Extracting prog: 2h2m58.998062891s Minimizing prog: 35m46.089893415s Simplifying prog options: 0s Extracting C: 58.427883207s Simplifying C: 10m3.068174792s extracting reproducer from 31 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-ioctl$sock_SIOCGIFINDEX_80211-socket$kcm-sendmsg$kcm detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 31 programs with base timeout 30s testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor bisect: bisecting 31 programs bisect: split chunks (needed=false): <30> bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=35s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: split chunks (needed=true): <10>, <10>, <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="2681de9abc2f1c3cb6267981c40581bb53397a4884afca65bef94bf2a2a3058863f192501a3e77e4f512c1bad17d8ecbc1445a8ed77d4fc8a24b863f77eb57fc83694d0706d83ef114769e5bf85bf19d9052d47febc4af46720f847a1c793e06fe1a0c42cd6461b73e8263d662caf41be3d998a00c2ca13da6785ddba757e2799731682dad3cc4e410a5ad91ff2ef6654292749df39061f568d39684d6fcbd7fa6c2e8d966680c0ee893313c0a4408c1e0a588e39fba259d2c080450d00e940ff8f53350e0f34d0f3267e3447f470a35630e16324a46d9d394c63a5546ec0e8f615a01747f6d3e7d9609259b8d0ebaf895d2cf185c485a89361db6ddacc325bee6898bfc3f30c1640bc39ee2b312ad70f61586306eb20940cebc000dd9b04dea6f81d8406ad1bd377caa685cda01f5b8f8152af3abbb11db8b1d676212f9daefb5c2de8aeb6a6b763b69afbd3a09899e0b247cc9070218c56b0a67a39451da5786df6817f57d57965f227938e4598aa33b55f2630e0f13e5e71639dc9585ed5fda800cbe7e6db920e14a6315f7328852ba1f3980d945c0893be0b0c39ddcaf8a3f6aeccbdeeba6312a7a183d369af48e4bfd38ac803eef3e5c950d28947b219bfddbc51376f7d425b5e136460cfc43584f8b19fa833501192334d7e5d342e85cf91cc298ed9082a443da1de74e279993584ccf73a4d3bdbb943adef7fa78e668c3538e884892dcf02d0ddc9a9beabfc62577a57073c692bb7a2ce94cb20f51503fa576480ff5d2e9a1d169d6dc5d2418e028beff98d4f83fae15165f2ec58b74812b33325fd42b0969739992b0c4fdf0c464ce97d5d6b20344087cfec4a171b01fe9be38f9233eceebe58c2ca8160c2d900128edc6bfe21690aa141bdbe9e2ee94cda50da285f409f8a9d00a5a2350aea4350ee33ccd365c6b6789da004e2e0cbb082640581737d4ffd93ba81f8f7a3fdd13ead78f8d311941aff434b774a1f3a8583f0610e2f52ec1c06c6ff288960475967bd14018347b9e13bddd9def76db8ab7b9c636481a12bed0c6d713caa82aee6ebab5284e86eb77da5ef3e40ca63f56402635dcb0e2a64fc676e83b033ac70e4c372e426d3008f9325eaca82ffab7bb58c78564c1d6c4225d716994bd44b45e56d7c08ee8c967afdb27b0c3eaec8673e19c3d6cd7528f48d4b0a46de9bd214650438f7aba5d62271f504656d583e47950610ec7973bbdc6e3ea2f11711267c5a61a2deb03640d8aecf265dcf6017baf694192bf84f65fc1f806ef1dd1a2da03bfc151c9b36080265f0be2043513057183bff94ea84371c61a24c4e48aed393137d22e4271dca2df677cd0f9fae6011f462adf54e724903cbae8d88e4117dc489bbc4d1624c8dd44fa9d01f4e0e871858255f93efa3815c50128b40f264130fac337930bf6d155f26e9464b4c255e795da3999a0cf80b1659017958ed89af23c8feca774ccef3f3b5cee0b635d9f38a2d360ad251793e5ea2f786ba9ec874943d4524bbb65daf9f9fa4245ac7c193ed121eec451118d0c41cdc275d85d7e44d3435541112992e6c927ccab1d54518175d5d98c2257ab8a7003b9eb31169ba85b1ec0d5d45952b5eab02f9d3f62c2510d3bee2922bded05def4c2cfc2010fe1a46d68da67b8c3a574d75835b4a846230636f22125f5bdcaf4c0f1bca70125d7693f1a95d001ab887a4218e865563a0c23f070cb51813fc8876b9325e7062877024734f19e37fdb43b50d5c3c27030acaaeea95ed30b2dc0871505f825448f8ca6946691c77457a37c4fdc29033e32fc38210390aa42cbd12e2e16b3f32e0233fb7fb2c926d2e9c1605ac4ce092fcb434b7c95fd896afab0ffa7cbe193fa6115ce1ea5a1c5599332f8a70c155b1fc71101fd9a8993d57899c9bfd2560f54a708ac8cd61613d8fd05e6a0c0a6817f9cd585f97931f1f4cfe1ac3f0f07ae581b60ceac031cfa5260a4bdcfb0621b2bce570023a42597aa1d75135c1ac45b841721a8e4fc7d12ec259de006a586b9af8782c340abd5b1b9470c79247bc51e72c98d7349c66ddb8357e4e9440648912ae69f27cb4ee12c0cbf716b64722a5a78bd00b33d1d5bcfb58ecab47ad0701ce882d7e044d9f4769596bfad413ff395644b336c6c3f7211348b531f93f7092d38490010668db4390be61dbea113c0b3f07863340a4f460187e5aa38abff10aeda30217a265e06b14b63257c48335310210b14df07caab2151473fab9da9c0c27b6be7972418e49bfe6f5933215c1c3b9d4fc2d53990a67f652b6a075e238619643c3ce3e62577e693896395fe354e7f1c71d96472a0edfde1330b3e9b4a73644e90be342f5929348d384ad4353b5a4fa275112c536e5f8b71a4166f55a1c64074c3e94296a94e8e9ff8666aa37c7ee338f45ac51882bdff449f103445cf981a70f33f634dd5e9c4870ec8e8a330385e2dd241bee8a0223b7ec1aa229b02b28c1ccacb3ba2674019bcbb6dbf774993712bca2644491e41ac3a3a0a960577f39bdc8751695e8d6568cefe8014114f9e0b530fb3402afb5eb6e5936060d78a7916eefd9b53a4d6a1c7414f6d15ccd1e616d6523269ae18fd3eafff9e75520cf6c340ceb60288669db74e11cf54b095ce045108127bfdb5df58f2a1eca9104a5f5a6e9988e3d8c93ae84a3659991d1217b41b9737bc95b04c49cf55eabd5acc3f7d4b5fbd56fa6f2a57f89133b20a7dde6dc6635fdcd9d01f82c7c031f2e14a967917b4760ec7dc0235030b6ed641abb01ae77d6f7518adbc268ca5de072a4afdfd800d79543e4a74b1cf264c50434d7ef035d0c2eb6669d03b252bcb9798064c632c84d364620d37cd59f4d5063c5f5d36a33d72af381f792c3e599c7364fd0343f9ad8d67f01ed0faf447b32e12cb95656569fb9b30cc69e9bfb2e8c41b5ae0c9f1f3367e8e0c286a7557ffc4d301e4f1d4eeb0d87100a557560b04e7e63cedcf98ad327743a38e92d46eade0b545a25b0e733a2242fb77d242a231624bbac2064e52187809b2efea3f0f608dbdd0fe4fd3d1ce92331fcbc2cef56f05982ec0f2e43d115d1b9c6197acf4d133f1addd61895f3fc420a6907b9f373cd05cca3f5ad9adfb83f4bd6b1df221f4524efd8633c9d989af9e6d5b67606e12ccfac7c415562460569a8f9350b0ef3add3c79c91a6f5971ebf52c4855e5da64e89bb6b2cc81f304f144909d5e746fff01d2f355eed83db126d3c298a97170632aa703a0d2f98c7f095986ae1924a5c43fefe2e13b375473a6e9ad1e1499057bf9feabe50559a4cc48711990f0f7889b8bf553b80d9b33b11f1fb147a72c1f799bc7858d01bb9f2a533fb1196212c4ca7b317aae1899bef27b968450c8ccde04b357a9e17ee360dd99afa76346d0c2b643b1eac51615019243746768d47e9f70371736e7ec4d6e257269d4e70c123b0a3bd77f44964417a6c07618da10974a6a2340e7701e2f3f62c72abe5ddf8d6e8bed652ace9062eb29f839d4165dbfdeca049dae58f4cd51bd6279d956a69eba0730df127ce0ac8ee1f507e7d963a69aac94aa7cf6157a2caf6c5b1f8440e7198d6e657924782fe0cfdec26413641ea562e14b696c6da34f4c7802d5f89bb4df46a5d6581d884f690198b716ad3abe03acef89eddf6148b1a8b1f05d5fed3ae656be477c9c1bd61c8f33b24155b61cc31f339241b7e4926e98142d577fa19b0125b6fb25bc303e2e4f6372b9dd58bcae382f7934bda7c52625e29a667e4410800d177eed0e46e7defb0e65199023f9b887d19d91b3b70a4c80204f9cd2dd2c7e644338fc28bbdbfe4797