0x1000, 0x2, 0x4, 0x1}, {0x3, 0x0, 0x7, 0xfffffc90, 0x20, 0x4}, {0x81, 0x100, 0x6, 0xfffffff9, 0x7fff, 0x7}, {0xa9, 0x20, 0x7, 0x400, 0x100, 0x20}, {0x3, 0x7fffffff, 0x6e, 0x934, 0x91, 0x6}, {0x800, 0x5, 0x1, 0x2, 0xfa85, 0xffff}]}, [{0x3e7, 0xa495, 0x7fff, 0xfffffbff, 0x4, 0x38e}, {0x100, 0xffffffff, 0xfff, 0x3ff, 0xffffffff, 0xfffffff7}, {0x4, 0x4, 0x9, 0xfffffffe, 0x6}, {0x0, 0x1, 0x3, 0x7, 0x5}, {0x884, 0xfffffffe, 0x10000, 0x3, 0x5, 0x2}, {0x1, 0x1, 0x3, 0x1d5, 0x5, 0xffffffff}, {0x1b, 0x6, 0x3, 0x10001, 0xfff, 0x1}, {0x8, 0x60, 0x2, 0x7, 0xe7, 0x3ff}, {0x3, 0x5, 0xe78, 0x14, 0x179, 0xfaf}, {0x7, 0x40, 0x9, 0x127, 0x8, 0x1}, {0x4e8a2f5, 0x4, 0x8, 0x34000000, 0x80000001, 0xb6c7}, {0x5, 0x7f, 0xdf2c, 0x1, 0x3, 0x2}, {0x80, 0x6, 0x5, 0x1000, 0x5e, 0x1000}, {0x10001, 0x4, 0x101, 0x3f, 0x1f39, 0x9}, {0xa80, 0xe51c, 0x5, 0x4, 0x8f9, 0x100}, {0x1, 0x6, 0x400, 0x6c, 0xd1f, 0x9}, {0x7ebe, 0x3, 0x2, 0x9, 0x100, 0x8}, {0x3c, 0x8, 0x7fffffff, 0x0, 0x64f9, 0x9}, {0xfffffff8, 0x1ff, 0x7fff, 0x9, 0xfffffff8, 0x6}, {0x10001, 0x7f, 0xfffff3b8, 0x6, 0x8001, 0x9}, {0x5, 0x5, 0x8, 0x3, 0x6, 0x401}, {0x3, 0x6, 0x22e8, 0x0, 0x4, 0x7f}, {0xe495, 0xff, 0x4e9, 0x4, 0x3f, 0x6}, {0x1, 0x7, 0x0, 0x8, 0xa9ef, 0xee2}, {0xffff, 0x8, 0xa, 0x0, 0x7, 0x1}, {0x3, 0x6, 0x8000, 0x2, 0x2, 0x6}, {0x100, 0x10000, 0x6b, 0x3, 0x1, 0x100}, {0x3, 0x3, 0x0, 0x2, 0x80, 0x3}, {0x10000, 0x6978, 0x20, 0x24f, 0x1, 0x8}, {0x5, 0x5, 0x6c4, 0x3, 0x1, 0xfffffff8}, {0x32, 0xffff7fff, 0x7e3eaf76, 0x1, 0x0, 0x8}, {0xb82, 0x9, 0x0, 0x75390933, 0x1, 0x7bd3f082}, {0x9, 0x2a, 0x1, 0x7f, 0x3}, {0x20, 0x3, 0x668, 0x2, 0xfff, 0x2}, {0x4bd, 0x773, 0x6, 0x0, 0x4, 0x6efd}, {0xfff, 0x2cd5710c, 0x8, 0x0, 0xff, 0x2000000}, {0xd6, 0x200, 0x8, 0x8001, 0xffffffff, 0x712f3c81}, {0x1, 0xbf1, 0xe030, 0x401, 0x2, 0x6}, {0x6, 0x0, 0x8000, 0x7da4, 0x8, 0x6}, {0xff, 0x4b, 0x0, 0xdb, 0x1d, 0x4}, {0x6, 0x2, 0x9, 0x5, 0x701, 0x400}, {0x80000000, 0x8, 0x7, 0x5, 0x77, 0xff}, {0x2, 0x7, 0x9, 0x6, 0x1, 0x3}, {0x10000, 0x9, 0x3, 0x8, 0x1, 0x9f7c}, {0x3f, 0x7fff, 0x1, 0x2, 0x6}, {0x8, 0x7, 0x5, 0xfffffc00, 0x4}, {0x7, 0xaca, 0x1, 0x991, 0x1, 0x9}, {0x81, 0x7, 0x0, 0x8000, 0x1ff, 0x1}, {0x1, 0x7d283733, 0xfff00000, 0xded3, 0x4, 0x205}, {0x9, 0xe9af, 0xea20, 0x5, 0x30f6, 0x12}, {0x6, 0x2, 0x1, 0x52, 0x101, 0x6d}, {0x40, 0x7, 0x2, 0xda93, 0x56c9, 0x3f}, {0x1, 0x7f, 0x9, 0x5, 0x1, 0xd3}, {0x6, 0x9, 0xffffffff, 0x7, 0x3ff, 0x4}, {0x9, 0x4, 0x5, 0x4, 0x4, 0x800}, {0x7fff, 0x81, 0xfffffc01, 0x200, 0x20, 0x3}, {0x3, 0x1, 0x7, 0x1, 0x7f, 0xfffffffa}, {0x9, 0x6, 0x4de, 0x7, 0x0, 0x6f}, {0x8, 0x7fffffff, 0x58f080ec, 0x8, 0x5fa, 0xffffffff}, {0x4, 0x3, 0x677, 0xffff, 0x1, 0xffff}, {0x6, 0x8000000, 0x9, 0xffff, 0x9, 0x9}, {0x9, 0x101, 0x10000, 0x3, 0x70, 0xc58}, {0x10000, 0x0, 0xfffffff9, 0xf5, 0x5, 0xffffffff}, {0xffff, 0xa49f, 0x4, 0xd3f, 0x3266f572, 0x7ff}, {0x3, 0x20, 0xbe, 0x7, 0x5, 0x3}, {0x9, 0x43, 0xffffffff, 0x4, 0x5, 0x1f}, {0x9, 0x8, 0x400, 0x5, 0x0, 0x9}, {0xd04, 0x7, 0x5, 0x9, 0x9, 0x1f}, {0x6, 0x7f, 0x8000, 0x8902, 0x7f, 0x9}, {0x9, 0x3, 0x7, 0x3, 0x8001, 0xffffffff}, {0x3, 0xfffffff8, 0x5, 0x7, 0x4, 0x56}, {0x5c9c, 0x0, 0x4, 0x40, 0x3ff, 0x7}, {0x80000000, 0x6, 0x400, 0x9ff1, 0x6, 0x40}, {0xb5f, 0xd844, 0x400, 0x1, 0x3, 0x7}, {0x11c, 0x9, 0x1, 0x5, 0x7, 0x7fff}, {0x4, 0x3, 0x9, 0x0, 0x2, 0x7}, {0xff, 0x7, 0x9, 0x93, 0x100, 0x9}, {0x5, 0x1, 0xffff, 0x9, 0x0, 0xfffffffc}, {0x9, 0x6, 0xd9a2, 0x0, 0xa5, 0x7}, {0x1, 0x7ff, 0x6e5c, 0xffff, 0x10000, 0x400}, {0x2, 0x5, 0x80, 0x6, 0x1}, {0x0, 0x0, 0x5, 0x200, 0x1, 0x1}, {0x8000, 0x1, 0x2, 0x9, 0x6, 0x7f}, {0x10001, 0x80000001, 0xa5bb, 0x5, 0x2, 0x81}, {0x8, 0x19, 0x6, 0xdd, 0xfffffffe}, {0xa7d3, 0x8655c05, 0x7fff, 0x81, 0x6, 0xfffffffe}, {0x4be9, 0x3c6, 0x3ff, 0xfffff800, 0x400, 0x1}, {0x10001, 0x3, 0x8, 0x0, 0x80000001, 0x20}, {0x4, 0x101, 0x2, 0x9, 0x2, 0xf850}, {0x400, 0xfff, 0x4, 0x2, 0xe2, 0xfaf}, {0x57f, 0x0, 0x0, 0x10000, 0x2, 0x3}, {0x5, 0x6, 0x1, 0x1, 0x10001, 0x9}, {0x4e, 0x4981086b, 0x9, 0x9, 0x7, 0x388b}, {0xeb80, 0x6, 0x9, 0x9, 0x3, 0x1}, {0x2, 0xd6e, 0xfffffff8, 0x3, 0x7, 0x43}, {0xfffffffd, 0x9, 0x3, 0x3, 0x1, 0xfffffffa}, {0x2, 0x0, 0x400, 0x5, 0x7ff, 0x7}, {0x5, 0x0, 0x101, 0x4, 0x7, 0x6}, {0x9, 0x2, 0x200, 0x2, 0x9, 0x3}, {0x3ff, 0xffff, 0x800, 0x0, 0xb365, 0x6}, {0x6, 0x8, 0x4, 0x20, 0x8, 0x9}, {0x0, 0x7fffffff, 0xffff, 0x4, 0x9, 0x4b8}, {0x5, 0x1, 0x9, 0x5, 0xffff, 0x8}, {0x9, 0x7, 0x7f, 0x965, 0x0, 0x81}, {0x4, 0x1000, 0x3f, 0x80000001, 0xfffffffb}, {0x0, 0x1ff, 0x4, 0x3f, 0x8001, 0x3f}, {0xb645, 0x66ef, 0x7, 0xfffffff8, 0x7fffffff, 0x6}, {0xff, 0xffff, 0xb57, 0x7f, 0x93f70315, 0xd8}, {0x81, 0x0, 0x7, 0xee63, 0x6, 0x6}, {0x1, 0x0, 0x3, 