730e2b3d181623f178c44edd44778eea6404abae7f442a1f69e3427f916a62a4c2a2909f81bfd0d7a728301ce27b6432ab29be556d1f6b87d49bfe2bc69be4f181459b249c0dc0a05e9f05611ebeecfc91687e855777ce9d4287dd8075b9f1d012eb9b237723e9e938a4d4fd262b64c49b2d81058512f7b0ded29c36472cffeae65e3d5809c7ac416d9b6d74adafc09c274a665d29f9e0e96853084fbbba9d9ede38b344c79fcef175f9481d0edb0dd4c34f9fc9261cc4f127e830902243946bd7c501f011fe2ccdba9bf7b5bdbe37a8e921d202fd80ee27115a6ff4fb39cd0f90b87b184a8b7a0bc264f368ebb4276c27f60988ab94447d24569f4feabc6ba0d29743fefca51a2bc8c5fde45b065187488d713e01e291546b26dce79c36f3256eb4cd788d84f782c94a6125e06f04124c26e96062370282c16d3f451e75bed89913fe3df4dd5683bebc884b9aec0e4dc56852ad60a7499720a3364a79c57f62156c7916d0c29b0f85b2a50dc0d7811b8e6fca289203114f13073536e850239d98b18b40e35016945f37c66a87058f79c43c05dc1311f78b53ea7c1a038ea4c78301ae0cf8d68e8a655f68827b6b26f8bd62799a5d550d336b997278fedeb9d038d6b4bd6e88fd105b9355d3df6ebc9741cf61b6d057a40225d824461fbf56eebe965c9106aa6f7715f1bcb8a6a3eabd6defa5b5fea049c1885e7fc9847be7daad7cac264bcac8d6bfdb3a32bd82d098f85139de00225c155084f63c12ab69c44026e52dec3a110a8828cda20ec1198e8bedf9ddf89b9b766fd8914904db7e6a2bdc49e319ea09a014752449929f950e756cf12abb58218e80e7786449e183825cf1a66ac38398c15b6e807ac108afe367c01af95bfbe204f2c7323778227c43be1f0f4ce763dab878442317b24c82cfc75707f95f4fd7eb305d628c066cf611be6061a1ead3b2562b584b9ad8ef8a363002860684c674d01242dfde3b6c3b38e45886f0be473f46d83f9698a362a254fdbadc3ad06639dce2f7c99c00df59a2f57f286b7d7d99119e924cd1f6df5c7e3925f4858ae793d8cb1d4077724341c9f620336d55cd91bfbad07c8da4924fab294d46d2420fbcefbfef6c5d7652eea85ef9424add2cef16b1473ab4fb4a5352e51329e3aeda622365f81dc8dbdbd1a9460605436873a65dda62407cfd2c48a5603564f4775e672ef6b3c40f06fe4068a6b86aeed0d584ea547dcbd36a9a68cc0fcd2fa84d55d703e738561cb0b52d1e983438a87d537dab4f53ed12a77c34c869a8807184eae59c25b88a428c71251ce2c594fbd7b6d396a7b8a8fd7914babc7a110dc148336ad2f961a2c55f58519fa2aa1857c820d6f983b850a0b5bc88caa7af8118f4cf97524d0d767fe8c7003a0689fac08ae6fa9813a96151a190581edefa5b3b7d7408ecfb1aac4f5f9aa7e080e732ec5c1972f83733a0bce3983cff2b6fba91c36200fd582c497a6b5d628882de0ab45b3f1f178314c34bcc32ea2f77c0af13a2812f14eed58e5973523812e941a52f8d1e52771521b0c36cc6993e98ecbc04e3b2342fbb592bc5f7e506f6220d5bb0be4034260a31e68291d79738b9df976b102cebd46f4bbade7ed35ea9f2f4fb1ce25f5f602cb4db64dec943b90b9212314318c9ec83e09df1ee25e660a4b38b995c8d8af9114a021ce2227f9a88d4ef5054f844537d201cf2defc9616ad207bd145e1f5c6407adc64cd0f3cb860bda37352aa25c8c1b5efc8c2310047eab7fb697bce880f97712429cc6b96c7910d825a0f62d22bf5763667bd98a1177e409c460e2fca344547b4853fead1d7e206edb6b3d0e9843b1712dc281fd12058b16079d802a8d93defc5eddd0eb260435e18da1a941c020f4cb1c42a26d4dfae9f2b2d903b93cea73ba68439d0d17238ddc72f1620f61d9556992307ad8f8f5ecb5a11d17572efff37e7d0584790", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: split chunk #1 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="2dd4ed986520c6cf56741caec89744f7fa6aef6a297f53616aadc721b3b19af187798d26095a10e3f97ae39e73af7c77541b288b02e57a7901c495e70d14dd91897382fb5db6d789ca6c3c8bb7c798b1ea79cfd9c954496f55f5e6b46eaeb5de49b9e93d1ea3c1152c2fab719e53548344b3da0adba9a299278fe8538b061fe0b0515a6aca234889192e5135127cbb44adbbff195d1e74d273cb1c49b2532ebad0120e4e1d3bdedf93b208dac25b8fbfaff6b6e20fccf6c7153272ab03740861e50f85624b64c849bc98e6090ee97ed9ed0b777c14b92ed91931fd7a895480242cee54f1ba66432cebc6b29458eadfb25a4406ea5ed3ec11ae52e5", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: split chunk #2 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=36s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: split chunks (needed=true): <5>, <5>, <5>, <5>, <5>, <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 4, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="2681de9abc2f1c3cb6267981c40581bb53397a4884afca65bef94bf2a2a3058863f192501a3e77e4f512c1bad17d8ecbc1445a8ed77d4fc8a24b863f77eb57fc83694d0706d83ef114769e5bf85bf19d9052d47febc4af46720f847a1c793e06fe1a0c42cd6461b73e8263d662caf41be3d998a00c2ca13da6785ddba757e2799731682dad3cc4e410a5ad91ff2ef6654292749df39061f568d39684d6fcbd7fa6c2e8d966680c0ee893313c0a4408c1e0a588e39fba259d2c080450d00e940ff8f53350e0f34d0f3267e3447f470a35630e16324a46d9d394c63a5546ec0e8f615a01747f6d3e7d9609259b8d0ebaf895d2cf185c485a89361db6ddacc325bee6898bfc3f30c1640bc39ee2b312ad70f61586306eb20940cebc000dd9b04dea6f81d8406ad1bd377caa685cda01f5b8f8152af3abbb11db8b1d676212f9daefb5c2de8aeb6a6b763b69afbd3a09899e0b247cc9070218c56b0a67a39451da5786df6817f57d57965f227938e4598aa33b55f2630e0f13e5e71639dc9585ed5fda800cbe7e6db920e14a6315f7328852ba1f3980d945c0893be0b0c39ddcaf8a3f6aeccbdeeba6312a7a183d369af48e4bfd38ac803eef3e5c950d28947b219bfddbc51376f7d425b5e136460cfc43584f8b19fa833501192334d7e5d342e85cf91cc298ed9082a443da1de74e279993584ccf73a4d3bdbb943adef7fa78e668c3538e884892dcf02d0ddc9a9beabfc62577a57073c692bb7a2ce94cb20f51503fa576480ff5d2e9a1d169d6dc5d2418e028beff98d4f83fae15165f2ec58b74812b33325fd42b0969739992b0c4fdf0c464ce97d5d6b20344087cfec4a171b01fe9be38f9233eceebe58c2ca8160c2d900128edc6bfe21690aa141bdbe9e2ee94cda50da285f409f8a9d00a5a2350aea4350ee33ccd365c6b6789da004e2e0cbb082640581737d4ffd93ba81f8f7a3fdd13ead78f8d311941aff434b774a1f3a8583f0610e2f52ec1c06c6ff288960475967bd14018347b9e13bddd9def76db8ab7b9c636481a12bed0c6d713caa82aee6ebab5284e86eb77da5ef3e40ca63f56402635dcb0e2a64fc676e83b033ac70e4c372e426d3008f9325eaca82ffab7bb58c78564c1d6c4225d716994bd44b45e56d7c08ee8c967afdb27b0c3eaec8673e19c3d6cd7528f48d4b0a46de9bd214650438f7aba5d62271f504656d583e47950610ec7973bbdc6e3ea2f11711267c5a61a2deb03640d8aecf265dcf6017baf694192bf84f65fc1f806ef1dd1a2da03bfc151c9b36080265f0be2043513057183bff94ea84371c61a24c4e48aed393137d22e4271dca2df677cd0f9fae6011f462adf54e724903cbae8d88e4117dc489bbc4d1624c8dd44fa9d01f4e0e871858255f93efa3815c50128b40f264130fac337930bf6d155f26e9464b4c255e795da3999a0cf80b1659017958ed89af23c8feca774ccef3f3b5cee0b635d9f38a2d360ad251793e5ea2f786ba9ec874943d4524bbb65daf9f9fa4245ac7c193ed121eec451118d0c41cdc275d85d7e44d3435541112992e6c927ccab1d54518175d5d98c2257ab8a7003b9eb31169ba85b1ec0d5d45952b5eab02f9d3f62c2510d3bee2922bded05def4c2cfc2010fe1a46d68da67b8c3a574d75835b4a846230636f22125