0x7fff, 0x4, 0xda}, {0xffffffff, 0x7ff, 0x401, 0xad, 0x131, 0xc48}, {0x1ff, 0x5, 0x3ff, 0x80000001, 0x385, 0x81}, {0xffffff01, 0x1, 0xfffffff9, 0x309, 0x5, 0x3}, {0x10001, 0x7fff, 0x2, 0x7, 0x400, 0x4}, {0x0, 0x9, 0x9, 0x3, 0x4, 0xd3}, {0x2, 0x80, 0x9, 0x5a1, 0x6, 0x7}, {0x5, 0x2, 0xfffc, 0x9, 0xbb91, 0x6}, {0xe8, 0x401, 0x6, 0x3f, 0x200, 0x161d}, {0x7, 0x9e, 0x7, 0x400, 0x9, 0xfff}, {0x0, 0x0, 0x9, 0x100, 0x4, 0x1}, {0x5, 0x1, 0x7ff, 0x8, 0x1, 0x100}, {0x67d, 0x200, 0x7, 0x9, 0x0, 0x9}, {0x2, 0x7, 0x80000001, 0xffffffc1, 0x200, 0x7}, {0x5, 0x3, 0x9, 0x8, 0xeee, 0x6}, {0xe70, 0x6, 0x3, 0x0, 0x7, 0x3}, {0x8, 0x1dd8, 0x8, 0x9, 0x3, 0x6}, {0x6c5, 0x5, 0x1000, 0x9670, 0x94e, 0x7}, {0x599, 0xfffffffa, 0xfffffff8, 0x2, 0xcec, 0x3}], [{0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4}, {0x3, 0x1}, {0x0, 0x2}, {0x4}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0xb404d1810dd8ed98, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x2}, {0x2}, {0xb93decd1058fd884, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x40af9a541e4505da, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x303fb9249f96d993}, {}, {0x4}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0xf, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x5}, {0xdc9394c54f92e55b}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}]}}]}, {0x7b, 0x6, "23ab806a80e784a42c1695f932ec086c10db4e8a09121da87c2b027e4f350ce2925663a5a16d14ba6ce646af4973676cb4dce5d5704a3f7a98193d0a547586e9a3a71ddd14f2282b9587be8f59610b3e56d82a6f55e5a4fce0695db7dec4c47588b2dd4369dbfa26dc52ed7e5298e1de84c8342c2bac75"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x124, 0x1a, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x1f, 0x0, 0x1, 0x1}, @remote, @dev={0xac, 0x14, 0x14, 0x23}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfff, 0x1, 0x1, 0x4}, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1, 0xff, 0x1}}]}, {0xac, 0x6, "22455b4614b321cdc28af8b76d0d792ec5983b9bea8f0db4e810666dc3bd460e25c2afaa9579d33a0b46cd77e90f607175a896a1ad888d17667d432d3ffd2f37377228cc972efab9d2a371c08ad69b82a7ec868b7d0de52a75eafd0bf8b9a7c49223694733bef3c1de2a6472465bbbbf02668fe2f4232912161a5e3762de9107fe1d7575e5696755aaba4d4200db9855f9b132eb4e98e2dbae076b17b5fcb70f9d8eb058be5b8d8b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x8c, 0xd, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="10f4ecf75044"}]}, {0x58, 0x6, "7d0acc4d9b96660afad72f96783bd21379c0e4957e18e5a878b9dbdf93fd9e5bdf72dbc1157e0c1bf031ef713ba76b6f2827bf8bf82c57ee135cdb1eb81ca4800a2966f3ab9e2b4d63b3221fafabcd907c3b2f20"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xec, 0x19, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x100}]}, {0xa4, 0x6, "48da09fc6f1cf145a10b6c28f6af0cc68b98d80507aade552fcbb8f69ab972cce0a068dafa797888d73410490bde482f3b39a7c6e9237f9aa987e5c0cccd981f9be50c1639814694eccace9ac89ed54f81ee25c8f8a496da05eeb74ba454180a9156bf05d00d8cb0261321d74facc49bf29b30bc86f559542e9b00d69c618e5f2f040db419f772d00a0db0bc271a1f2a48fcf1b2150184472fc23121cde7975b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x54, 0x14, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1a, 0x6, "a9cd9c865410e8d8ca7be18894b639c7ee53920726c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x100, 0x16, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6dd}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xc3, 0x6, "30c08d0ecfa25ebde46e81a0ad879d09797a8458288faa4737ec3334e1fa3873c82ddbaf8c4b1fcc724001b6c34e88448c185be2550b1f17af67ac5bf6001871831a9f1130cd5322a1dfc938d86f20d2c0b6ffafcd5f83bbac37abfadd6716161d846a38f82a8ad874a26d4863984676ae8825e5a17112bad57b8a8c366cb76d55b1c056b8bb137e524d21150472554ffed1d64264686b7709556cc7d3b7c30af87926af1911f269e79c6609037af321650bcac3a2f952d911b78b93f912b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_basic={{0xa}, {0x2714, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xead}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x203}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_ACT={0x10d8, 0x3, [@m_skbedit={0x80, 0x3, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0x49, 0x6, "21911f52ef9c5be2815329707eb770beab79d7fba3f659ea97adac591e0312aea88dc4decb69064f3ae1600d8d45599e544bb8bb54c6078c9c29d806ba3ecf3a5d5ed7790d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x1054, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x8, 0xd, 0x8e}, @multicast1, @private=0xa010102, 0xff000000}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BASIC_ACT={0x178, 0x3, [@m_connmark={0x174, 0x2, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x7, 0xffffffffffffffff, 0xfff, 