f5bdcaf4c0f1bca70125d7693f1a95d001ab887a4218e865563a0c23f070cb51813fc8876b9325e7062877024734f19e37fdb43b50d5c3c27030acaaeea95ed30b2dc0871505f825448f8ca6946691c77457a37c4fdc29033e32fc38210390aa42cbd12e2e16b3f32e0233fb7fb2c926d2e9c1605ac4ce092fcb434b7c95fd896afab0ffa7cbe193fa6115ce1ea5a1c5599332f8a70c155b1fc71101fd9a8993d57899c9bfd2560f54a708ac8cd61613d8fd05e6a0c0a6817f9cd585f97931f1f4cfe1ac3f0f07ae581b60ceac031cfa5260a4bdcfb0621b2bce570023a42597aa1d75135c1ac45b841721a8e4fc7d12ec259de006a586b9af8782c340abd5b1b9470c79247bc51e72c98d7349c66ddb8357e4e9440648912ae69f27cb4ee12c0cbf716b64722a5a78bd00b33d1d5bcfb58ecab47ad0701ce882d7e044d9f4769596bfad413ff395644b336c6c3f7211348b531f93f7092d38490010668db4390be61dbea113c0b3f07863340a4f460187e5aa38abff10aeda30217a265e06b14b63257c48335310210b14df07caab2151473fab9da9c0c27b6be7972418e49bfe6f5933215c1c3b9d4fc2d53990a67f652b6a075e238619643c3ce3e62577e693896395fe354e7f1c71d96472a0edfde1330b3e9b4a73644e90be342f5929348d384ad4353b5a4fa275112c536e5f8b71a4166f55a1c64074c3e94296a94e8e9ff8666aa37c7ee338f45ac51882bdff449f103445cf981a70f33f634dd5e9c4870ec8e8a330385e2dd241bee8a0223b7ec1aa229b02b28c1ccacb3ba2674019bcbb6dbf774993712bca2644491e41ac3a3a0a960577f39bdc8751695e8d6568cefe8014114f9e0b530fb3402afb5eb6e5936060d78a7916eefd9b53a4d6a1c7414f6d15ccd1e616d6523269ae18fd3eafff9e75520cf6c340ceb60288669db74e11cf54b095ce045108127bfdb5df58f2a1eca9104a5f5a6e9988e3d8c93ae84a3659991d1217b41b9737bc95b04c49cf55eabd5acc3f7d4b5fbd56fa6f2a57f89133b20a7dde6dc6635fdcd9d01f82c7c031f2e14a967917b4760ec7dc0235030b6ed641abb01ae77d6f7518adbc268ca5de072a4afdfd800d79543e4a74b1cf264c50434d7ef035d0c2eb6669d03b252bcb9798064c632c84d364620d37cd59f4d5063c5f5d36a33d72af381f792c3e599c7364fd0343f9ad8d67f01ed0faf447b32e12cb95656569fb9b30cc69e9bfb2e8c41b5ae0c9f1f3367e8e0c286a7557ffc4d301e4f1d4eeb0d87100a557560b04e7e63cedcf98ad327743a38e92d46eade0b545a25b0e733a2242fb77d242a231624bbac2064e52187809b2efea3f0f608dbdd0fe4fd3d1ce92331fcbc2cef56f05982ec0f2e43d115d1b9c6197acf4d133f1addd61895f3fc420a6907b9f373cd05cca3f5ad9adfb83f4bd6b1df221f4524efd8633c9d989af9e6d5b67606e12ccfac7c415562460569a8f9350b0ef3add3c79c91a6f5971ebf52c4855e5da64e89bb6b2cc81f304f144909d5e746fff01d2f355eed83db126d3c298a97170632aa703a0d2f98c7f095986ae1924a5c43fefe2e13b375473a6e9ad1e1499057bf9feabe50559a4cc48711990f0f7889b8bf553b80d9b33b11f1fb147a72c1f799bc7858d01bb9f2a533fb1196212c4ca7b317aae1899bef27b968450c8ccde04b357a9e17ee360dd99afa76346d0c2b643b1eac51615019243746768d47e9f70371736e7ec4d6e257269d4e70c123b0a3bd77f44964417a6c07618da10974a6a2340e7701e2f3f62c72abe5ddf8d6e8bed652ace9062eb29f839d4165dbfdeca049dae58f4cd51bd6279d956a69eba0730df127ce0ac8ee1f507e7d963a69aac94aa7cf6157a2caf6c5b1f8440e7198d6e657924782fe0cfdec26413641ea562e14b696c6da34f4c7802d5f89bb4df46a5d6581d884f690198b716ad3abe03acef89eddf6148b1a8b1f05d5fed3ae656be477c9c1bd61c8f33b24155b61cc31f339241b7e4926e98142d577fa19b0125b6fb25bc303e2e4f6372b9dd58bcae382f7934bda7c52625e29a667e4410800d177eed0e46e7defb0e65199023f9b887d19d91b3b70a4c80204f9cd2dd2c7e644338fc28bbdbfe4797730e2b3d181623f178c44edd44778eea6404abae7f442a1f69e3427f916a62a4c2a2909f81bfd0d7a728301ce27b6432ab29be556d1f6b87d49bfe2bc69be4f181459b249c0dc0a05e9f05611ebeecfc91687e855777ce9d4287dd8075b9f1d012eb9b237723e9e938a4d4fd262b64c49b2d81058512f7b0ded29c36472cffeae65e3d5809c7ac416d9b6d74adafc09c274a665d29f9e0e96853084fbbba9d9ede38b344c79fcef175f9481d0edb0dd4c34f9fc9261cc4f127e830902243946bd7c501f011fe2ccdba9bf7b5bdbe37a8e921d202fd80ee27115a6ff4fb39cd0f90b87b184a8b7a0bc264f368ebb4276c27f60988ab94447d24569f4feabc6ba0d29743fefca51a2bc8c5fde45b065187488d713e01e291546b26dce79c36f3256eb4cd788d84f782c94a6125e06f04124c26e96062370282c16d3f451e75bed89913fe3df4dd5683bebc884b9aec0e4dc56852ad60a7499720a3364a79c57f62156c7916d0c29b0f85b2a50dc0d7811b8e6fca289203114f13073536e850239d98b18b40e35016945f37c66a87058f79c43c05dc1311f78b53ea7c1a038ea4c78301ae0cf8d68e8a655f68827b6b26f8bd62799a5d550d336b997278fedeb9d038d6b4bd6e88fd105b9355d3df6ebc9741cf61b6d057a40225d824461fbf56eebe965c9106aa6f7715f1bcb8a6a3eabd6defa5b5fea049c1885e7fc9847be7daad7cac264bcac8d6bfdb3a32bd82d098f85139de00225c155084f63c12ab69c44026e52dec3a110a8828cda20ec1198e8bedf9ddf89b9b766fd8914904db7e6a2bdc49e319ea09a014752449929f950e756cf12abb58218e80e7786449e183825cf1a66ac38398c15b6e807ac108afe367c01af95bfbe204f2c7323778227c43be1f0f4ce763dab878442317b24c82cfc75707f95f4fd7eb305d628c066cf611be6061a1ead3b2562b584b9ad8ef8a363002860684c674d01242dfde3b6c3b38e45886f0be473f46d83f9698a362a254fdbadc3ad06639dce2f7c99c00df59a2f57f286b7d7d99119e924cd1f6df5c7e3925f4858ae793d8cb1d4077724341c9f620336d55cd91bfbad07c8da4924fab294d46d2420fbcefbfef6c5d7652eea85ef9424add2cef16b1473ab4fb4a5352e51329e3aeda622365f81dc8dbdbd1a9460605436873a65dda62407cfd2c48a5603564f4775e672ef6b3c40f06fe4068a6b86aeed0d584ea547dcbd36a9a68cc0fcd2fa84d55d703e738561cb0b52d1e983438a87d537dab4f53ed12a77c34c869a8807184eae59c25b88a428c71251ce2c594fbd7b6d396a7b8a8fd7914babc7a110dc148336ad2f961a2c55f58519fa2aa1857c820d6f983b850a0b5bc88caa7af8118f4cf97524d0d767fe8c7003a0689fac08ae6fa9813a96151a190581edefa5b3b7d7408ecfb1aac4f5f9aa7e080e732ec5c1972f83733a0bce3983cff2b6fba91c36200fd582c497a6b5d628882de0ab45b3f1f178314c34bcc32ea2f77c0af13a2812f14eed58e5973523812e941a52f8d1e52771521b0c36cc6993e98ecbc04e3b2342fbb592bc5f7e506f6220d5bb0be4034260a31e68291d79738b9df976b102cebd46f4bbade7ed35ea9f2f4fb1ce25f5f602cb4db64dec943b90b9212314318c9ec83e09df1ee25e660a4b38b995c8d8af9114a021ce2227f9a88d4ef5054f844537d201cf2defc9616ad207bd145e1f5c6407adc64cd0f3cb860bda37352aa25c8c1b5efc8c2310047eab7fb697bce880f97712429cc6b96c7910d825a0f62d22bf5763667bd98a1177e409c460e2fca344547b4853fead1d7e206edb6b3d0e9843b1712dc281fd12058b16079d802a8d93defc5eddd0eb260435e18da1a941c020f4cb1c42a26d4dfae9f2b2d903b93cea73ba68439d0d17238ddc72f1620f61d9556992307ad8f8f5ecb5a11d17572efff37e7d0584790", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: split chunk #1 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, <> 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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: split chunk #4 