0x6}, 0x8b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x7ff, 0x3, 0x5, 0x89c}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x7, 0x7, 0x2, 0x6}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x8, 0x7, 0x9, 0x2}, 0xf40c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x1f, 0x8, 0xffff, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x800, 0x7, 0x6, 0xffffffc4}, 0x5}}]}, {0x9a, 0x6, "d7e96d3e125960c11300bdebe01df6b5fce7991c096ee3dbc36bca0e3a06ec5a4d06be496945ae15e4f8d89c5d966ae7151a3021b6241c22ec7c2442d4585c66a3080b09816b806253080349e0d179871c5c42fb5e62eb0fc2464c9577a7665ff171d4e869d6d3272a1a01d2a6004a827862726df06ca36234a0e27cec7d75971bc9551dac9e47f124523427e931022db094b44581bf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BASIC_ACT={0x148c, 0x3, [@m_skbedit={0x1038, 0x7, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x4}}]}, {0x1004, 0x6, "4dd7e9e37f21180814f6eaf4da9898a890c81ebaa3e84ed8a702ebdd7d9b0742d4b051dd25e5e1c7a7a382e294504d42bfa3fa598d750f96fa101417cd2bfe6c77196680bbbf7ec5c670e516d0955f83c13865cd84df56d79f08383ffdfbf930996b03100b6e3dad4a3da169bc4e1c1c16064252016d8fe4815d3b5a0a6688175ef3cd0b085cc243ee0cdd6cb9f02a0e06f3d809e40a77d86e5bac5db48ffb8d86494100d85a449929b938cfb75860c3efb9388e07c92f9eed132561557d469a327f73b453a21254458b2d6bb9fdf9f8235f7f941ce5e2a56cba998108d3f8a6b4f0f339317f22d47b57c7daec48df4305de6e6de5df084f4e6f5c73a27ec2a0a63eff0546ebac40544a098b8e37ceffae43cf0f24a9a46c5d003e1db030f98f03945071786a0ae7c98e6b633da7859bbd723f15f4460729a6510cad370d152d17d2ebb2dbb8759ec1626c8f9d799d044c1736bdf06365df50b8baadb6c6c68bc3734af284513cf18a166367b9828d4da29b5390d77ef551f329373a6bc1234f5e9c9d193b6faca23ee21e4e5ac852693554a8c9f2a278ccb2d2e7a1d883fe6414f24e2610a254e01e1d7191568c2c5923f030561a087bfbbd46db254cdb9b341c4c1fdb9612d3b10a6e76796958c7266bac069010959e70b6309af0b20593719f8abe7106f1cd4c7c40e1c49b09a59ea6fe726b9ba4ed12411ebafb7bcec4ccc17a7589363afcb4ee966080c5d7a5acd1a96caf9afb302d006898e315a4ffd32b7638f20ac42afffe7af26717dc44ca6597df00831bf94aa04c35d704b94eabcde02efbf40a27bb8489d39cce7339583c53f87bd235ed8fc2194a486db071eadb36fbb6de086b7ad53bac94464e6f5654e12deddad22ae4f376f3e002c0c461fdf4787875b9469df4750bcb8bb804e3f359f62a8e4b05a6b252f9ec7a5934c9829bd5638870673e3c97e9b8363706c09d7ac0d2056679f4e9565c6f8c4fbdc6c527003cc557b5c6385fb0977368f7b23a5e9e214926f7550f46c981dff170251938b70eecd3d98c7c949d54e0dc1399657794a37c7dc93ca7299d965397972ce8e7ff4ac5e03d17cc79ee7154db92b485fa097c5366d9eac713f8b6fe0b71d82b445dbf51ac4f75b82dd351e10f9c2233ab0a55d7ec6a97ba98fbfa3a1083f9ba58d11180a5f074a26826211fe4fd53893b4d13dafc5a762ae1fc751a9113df973b583e677e7642d9cca4d87f3bb01f2dab4520608375c87a13585dc53fde72eba453a658e4baf3725fda3187885c82d33d096dbf7ce2ecee012342d8a0e51bb5de0bd1e303eac7091fe19765175d81e1b859c5c6ee4fb8f7f7459f7efcc3ca33e76c44244158040a4cbd16f11a9c5f6118b8d8babaa8a9ef6f991b5997b8564fd877d990f6c935372e952449325ba57ac102aab1659f8b5e643575d8df41288cb39ea445d05de75918baf32380f1bb1c193e1a5241dbfb5da89f3a4cef10ae00a5d69f8f2618e4593e8d610fc532dd8431d46e55f01c06a6531d865775803badf21c1046a438e7d79c5c9703e0af29f72cc46db56db731935c64a2f0e4b0becdfec5844ed7b1480d8b61c24dc03de58803eaf23a97ac76aa72afb97c7e0fdc95669d4fe48b8274426c7b703a0a09430acaa5d6c2522f5a40a736deebd63329620139fe78e6376776c19df2b611f9226ead5ade07d092ace053674e48d70239b7dd6e38ce316825f3a38c8beeed5317ab61d547164e264c7bfe2dc0d7b67b9a53da902d9100579d1ffb3a25d35e7aabb045020624969c7c88301a0f7d7efbdd414f258a1a18a4dc23471c6badde9fdfa34c86a30bbfc4473db6874742e046b6e21d5503710807135a0e3f12a244a24b0d9fc61fc6877b272a22bf6d5380eb4c153c40c1412f7c999a43a8fe636b0fe5b34195988d0fe1df107532af2f9b0c9711f777894df38484ab81cdb87d839936b8d67b18ea27c1795c05415fcebe996929e5c33c9e890d64a47ec391c818a14287a0bc743c4f223d0c3e67b580bd03c49cdbdc257bb2c6d2c367c956c2e829bd65b01413fbd25d62487337b883caf0905dc7ecc15c7d126c79852ce78af8f730e4fdfdcfbb43fae2394c0152cbcc5f3ebcfe072e2cd14299ab5530b54933384fd75d4750aa73ed469e423e13c5b9792f8abc16e50a0f5da69b6ac88027dbffdd959b14ec796ad19bd368e79a6871a8d3c70f91abe564c3cf93fbcd7961de3fa7ce9af60fbe1ab2f783f42999a95a9bf123857857158fbcb355c046089fae26650e18e6f226e0bbdbfdcfb980dda4949b9951e6da69ebf73bf8cb68552f205629b05011cacb29efe22c4abb1aa88d3299dc8e760a3f020c1ab7e9675025019b1d9bfe53182cbb90b3b8c2041b0749544e34a4b102197436fad968d66b962fe7fbf16049919333e35a2e2709ba3a73a6f7bb2a3462eaac1b6aeda9358479c1af799348b9265908f4bdde293fa96599d58d97824de25a3eb73d4fb4bc3b5cd510690862d4c9805c2c8241e2331b8b7c5d9b50105cbf37e1da63083c34f424bedbe8dde49a1db69cbc3df903b810572914b7ba04d3e21ee190c43e5ff4d588bb8854359c57a8fa0bb03fcdc1bba42fdd7993815fc8871015b8d1f2be19fdf824064b36268b9dedb20c45e36fcfc3869b8b67b434a2000bcabcde231a3b675e7d8437e820f4f29a2e3235f18012aa3675d63846065383d3d33c49f06c5c5e5e4ad83f39a3ae3d91ba2a373d7656bbd1104db159dcc09448a8542af760c06886162f0890c93d3f12fb54476f0b180606a2c7f9f268ea968517b78fdbfce0863dd4aa5fcd36431f8aac2577702e090443122ad95f568458af666d983ba2ba07c207dc5d2d53f689317d7bc37bb76a3df86099ac45e588507c472eefe90b39f603b439c34b65245792944322d63ff4b8bf154f39afc9a6f69bc90935c326ea43094e59f9b5b8d38e2518c4ca103fb2bfa1e7f945533dcb83793ca55c94fd7605d8682c50f1c9af72fafd5c561430d1dfb7715390074d0c95ac4b59a7afabf0f79e86782103c9201c6bdc658f470ab4a4d807514b4679cbd9565efdc630bff97489751da5d33d15119d85cbc03e190506b9f93bfcc4b1fac4cd4e6e7ff7837ef56af7755bca40cee775038452fab1e09e0d1ab2c95977a4a72b09364d12d86147265ccb78490332b5bf74f9e3d997168814706e86ed4441822297c7dd61d87f2e05df30c6d8b26fb013401a265a40bdc15116561002de5510fd6877542b5222006ddf5b8a0c8e771b8360a15d17f2c5746aaaacf5ee80c80f04adff30cc0cc46d7a6f8ee28169efffff9086e75e02cf4fdddedbf07b029a2eccdd55147ecd7b0e94b25102a728064be0a5bfe63ec819028236047d614d89e654d56165934925f59e925a3075a16bc232698952aa68bc4721b33e3326d6ab3ffdfba0a4ef3cdf3d60605c86e89e22c5e5079dcb88ec64295202099e049bc426275657bd7e5817fe2abf457122504fe877d99451efc7470590f55f2a906d40d9b231e2a76c35183f1b91529be94e6a3ed55e3f27cd258397bdfd95127e9d860589fcbeea4f36f575d2ecafa7299b82d33d4cce0453b893503f52918aa29947b759676a11861ba844d8801ee7d93f1e670b52b0e760435829a234d94ef2f625fc323aef7d5af77903481409792c31a053bb2a25705fd6100780a549ed3805c19f656d29c28a190a9157b93b0943728bccab48a0d1cbe90b736f2e5e97e8307883920f94a9f177bf1db7bbf950e386a41b7b97f837a58801e50bedcc0afa1b98068c3b9e4c7994acc5967aacf3ecfa64d157c2c5b1e4a2fb81245aa6afc3b3229b028b6331c9fff13c927f53fa68b40ebf2384ad6bee4f37ce6f7e4f4dbe2ee5fc33d08044fddfbee58c091762f3b189acb517c129b121daf0476ddc9915b428c09cd3246fe6c79a0c0ddba2694f94af248b54bdfc04553dae6f0ee87458245f4f22abccc687d2aefd47b5ae5bca7080bdbbddb965c267b9b55f8a49785e7ee64971419fc2c0c28b7f856eac225125ace5712c1ec914717f8d73b69bf7be6eb4c2eb82078748df0515e7b06b22a0a8b6d5df8093840248da5ba7adc93de899838935239ccc24edea7853cbb86b265f4bfbe3346cab9cb7eb29c763b1e8d0ac95a8c97bc8c54369f67c549ad04d73e91b98961223fc4e48e489a3726b27f6872831afadd6447f5fb09033765d4ed7cafe0240c172a1fae301737396fdb547f19b629484e940b41445d661caafc4ef29f11865bd232bacb927df99ca3d3e389ff087a856bcb165915e3a51a3f4c537377a0ec7399fad5c4bf0ed0f167aa70413bad77ae2123b541b53676db57f0bc5a80dd628b6fdbc8dced73ef3a6df3fc80b4932ee9d85269bdaa7d547b12533c7c8bcbca7b0696ce84359497c1b802bbfd82a36e12f166dff09e6527a235dc5934041f10fb9865a3fdb2f4468783a0dbbe85f103d4a911a9fab8cb2dcc694a37d06008edbe50bfd107d178dad2c19ab624b5b7d35d2b1c7a316ba343ed1ddde1a710051d3efeb289b547176219e88085335898105c0d4ad1558d93c42df7caf9a8153d379507fa12e8bd320bf920e457e4f4d9112d56b6319b900b92f6de6e03bec0d17f98dbc8ec8b6f950c32dd4a9e087307d5304099cc0587ebe5a46be29389d7148496d08a15361138394f753b87859d27c992a6b69ac4e87836c6311e25b12d3de5b274d018b8ce9c3e6bd023e39aaa541a7a9fafa9c4cb464480b09d3f051b7ff4ab0c7374775caee42244a3ae8ef89588fcc205034835067251f84d0bf6ffcb58b9e2c1ac33cb856606398b6eaf290649ddb800e2cedd977f917d3047d3ca51beef7af53815861ec3d263ff321644f71d07aa8cbbf9cfc9dfb5a4e6bd00e30cdaa539cc53822a42eeadac89c4cce33ebd3da763407a16958268cc028b10a0b69019844d7f5f0b481e90b1d64491d0b89f6161ca48f180426eb77fd34a4c94a31c67f81071b05e2c81ce155b78dd194d692c25200f8be334eea937a4893fb20c790760058e4a5e12230c66db4b061cf20f620b2880104f247f9f1462b82775c123e0bcc654caec2fb19691858d3f775686344680216d0624a8d9582f1682bc30afecad5a7b4c32b4e2e85494173e0d85f5507612cc8a5af1b9237e9827162fe51922f797c9b2470607e9fc689e4794677979dda813617a4250be06f5d5ef7c9b91b9a980ddd042ccc1ed9569c0fc76e94b8731d4a2e282ea89e635906bbdd20f7223ae7900e19e679b87c850e43fb4512fdc1c19ccf1f741e52479f5bdd8ec042a55a34b61037e5d2d061997c11111a48b392b2e38382a390487daf9b6b49ace76e01132d21a6a5b15304235f7fff4780047746241dd639219afabf6f288d2267c67eeaee54693454ed729cce7e1d7c2587652316b0bee12402ac7607350434497075c1e013d424b1d90836c47ad0086ee8a96fe51e4c68f268004a5444e00e6ef51fd330b910202678623f627999a8160f0766960033818694ecaf81dfe42822cd5da8b58edc294413e5ef61db44df977cfd9826cb23a7dcc38f81229cb757a19fe59f650e1fda8ae30e1ea8080338716316953459926974d727ad46eec7c6b9447faa64c0f91771cce99e41f54536afc3428b1b145f800b983d4c447e40b0d0b129db85d88875d582eafd894e6df25e1e256861a4e9aedfe9a46517b8b72c084063e6343ce46fe1b68770d0ffbbbb7d6116cdd3c91e44a10ca26ff46eb0cdf1d4a03d7e46c10423fb62960b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x70, 0x4, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1add, 