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="2dd4ed986520c6cf56741caec89744f7fa6aef6a297f53616aadc721b3b19af187798d26095a10e3f97ae39e73af7c77541b288b02e57a7901c495e70d14dd91897382fb5db6d789ca6c3c8bb7c798b1ea79cfd9c954496f55f5e6b46eaeb5de49b9e93d1ea3c1152c2fab719e53548344b3da0adba9a299278fe8538b061fe0b0515a6aca234889192e5135127cbb44adbbff195d1e74d273cb1c49b2532ebad0120e4e1d3bdedf93b208dac25b8fbfaff6b6e20fccf6c7153272ab03740861e50f85624b64c849bc98e6090ee97ed9ed0b777c14b92ed91931fd7a895480242cee54f1ba66432cebc6b29458eadfb25a4406ea5ed3ec11ae52e5", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: split chunk #5 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 23, 2, 6, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: too many guilty chunks, aborting single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS-ioctl$sock_SIOCGIFINDEX_80211-socket$kcm-sendmsg$kcm detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 31 programs with base timeout 1m40s testing program (duration=1m47s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 20, 8, 4, 2, 2, 18, 30, 4, 2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc, {0x401, 0x4, 0x4, 0x2}}}]}, 0x38}}, 0x0) executing program 0: io_setup(0x1, &(0x7f0000002500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00', 0x272) executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x94, 0xc8, 0x1}}}, 0x7) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 32: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x0) executing program 3: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000980)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x20, 0x0, 0x44, {0x44, 0x24, "0f7b0d2fcbda1a6118f5a0ec584d1ccb9517ff3b0e980a3ef40c8402091d28fe477bc8cd480effbc7ba4f466d8e2f8d786fd1254b91de74124968acd5efca58bc5e8"}}, &(0x7f0000000580)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "e93c2962728a6ea0fc7475a0e0a03836e82c8e0201917fd54620ada778a569e2c1eb397aa64349c0aa54f05cddec5eeb7abc37902e89f797a920efec70c0a306f436683cd96af303d05a883b87034f36d0a0367ac6691709051e964e3df4219abbc7be27a6a968cf58064e344195f44274c4388e3f78f1bf2ae1135b17b36ae56beee9fa2a4d2b084cc85d15e34bcb17a61586b58f49f552f33b86c8a45c0520062afb6e837866"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000680)={0x0, 0x11, 0xe9, "9187bf653390387ba3c192a7463c79fc10eed08d1695ee7ded78f55bc532b071ffd7b57d24d3a74b9d362b28f87ae6973d1627cc67ef6740a7520acfe1266ad9571a0d01beb4e88025f5af551a60c373392ecc05aa459c4515d65422ca5614a0b09c74f9c26914bd951318d573f9fddbfc24069acbcdd1371cf62a85ccee95aad662ae8a68e590ffa7d7e1ae14037caff5323b178d033674cd5a0f4c184e21b5a37857f66b54e76dc3315a4adfe123e862cf4f62b19baef95cbdba149bd6b6fc022a80674e226556b94e456bf24aa0aa8edd16c989b6c681e9a30edc28ceb0da2d42d28681d7202e6d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x54}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f0000000880)={0x40, 0xa0, 0x4}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "cfee0f9c22f23194e2139ac24a43f889e5d6928b1418b894a39bfe2e1c69f2bf2d7106fd4144ff3630b7906c384fb3"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x77cb77ab5095273, 0x23, 0xf9, {0xf9, 0x14ae7f26deacf68f, "75ee98a758e03f7c8d58bc9b4c0e05218e602a067653586ea332b9a1113315e1fff2e10af4929cc6a3d7c657cf7331bc2405892d86411bbe9981375eb9c7bc66853c6c4655d718aad2ed4cd56c010de697a1d9a5f284d828cbfd9b931809873d060110710d1b54bbb08c9131e6f27ddf97cd60d40511e8435c61fbf7375fb7056f3dd35571937ee4d9ddc94588ba5218f7f90b4825608c52157999c525d81679c1ec4bff0faf3032f7f12124674d26b860fbb8a0e0f7c68291735a39d4b87ad4ab49dbc9d680dab303bde98e28d181c577b6ef5635971e0610f5a16c7888d3238b1a0c7d8138b80cd7fe22c89d7b8cc9aec25eb8b439c1"}}, &(0x7f0000000140)={0x0, 0x3, 0x74, @string={0x74, 0x3, "b18176d7b8341987894320dea29cb917474cb3cce98d91c3715de62092074d8aa57de34bd14f54fdde02e0482a81aad1977b5feb5d2f070712339efa1c90ee3bf18bb9131dae3ef01fc4de84c2c1e26aef3562b3341fc6dc618312a0f538321e9eddaf616d0804b9d75c37e8a776e36dd776"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x40, 0x1, 0x74, "10d04df923741af586b189757d841cea2daa715cbb6a40a73a3c0e4af9f54f2988bf786504b120f5591584e0e94ea91159ea4c679fec0367848ce487a956faa81083b1e808e54ba79590620d80c5f3011aef3eda83d7ff7fc95e07850db077afd6db71009e9ed7ca8ce46d8d8c5b714363c2f032"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x3b, {0x39, "b65776718f26618ee96e2cd4bd857c3d78b467e2f1858b360fbcbdb379093a8bdec4f9ac5aefca81717257299fee3f4bdbdc2a3ff319844ce9"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xd7}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x2}}) read$char_usb(0xffffffffffffffff, &(0x7f00000004c0)=""/50, 0x32) executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1800, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r1}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000180)) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f00000002c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000340)={r4, 0x0, 0x2, 0x9}) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x2d, 'memory'}, {0x2d, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'cpuacct'}]}, 0x3a) syz_usb_connect$uac1(0x4, 0xc9, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x58, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x3, "f35b3105"}, @as_header={0x7, 0x24, 0x1, 0x84, 0x3, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2a, 0x4, 0x2d, 0x9, "ad348163a3"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x400, 0x0, 0x4, "02ac2edaf111"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffd, 0x23ec, 0x8, "6a3332be7c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x1, 0xf7, {0x7, 0x25, 0x1, 0x83, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0x10, 0x6, "ff51"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xfb, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xff, 0x0, 0x15, 0x40, 0x4}, 0x4c, &(0x7f0000000500)={0x5, 0xf, 0x4c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "ba77c3215063e3ce00e764fec3d60058"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xf, 0xc0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3d, 0x7, 0x0, 0x8, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x40, 0x2, 0x4, 0xf00, 0x3, [0x0, 0xc00f]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0xaa, &(0x7f0000000600)=@string={0xaa, 0x3, "4e8d6bcd23d646c0bdfbf4e563b381f6e93bfd65c5f19af17241911946507a1f518f0938a9d43e2382bdf3091aa7e18bc101bd0b93027d3439dbf1e4f466ec9b1cc9a13dd7e04d2dd284ad27318241b4274024d0616095aa908efb1604cd11a0eddc1668f57034b4eb133fb772a5a78c64d3750eb0ca466e77580fe00b07eee1d5d68156f80a502db7e0270f61d98a6eca00f0feaaa33dc63e4695be5d0962575c0281ebd08961f0"}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "c1f8fb086752e1ce06ad1e97666af9d20260447eaf5ea115a698bd2d065d31ccbdee5a97c7d7557666cd9d57d8eaf29ef1f7c733fffb71d1ac743a02228efff562a8cd475302593fe6dc98d52c7fc9ef0c25f7e3c1f052297061ab363a1582ca0a4060d18e59e700ea64ece6f4e3a449a7c53d4cc49a0b0bf81a8bab47eb1ad7f17e3b9157c1ddc97ab12d437c4bc17fa144a4a8f10969f8ee23c54c8ea3ab3ac0fa86dd2f68a08e97c3680557478470661929d1583d223a1ad04c91093a81207a4d18c5b3372aaa097147829c807fd5b1253f3b68c7f3db8f"}}]}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000008c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x10040, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000940), 0x9, 0x101042) stat(&(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000a40)) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000ac0)={{0xa, 0x4e23, 0x2, @remote, 0x8}, {0xa, 0x4e22, 0x800, @private0, 0x6}, 0x0, {[0x7, 0x6406, 0x79, 0x20000, 0xf, 0x9, 0xfffffff7, 0x6]}}, 0x5c) sendmsg$802154_dgram(r5, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @short}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="0476a69a27b63de740f8735bf659c43890302fddeb66f60f1d5729d5c54c23bd43c0bc5edd5bb9dae4df896c23635296e4387e795d926347c2273dba1370e8584230a3c524f93325253f1174a01e4e10b2dfa29ed7e7fc0f36d25aaa0aa17cb929062c299cfabe4f9dd5d99a5148e06950fde1b46261e32bfad6ec3668c97ae8f26e00e7031b455b6c2d01dfdd8411f6ffc1935021e69f598aa02336eea8f84b3af09998fc88ed9b4538b4098879c740f31e9f749345dd0c17065476e12926d3bf7e92ca38543aa6b6bf660f7036f1da956f4a3af8d93ba94a2194772c8029a7183f77627d42b1f1d76d31fc76dbc03e75489f86", 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d80)={'pimreg\x00', 0x2}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) close_range(r3, r3, 0x2) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000ec0), 0x600080, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000f00)={0xfd, 0x3, 0xffff}) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000f40)) executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}, 0x1, 0x0, 0x0, 0x40015}, 0x0) executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor bisect: bisecting 31 programs bisect: split chunks (needed=false): <30> bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m45s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5, 2, 4, 2, 23, 2, 6, 8, 12, 12] detailed listing: executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) executing program 4: io_setup(0x5, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="f00600007d00400005660300004000000020ffffffff06feff000000000000003101000000000c00000000000000000000000f0104"], 0x6f0) executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="8800000010001700000000fffffff0000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xe0000000}, 0x0) executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x7}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0xa, 0x3, 0xff) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="20050c0000000c21982825354364b308a7ec"], 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001900)={0x8, 0x0, &(0x7f0000000840)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0xfeffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="e718af69b36a3d10653456d857cb41af8330d7b679be22236bbf9d3226de618d7ea3a3eab71b8a316f40870717ab9783c457cf0b160cdc8094d928595741f716d0341145a6b2c4f7d0cc5775c3a7d887324eac79f65871dd933bfa1f8a93571a0018b52d41bc2c35c43f9324c633550ecb130270028ec3a151c4b9b381bb463ccb704556acf8e0ac85c9eb75712f544f7d17a3", 0x93}, {&(0x7f0000000180)="ead8adcbbebcb830369496a4d7bfe4be3dfba166901be4768661f9152126aed05c3ea2cfaf61c1df871fe06003add6cf8474cbf5b83c26586a268177986bf6d1ea897fc8321e086b2870f88de77c2b4eb20415d4af0cb84aeb4797cecd124e", 0x5f}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000200)="e09ebf7b2ff416768e5cd5807ff532fc2a749800439c1ca900b529d22644bd1bd7a9f64483c5594a7cb73faf738abf10d57ba4ea75a44ec45c9a1d36cb479509a703f8c4bc81add559081a228b2653f3c2bf26d9e399d149f3868c47c8a6e4ddc9c9261ce5dcfe9696", 0x69}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000280)="5aebf1bb9adff9ab28867d1191dafb75565db43867ffcaa93890bcd954b9a0b6bc2b579e1d7a04850dde5b7bf7c93d95d41a8c104d7c765e525536769a009051ab138e023ca35d47c66f3f423e714cdb23194ae930256fb061fc518b222c547af999f8d430cb424522d17fec660bdd3b194c", 0x72}, {&(0x7f0000000480)="6c982e06944022a5e1d95bebf69ac2f47751e9d86dcd6dd79dd9caf0f0b8925847217df4320d544563113b9c8d64056c5f9235211cabb1bae1378f61e01b1371272938d0fae1a2ffba9eed81649f5e96e10f9f088a96bc6d19303d44d9d41ded4d926285be6652ee7f2c15970e684cd7d28de62fa0c81969e54be19c11547057349079e17320013d41f02d6a5ea88d40305ff6d430aecafce5415145802faed67289f0f0ac4bd65b0e913b25c9e774493c7b6f94ae340b9eb054beed8872eda8c57efc49c95f", 0xc6}, {&(0x7f0000000580)="d258b85f40df03103c9c3736ef08c08e871c9974ba72df056d8463ab4c3ed9d5fe65d650ee378296463680b7706d3aeac39971f304e83f594a95a68d7e470d1abc772da1c632", 0x46}], 0x8, 0x0, 0x0, 0x20040014}], 0x1, 0x4000800) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0300fd000000140000006c07010033d43afffe80003a000000000000000000000010ff02000000000000000000000000000189"], 0x340a) executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xffdd) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x401, 0x0, r2, 0x0, &(0x7f0000000140)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000180)}}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7c, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000080)={0x0, "625fa4f0bfbd34d6c459945071440682e69024165d61e1961ac8cbd54b3cd9ae", 0x3, 0x9, 0x4, 0x40000, 0x200, 0x2}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=1m42s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 23, 30, 6, 4, 8, 4, 10, 9, 16, 12] detailed