0xffffffffffffffff}}]}, {0x35, 0x6, "481fcbefec5e0bbaf3aad25d9961388d105f4a3be256b24c02a15fe2ae051e427fe5a9ba80232335591172d838561da349"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x15c, 0xc, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x3, 0x3, 0x7}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0x0, 0x8, 0x6, 0x1f}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3517}]}, {0xa3, 0x6, "c94e144c37bcdad5460646338dce602422af7f922de06447417d1f1b37733423414c7e57c128efdabfe89db12610081d06585fc30ad76417f776940460f97ede31fd2b6c1e8b42e1a63ec7132f81313d8087c1902f2c36288014d9ba38a2c55698e3ca5fc779217ce21d3ea1cfbe7d7a0c7484a9a248054fe9f37a685c3a4f33b3288f97164753838b13c677638a4ae861828d2c8162e71566572e0df0ba31"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x74, 0x13, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x3b, 0x6, "2192e3648bfb129df7a4eba40b8cac0eb9afba38c54e8a13fa4683593c41d6f18440a56ca7c71aa684b2d49065481d12169e6c3cdc3d83"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_sample={0xb8, 0xc, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x10000, 0x10000000, 0x8, 0xeea}}]}, {0x73, 0x6, "2d9eec0ba0d32d5977250985f60a6e2b73601216bb7357e981a009ef7faaa12f5c295b381869a9a75e75819b7307cf4d5e16c3262b9cdf28f68f5c6e1b6ff0c5c3e2d8e412b96740ae5e87acf662c2a1371199cdde231d840e62f2f67709adaeb2e06aa541fa6a658fff9b94f3aae8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x9c, 0xf, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4, 0x80000001, 0x7, 0x800, 0xc361}}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x3, 0x10000000, 0xd, 0x1420800}}]}, {0x44, 0x6, "ee71cabee94ef9dac903a70c232282974af6c83547ff3fa5f541e67359cc9c476ce9cc946dba4ad070e1aa989d22ffd26b522054aef428a62c8c1c81fc6e9dee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xbc, 0xf, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x3, 0x4, 0x4, 0x1c}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffe, 0x10001, 0x2, 0xe11f, 0x80000001}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3f, 0x0, 0x8, 0x6, 0x3}, 0x2, r3}}]}, {0x30, 0x6, "eb83243c11dca5fd9fb01560e04584b0852e6a0be44745e99e4c7d9180bb91e0e0a62cd337ec36e49fe3a8a6"}, {0xc, 0x7, {0x1, 0x29e3d9ada5b4bd52}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5d}, @TCA_CHAIN={0x8, 0xb, 0x60eb}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x3ec0}, 0x1, 0x0, 0x0, 0xc045}, 0x24000050) 14:53:26 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES8=0x0], 0x9) r3 = socket(0x28, 0x80000, 0xfff) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4040000) 14:53:26 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_USER_PRIO={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 14:53:26 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]}) 14:53:26 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0)) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', ':.-\x00'}, 0x9) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:26 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:53:26 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 14:53:26 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 14:53:26 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) (async) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES8=0x0], 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES8=0x0], 0x9) r3 = socket(0x28, 0x80000, 0xfff) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4040000) 14:53:26 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000000c0)=0x9) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x9) 14:53:26 executing program 5: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x20040801) 14:53:26 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0)) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', ':.-\x00'}, 0x9) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0)) (async) ioctl$TIOCNXCL(r1, 0x540d) (async) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', ':.-\x00'}, 0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) (async) 14:53:26 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 14:53:26 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 14:53:26 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x85) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:26 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000000c0)=0x9) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x9) 14:53:26 executing program 1: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRESDEC=r2, @ANYRESHEX, @ANYRES8=0x0], 0x9) r3 = socket(0x28, 0x80000, 0xfff) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4040000) 14:53:26 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x0) 14:53:26 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0)) (async) ioctl$TIOCNXCL(r1, 0x540d) write$apparmor_exec(r1, &(0x7f0000000080)={'exec ', ':.