listing: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x41, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setuid(0xee01) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @empty, 0x42}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x40, 0x11, 0x2, {0x2, 0xe}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@uuid_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) chdir(&(0x7f0000000c00)='./file2\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pread64(r0, &(0x7f0000000100)=""/222, 0xde, 0x200000000013) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e40)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xfd3f) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './bus\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file1\x00'}) statx(r0, &(0x7f0000000580)='./bus\x00', 0x1000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="00007a625261e9c286ae92", @ANYRES16=r11, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) statx(r0, &(0x7f00000006c0)='./file1\x00', 0x6000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r6, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() statx(r0, &(0x7f0000000940)='./file2\x00', 0x2000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r18) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r17, &(0x7f0000000240)='ns/ipc\x00') mount$bpf(0x0, &(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80), 0x1080400, &(0x7f0000000cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r16, @ANYBLOB=',mode=00000000000000000000006,fsmagic=0x0000000000000009,rootcontext=system_u,uid<', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=sig,\x00\x00\x00\x00']) lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000010002000000000002000300", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="040000000000000008000400", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800070080bf4847018e3f8329938b2920aa5b98926b5b421088305fb3d012dbbf962854ca8ac3a296912c08758e303f3db5bac6460a6a", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000400000000002000010000000000"], 0x8c, 0x3) executing program 2: socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x52000000, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) sendto$inet6(r0, &(0x7f0000000080)='e', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor bisect: the chunk can be dropped bisect: split chunks (needed=true): <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 4, 10, 9, 16, 12] detailed listing: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 16, 12] detailed listing: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 4, 10, 12] detailed listing: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140040006c07010033d43a"], 0x340a) executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: split chunks (needed=true): <3>, <2> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 9, 16, 12] detailed listing: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 16, 12] detailed listing: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x91) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xfffffffffffffffe}]}) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 9, 12] detailed listing: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor bisect: the chunk can be dropped bisect: split chunks (needed=true): <1>, <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 3 programs left: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bisect: trying to concatenate bisect: concatenate 3 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 9, 12] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 9, 12] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 9, 12] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 9, 12] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 9, 12] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 9, 12] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 9, 12] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 9, 12] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 9, 12] detailed listing: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 9, 12] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="4000000000000006", 0x8}, {&(0x7f0000000140)="19150000000e", 0x6}], 0x2) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor minimized 10 calls -> 5 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 8, 12] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 7, 12] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 7, 12] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 6, 12] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 12] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 12] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 12] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 5, 12] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 12] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e14060200000b000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor minimized 9 calls -> 4 calls minimizing program #2 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 11] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 10] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r1, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 9] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1bc, r0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@random={0x8, 0xbb, "8de097f18c3cd3b25daa1ddb0e9b638273ba8e2506eaac92927bb5c775a674b00f65ee7f4725eed815e5ad20c89d712ff8cfe74d3b41df261682fd871b9c186d15d37f7711b1816cd592d896b519610c9824832dce103bf0853e25c5284b295eca2f6c99c67bb338e01a0226424e1fa9915fda6a9228f9888e9b9e9e8e0878e9b81e26b2ec02a5f9b69377816b93b4229adf59b4e5277f13ea792294aa30220f9ad6668b907fc451fd84350df0a203f442c76c4e02b7d4c90c2b7f"}, @challenge={0x10, 0x1, 0x95}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x2, 0x8, @device_b, 0x3a1, 0x4, 0x800}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0x6, 0x5e, 0xe, 0x8001}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x6c, 0x9}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x84, 0x5}}, @channel_switch={0x25, 0x3, {0x0, 0xa9, 0xb}}, @preq={0x82, 