-\x00'}, 0x9) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', ':.-\x00'}, 0x9) 14:53:26 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 14:53:26 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x85) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:26 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$search(0xa, r1, &(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x3}, r2) 14:53:26 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000000c0)=0x9) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000000c0)=0x9) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x9) (async) 14:53:26 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) (fail_nth: 1) 14:53:26 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 14:53:26 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x85) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:26 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '+.-\xfc'}, 0x9) 14:53:26 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$search(0xa, r1, &(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x3}, r2) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async) add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) (async) add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) (async) keyctl$search(0xa, r1, &(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x3}, r2) (async) 14:53:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x799b9f7ae0721451, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x57}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5}]}, 0x48}}, 0x801) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:27 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) [ 1002.030573] FAULT_INJECTION: forcing a failure. [ 1002.030573] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.087010] CPU: 1 PID: 21273 Comm: syz-executor.4 Not tainted 4.14.305-syzkaller #0 [ 1002.094955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1002.104331] Call Trace: [ 1002.106936] dump_stack+0x1b2/0x281 [ 1002.110628] should_fail.cold+0x10a/0x149 [ 1002.114800] should_failslab+0xd6/0x130 [ 1002.118825] __kmalloc_track_caller+0x2bc/0x400 [ 1002.123598] ? proc_pid_attr_write+0x16c/0x320 [ 1002.128204] memdup_user+0x22/0xa0 [ 1002.131763] proc_pid_attr_write+0x16c/0x320 [ 1002.136200] __vfs_write+0xe4/0x630 [ 1002.140203] ? proc_pid_wchan+0xf0/0xf0 [ 1002.144202] ? __handle_mm_fault+0x80f/0x4620 [ 1002.148718] ? kernel_read+0x110/0x110 [ 1002.152657] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1002.158136] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1002.163184] vfs_write+0x17f/0x4d0 [ 1002.166865] SyS_write+0xf2/0x210 [ 1002.170478] ? SyS_read+0x210/0x210 [ 1002.174132] ? __do_page_fault+0x159/0xad0 [ 1002.178385] ? do_syscall_64+0x4c/0x640 [ 1002.182383] ? SyS_read+0x210/0x210 [ 1002.186030] do_syscall_64+0x1d5/0x640 [ 1002.189951] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1002.195161] RIP: 0033:0x7ff88add50f9 [ 1002.198899] RSP: 002b:00007ff889347168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1002.207011] RAX: ffffffffffffffda RBX: 00007ff88aef4f80 RCX: 00007ff88add50f9 [ 1002.214393] RDX: 0000000000000008 RSI: 0000000020000180 RDI: 0000000000000003 [ 1002.221770] RBP: 00007ff8893471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1002.229676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:53:27 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '+.-\xfc'}, 0x9) 14:53:27 executing program 1: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$search(0xa, r1, &(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x3}, r2) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) (async) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async) add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) (async) add_key$keyring(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) (async) keyctl$search(0xa, r1, &(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x3}, r2) (async) 14:53:27 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) [ 1002.237233] R13: 00007ffdfca9770f R14: 00007ff889347300 R15: 0000000000022000 14:53:27 executing program 5: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x799b9f7ae0721451, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x57}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5}]}, 0x48}}, 0x801) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:27 executing program 4: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) (fail_nth: 2) 14:53:27 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '+.-\xfc'}, 0x9) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$apparmor_exec(r0, &(0x7f0000000040)={'exec ', '+.-\xfc'}, 0x9) (async) 14:53:27 executing program 5: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:27 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x5a}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e4f2882edfc6beecf9ed75afa8310000000000000000"], 0x9) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) r5 = gettid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000580)={r5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000200)=r5) ioctl$TIOCNXCL(r3, 0x540d) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) 14:53:27 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 14:53:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x799b9f7ae0721451, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x57}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5}]}, 0x48}}, 0x801) (async) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='sxec :'], 0x9) 14:53:27 executing program 2: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="737865e902c0b042019fd311e55af7a31db2a4faf0c734755f34cb563a9d4cffca07e60f5b01a502c8bca361b3aa641561eba94de7e58c43260e28f6a4b7"], 0x9) 14:53:27 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 14:53:27 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="056c00000000000000000100000000"], 0x9) [ 1002.515796] FAULT_INJECTION: forcing a failure. [ 1002.515796] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.566407] CPU: 0 PID: 21331 Comm: syz-executor.4 Not tainted 4.14.305-syzkaller #0 [ 1002.574519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1002.583976] Call Trace: [ 1002.586586] dump_stack+0x1b2/0x281 [ 1002.590237] should_fail.cold+0x10a/0x149 [ 1002.594411] should_failslab+0xd6/0x130 [ 1002.598406] kmem_cache_alloc+0x28e/0x3c0 [ 1002.602580] prepare_creds+0x39/0x490 [ 1002.606409] aa_set_current_onexec+0x1e/0x200 [ 1002.611015] aa_change_profile+0x120e/0x2440 [ 1002.615462] ? aa_change_hat+0xf60/0xf60 [ 1002.619550] ? depot_save_stack+0x10d/0x3f0 [ 1002.624024] ? __lock_acquire+0x5fc/0x3f20 [ 1002.628282] ? do_syscall_64+0x1d5/0x640 [ 1002.632367] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1002.637750] ? __lock_acquire+0x5fc/0x3f20 [ 1002.642298] apparmor_setprocattr+0x98c/0xa80 [ 1002.646831] ? apparmor_cred_free+0x70/0x70 [ 1002.651171] ? aa_file_perm+0x2dd/0xab0 [ 1002.655255] ? proc_pid_attr_write+0x1c0/0x320 [ 1002.660092] ? __might_fault+0x177/0x1b0 [ 1002.664354] security_setprocattr+0x74/0xb0 [ 1002.668700] proc_pid_attr_write+0x22b/0x320 [ 1002.673228] __vfs_write+0xe4/0x630 [ 1002.677202] ? proc_pid_wchan+0xf0/0xf0 [ 1002.681343] ? __handle_mm_fault+0x80f/0x4620 [ 1002.685888] ? kernel_read+0x110/0x110 [ 1002.689862] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1002.695554] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1002.700799] vfs_write+0x17f/0x4d0 [ 1002.704472] SyS_write+0xf2/0x210 [ 1002.708035] ? SyS_read+0x210/0x210 [ 1002.711695] ? __do_page_fault+0x159/0xad0 14:53:27 executing program 5: write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000180)={'stack ', ':\x00'}, 0x8) 14:53:27 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x5a}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e4f2882edfc6beecf9ed75afa8310000000000000000"], 0x9) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) r5 = gettid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000580)={r5}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000200)=r5) ioctl$TIOCNXCL(r3, 0x540d) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f0000000600)="260f01ca0f20c06635000000400f22c00f3064673e662e660f144937821783660f38818006000fc7ad11a2260fc72e11ffb857068ed8f30f09", 0x39}], 0x1, 0x8, &(0x7f0000000680), 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c0010}, 0x0) (async) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x5a}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x80) (async) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$apparmor_exec(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0000e4f2882edfc6beecf9ed75afa8310000000000000000"], 0x9) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) (async) gettid() (async) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000580)={r5}) (async) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000200)=r5) (async) ioctl$TIOCNXCL(r3, 0x540d) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) (async) 