0x67, {{0x1}, 0xff, 0x3, 0xa9, @broadcast, 0x7, @void, 0x4303, 0xb, 0x7, [{{}, @device_b, 0x3}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x6}]}}, @ibss={0x6, 0x2}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0xcb, @broadcast, 0x2, 0xffffd746, 0x1}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x8c2, 0x2, 0x7, 0x0, {0x6, 0x8, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3}, 0x6, 0xffff, 0xf7}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x20000880) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 9] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 8] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 7] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 6] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 5] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 4] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 4] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 4] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 4, 3] detailed listing: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor minimized 12 calls -> 3 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS-ioctl$sock_SIOCGIFINDEX_80211 detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor bisect: concatenation succeeded found reproducer with 12 syscalls minimizing guilty program testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$qrtr(0x2a, 0x2, 0x0) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program did not crash testing program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m23.82137121s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor simplifying C reproducer testing compiled C program (duration=1m23.82137121s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing compiled C program (duration=1m23.82137121s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing compiled C program (duration=1m23.82137121s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing compiled C program (duration=1m23.82137121s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing compiled C program (duration=1m23.82137121s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing compiled C program (duration=1m23.82137121s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing compiled C program (duration=1m23.82137121s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor testing program (duration=1m23.82137121s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor validation run: crashed=true testing program (duration=1m23.82137121s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor validation run: crashed=true testing program (duration=1m23.82137121s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-socket$unix-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_NEW_INTERFACE-openat$tun-close-socket$nl_generic-ioctl$SIOCSIFHWADDR-socket$qrtr-ioctl$sock_inet_SIOCSIFFLAGS detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) program crashed: KASAN: slab-out-of-bounds Read in ieee80211_add_virtual_monitor validation run: crashed=true reproducing took 2h54m17.15096429s repro crashed as (corrupted=false): mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode ================================================================== BUG: KASAN: slab-out-of-bounds in ieee80211_add_virtual_monitor+0xa42/0xce0 net/mac80211/iface.c:1255 Read of size 1 at addr ffff8880753b7d90 by task syz.0.17/6029 CPU: 0 UID: 0 PID: 6029 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report+0x118/0x150 mm/kasan/report.c:595 ieee80211_add_virtual_monitor+0xa42/0xce0 net/mac80211/iface.c:1255 ieee80211_do_stop+0x1786/0x1f70 net/mac80211/iface.c:746 ieee80211_stop+0x1b1/0x240 net/mac80211/iface.c:828 __dev_close_many+0x344/0x6b0 net/core/dev.c:1756 __dev_close net/core/dev.c:1768 [inline] __dev_change_flags+0x2be/0x680 net/core/dev.c:9733 netif_change_flags+0x88/0x1a0 net/core/dev.c:9798 dev_change_flags+0x130/0x260 net/core/dev_api.c:68 dev_ioctl+0x7b4/0x1150 net/core/dev_ioctl.c:842 sock_do_ioctl+0x22c/0x300 net/socket.c:1274 sock_ioctl+0x576/0x790 net/socket.c:1381 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5875f8f749 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc52c16018 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f58761e5fa0 RCX: 00007f5875f8f749 RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 RBP: 00007f5876013f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f58761e5fa0 R14: 00007f58761e5fa0 R15: 0000000000000003 The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880753b5d40 pfn:0x753b4 head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff888026064282 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f8(unknown) raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 raw: ffff8880753b5d40 0000000000000000 00000000f8000000 ffff888026064282 head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 head: ffff8880753b5d40 0000000000000000 00000000f8000000 ffff888026064282 head: 00fff00000000002 ffffea0001d4ed01 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 6029, tgid 6029 (syz.0.17), ts 111996806551, free_ts 111081173010 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x234/0x290 mm/page_alloc.c:1846 prep_new_page mm/page_alloc.c:1854 [inline] get_page_from_freelist+0x2365/0x2440 mm/page_alloc.c:3915 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:5210 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2486 ___kmalloc_large_node+0x4e/0x150 mm/slub.c:5593 __kmalloc_large_node_noprof+0x18/0x90 mm/slub.c:5624 __do_kmalloc_node mm/slub.c:5640 [inline] __kvmalloc_node_noprof+0x6e/0x920 mm/slub.c:7129 alloc_netdev_mqs+0xa8/0x1200 net/core/dev.c:12011 ieee80211_if_add+0x45c/0x1370 net/mac80211/iface.c:2227 ieee80211_add_iface+0xb5/0x5a0 net/mac80211/cfg.c:217 rdev_add_virtual_intf net/wireless/rdev-ops.h:50 [inline] _nl80211_new_interface net/wireless/nl80211.c:4706 [inline] nl80211_new_interface+0x883/0x1130 net/wireless/nl80211.c:4764 genl_family_rcv_msg_doit+0x215/0x300 net/netlink/genetlink.c:1115 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0x60e/0x790 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344 page