14:53:27 executing program 3: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 1002.715967] ? do_syscall_64+0x4c/0x640 [ 1002.719976] ? SyS_read+0x210/0x210 [ 1002.723623] do_syscall_64+0x1d5/0x640 [ 1002.727544] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1002.733205] RIP: 0033:0x7ff88add50f9 [ 1002.736924] RSP: 002b:00007ff889347168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1002.745021] RAX: ffffffffffffffda RBX: 00007ff88aef4f80 RCX: 00007ff88add50f9 [ 1002.752506] RDX: 0000000000000008 RSI: 0000000020000180 RDI: 0000000000000003 [ 1002.759799] RBP: 00007ff8893471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1002.767088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.775600] R13: 00007ffdfca9770f R14: 00007ff889347300 R15: 0000000000022000 [ 1002.788339] AppArmor WARN aa_audit_file: ((!((&sa)->apparmor_audit_data)->request)): [ 1002.788778] ------------[ cut here ]------------ [ 1002.801639] WARNING: CPU: 0 PID: 21331 at security/apparmor/file.c:136 aa_audit_file.cold+0x18/0x4f [ 1002.810931] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1002.810931] [ 1002.819079] CPU: 0 PID: 21331 Comm: syz-executor.4 Not tainted 4.14.305-syzkaller #0 [ 1002.826971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 1002.836435] Call Trace: [ 1002.839045] dump_stack+0x1b2/0x281 [ 1002.842691] panic+0x21d/0x451 [ 1002.845906] ? add_taint.cold+0x16/0x16 [ 1002.849900] ? log_store.cold+0x16/0x16 [ 1002.853984] ? aa_audit_file.cold+0x18/0x4f [ 1002.858327] check_panic_on_warn.cold+0x19/0x35 [ 1002.863056] __warn+0xdf/0x1e0 [ 1002.866298] ? ist_end_non_atomic+0x10/0x10 [ 1002.870735] ? aa_audit_file.cold+0x18/0x4f [ 1002.875517] report_bug+0x208/0x250 [ 1002.879168] do_error_trap+0x195/0x2d0 [ 1002.883297] ? math_error+0x2d0/0x2d0 [ 1002.887121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1002.892201] invalid_op+0x1b/0x40 [ 1002.895934] RIP: 0010:aa_audit_file.cold+0x18/0x4f [ 1002.900900] RSP: 0018:ffff8880876577c8 EFLAGS: 00010282 [ 1002.906457] RAX: 0000000000000049 RBX: 1ffff11010ecaefc RCX: 0000000000000000 [ 1002.913879] RDX: 0000000000040000 RSI: ffffffff81444380 RDI: ffffed1010ecaeef [ 1002.921251] RBP: ffff8880876579f0 R08: 0000000000000049 R09: 0000000000000000 [ 1002.928540] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff4 [ 1002.936012] R13: ffff88823f8bd680 R14: ffff888087657840 R15: 0000000000000000 [ 1002.943410] ? vprintk_func+0x60/0x160 [ 1002.947463] ? aa_audit_file.cold+0x18/0x4f [ 1002.951903] ? file_audit_cb+0x670/0x670 [ 1002.956324] ? prepare_creds+0x39/0x490 [ 1002.960602] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1002.966084] ? prepare_creds+0x3c9/0x490 [ 1002.970182] aa_change_profile+0xcd3/0x2440 [ 1002.974515] ? aa_change_hat+0xf60/0xf60 [ 1002.978676] ? depot_save_stack+0x10d/0x3f0 [ 1002.983005] ? __lock_acquire+0x5fc/0x3f20 [ 1002.987248] ? do_syscall_64+0x1d5/0x640 [ 1002.991312] ? entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1002.996890] ? __lock_acquire+0x5fc/0x3f20 [ 1003.001139] apparmor_setprocattr+0x98c/0xa80 [ 1003.005645] ? apparmor_cred_free+0x70/0x70 [ 1003.009995] ? aa_file_perm+0x2dd/0xab0 [ 1003.013995] ? proc_pid_attr_write+0x1c0/0x320 [ 1003.018688] ? __might_fault+0x177/0x1b0 [ 1003.022746] security_setprocattr+0x74/0xb0 [ 1003.027069] proc_pid_attr_write+0x22b/0x320 [ 1003.031494] __vfs_write+0xe4/0x630 [ 1003.035291] ? proc_pid_wchan+0xf0/0xf0 [ 1003.039276] ? __handle_mm_fault+0x80f/0x4620 [ 1003.043768] ? kernel_read+0x110/0x110 [ 1003.047658] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1003.053118] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1003.058388] vfs_write+0x17f/0x4d0 [ 1003.062026] SyS_write+0xf2/0x210 [ 1003.065654] ? SyS_read+0x210/0x210 [ 1003.069480] ? __do_page_fault+0x159/0xad0 [ 1003.073713] ? do_syscall_64+0x4c/0x640 [ 1003.077843] ? SyS_read+0x210/0x210 [ 1003.081656] do_syscall_64+0x1d5/0x640 [ 1003.086058] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 1003.091374] RIP: 0033:0x7ff88add50f9 [ 1003.095171] RSP: 002b:00007ff889347168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1003.102893] RAX: ffffffffffffffda RBX: 00007ff88aef4f80 RCX: 00007ff88add50f9 [ 1003.110440] RDX: 0000000000000008 RSI: 0000000020000180 RDI: 0000000000000003 [ 1003.117813] RBP: 00007ff8893471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.125075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.132357] R13: 00007ffdfca9770f R14: 00007ff889347300 R15: 0000000000022000 [ 1003.140524] Kernel Offset: disabled [ 1003.144345] Rebooting in 86400 seconds..