last free pid 6006 tgid 6006 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] __free_frozen_pages+0xbc8/0xd30 mm/page_alloc.c:2943 __slab_free+0x21b/0x2a0 mm/slub.c:5999 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:349 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4948 [inline] slab_alloc_node mm/slub.c:5258 [inline] kmem_cache_alloc_noprof+0x37d/0x710 mm/slub.c:5265 vm_area_dup+0x2b/0x680 mm/vma_init.c:123 __split_vma+0x1a9/0xa00 mm/vma.c:508 split_vma mm/vma.c:591 [inline] vma_modify+0x952/0x1a70 mm/vma.c:1634 vma_modify_flags+0x208/0x2e0 mm/vma.c:1654 mprotect_fixup+0x43c/0xa30 mm/mprotect.c:756 do_mprotect_pkey+0x8c5/0xcd0 mm/mprotect.c:930 __do_sys_mprotect mm/mprotect.c:951 [inline] __se_sys_mprotect mm/mprotect.c:948 [inline] __x64_sys_mprotect+0x80/0x90 mm/mprotect.c:948 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Memory state around the buggy address: ffff8880753b7c80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe ffff8880753b7d00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe >ffff8880753b7d80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe ^ ffff8880753b7e00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe ffff8880753b7e80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe ================================================================== final repro crashed as (corrupted=false): mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode ================================================================== BUG: KASAN: slab-out-of-bounds in ieee80211_add_virtual_monitor+0xa42/0xce0 net/mac80211/iface.c:1255 Read of size 1 at addr ffff8880753b7d90 by task syz.0.17/6029 CPU: 0 UID: 0 PID: 6029 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report+0x118/0x150 mm/kasan/report.c:595 ieee80211_add_virtual_monitor+0xa42/0xce0 net/mac80211/iface.c:1255 ieee80211_do_stop+0x1786/0x1f70 net/mac80211/iface.c:746 ieee80211_stop+0x1b1/0x240 net/mac80211/iface.c:828 __dev_close_many+0x344/0x6b0 net/core/dev.c:1756 __dev_close net/core/dev.c:1768 [inline] __dev_change_flags+0x2be/0x680 net/core/dev.c:9733 netif_change_flags+0x88/0x1a0 net/core/dev.c:9798 dev_change_flags+0x130/0x260 net/core/dev_api.c:68 dev_ioctl+0x7b4/0x1150 net/core/dev_ioctl.c:842 sock_do_ioctl+0x22c/0x300 net/socket.c:1274 sock_ioctl+0x576/0x790 net/socket.c:1381 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5875f8f749 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffc52c16018 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f58761e5fa0 RCX: 00007f5875f8f749 RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 RBP: 00007f5876013f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f58761e5fa0 R14: 00007f58761e5fa0 R15: 0000000000000003 The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880753b5d40 pfn:0x753b4 head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 memcg:ffff888026064282 flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) page_type: f8(unknown) raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 raw: ffff8880753b5d40 0000000000000000 00000000f8000000 ffff888026064282 head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 head: ffff8880753b5d40 0000000000000000 00000000f8000000 ffff888026064282 head: 00fff00000000002 ffffea0001d4ed01 00000000ffffffff 00000000ffffffff head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 6029, tgid 6029 (syz.0.17), ts 111996806551, free_ts 111081173010 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x234/0x290 mm/page_alloc.c:1846 prep_new_page mm/page_alloc.c:1854 [inline] get_page_from_freelist+0x2365/0x2440 mm/page_alloc.c:3915 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:5210 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2486 ___kmalloc_large_node+0x4e/0x150 mm/slub.c:5593 __kmalloc_large_node_noprof+0x18/0x90 mm/slub.c:5624 __do_kmalloc_node mm/slub.c:5640 [inline] __kvmalloc_node_noprof+0x6e/0x920 mm/slub.c:7129 alloc_netdev_mqs+0xa8/0x1200 net/core/dev.c:12011 ieee80211_if_add+0x45c/0x1370 net/mac80211/iface.c:2227 ieee80211_add_iface+0xb5/0x5a0 net/mac80211/cfg.c:217 rdev_add_virtual_intf net/wireless/rdev-ops.h:50 [inline] _nl80211_new_interface net/wireless/nl80211.c:4706 [inline] nl80211_new_interface+0x883/0x1130 net/wireless/nl80211.c:4764 genl_family_rcv_msg_doit+0x215/0x300 net/netlink/genetlink.c:1115 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0x60e/0x790 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x208/0x470 net/netlink/af_netlink.c:2550 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline] netlink_unicast+0x82f/0x9e0 net/netlink/af_netlink.c:1344 page last free pid 6006 tgid 6006 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1395 [inline] __free_frozen_pages+0xbc8/0xd30 mm/page_alloc.c:2943 __slab_free+0x21b/0x2a0 mm/slub.c:5999 qlink_free mm/kasan/quarantine.c:163 [inline] qlist_free_all+0x97/0x100 mm/kasan/quarantine.c:179 kasan_quarantine_reduce+0x148/0x160 mm/kasan/quarantine.c:286 __kasan_slab_alloc+0x22/0x80 mm/kasan/common.c:349 kasan_slab_alloc include/linux/kasan.h:252 [inline] slab_post_alloc_hook mm/slub.c:4948 [inline] slab_alloc_node mm/slub.c:5258 [inline] kmem_cache_alloc_noprof+0x37d/0x710 mm/slub.c:5265 vm_area_dup+0x2b/0x680 mm/vma_init.c:123 __split_vma+0x1a9/0xa00 mm/vma.c:508 split_vma mm/vma.c:591 [inline] vma_modify+0x952/0x1a70 mm/vma.c:1634 vma_modify_flags+0x208/0x2e0 mm/vma.c:1654 mprotect_fixup+0x43c/0xa30 mm/mprotect.c:756 do_mprotect_pkey+0x8c5/0xcd0 mm/mprotect.c:930 __do_sys_mprotect mm/mprotect.c:951 [inline] __se_sys_mprotect mm/mprotect.c:948 [inline] __x64_sys_mprotect+0x80/0x90 mm/mprotect.c:948 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Memory state around the buggy address: ffff8880753b7c80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe ffff8880753b7d00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe >ffff8880753b7d80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe ^ ffff8880753b7e00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe ffff8880753b7e80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe ==================================================================