last executing test programs: 3m10.935631038s ago: executing program 0 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000004740)={0x2c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) 3m10.888414003s ago: executing program 0 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000002c0)={0x20, r1, 0x209, 0x70bd27, 0x25dfdbff, {{0x3a, 0x0, 0x500}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x4) 3m10.841289535s ago: executing program 0 (id=1717): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) listen(r0, 0x10) shutdown(r0, 0x2) 3m10.773246228s ago: executing program 0 (id=1718): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 3m10.729305114s ago: executing program 0 (id=1719): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/loop0/queue/rotational\x00', 0x40402, 0x0) write(r0, &(0x7f0000000500)="355611", 0x3) 3m10.411682874s ago: executing program 0 (id=1720): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x2, 0xffff, 0x8, 0x80000001}, 0x14) 3m10.176590198s ago: executing program 32 (id=1720): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x2, 0xffff, 0x8, 0x80000001}, 0x14) 2m49.546150015s ago: executing program 2 (id=1934): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)={r1}, &(0x7f0000000500)=0x8) 2m49.435474071s ago: executing program 2 (id=1935): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x4}}, 0x10, 0x0}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000003c000280380003800c000180080001"], 0x68}}, 0xa040) 2m49.290337693s ago: executing program 2 (id=1937): rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0xfffffffffffffff8]}, 0x8) 2m48.330096137s ago: executing program 2 (id=1952): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) 2m48.164513472s ago: executing program 2 (id=1954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e159644d53"}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x50) 2m47.552482017s ago: executing program 2 (id=1962): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000000)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c", 0x81}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000080)) 2m47.226226132s ago: executing program 33 (id=1962): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000000)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c", 0x81}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000080)) 2m46.380989492s ago: executing program 4 (id=1973): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4820, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x145d, 0x2, 0x2, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b0, 0x80, 0x0, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x1000, 0x3, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa61, 0x800, 0x2, 0x202ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x6, 0x2, 0x821d}}], 0x4, &(0x7f00000002c0)={0x2e, 0x6, 0x300, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 2m45.953983335s ago: executing program 4 (id=1975): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0xfffffffffffffe99, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="b00e") 2m44.024019216s ago: executing program 4 (id=1982): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/current_tracer\x00', 0x1, 0x0) write$apparmor_current(r0, 0x0, 0x0) 2m43.792716327s ago: executing program 4 (id=1984): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) 2m43.6282124s ago: executing program 4 (id=1986): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x10000, 0x8, 0x1, 'queue0\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000180)={0x0, 0x18, 0x1, {0x6, 0x8}, 0xc, 0x9}) 2m43.101465569s ago: executing program 4 (id=1990): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1e9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}}, &(0x7f0000000480)=0x84) 2m42.387076074s ago: executing program 34 (id=1990): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1e9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}}, &(0x7f0000000480)=0x84) 1m43.490377815s ago: executing program 3 (id=2591): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000080)=ANY=[@ANYBLOB="6b0ee0b3d41b1b", @ANYRES8=r0]) 1m41.767760558s ago: executing program 3 (id=2618): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000480)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0xdf8, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) 1m41.703708793s ago: executing program 3 (id=2619): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x0, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.579532605s ago: executing program 3 (id=2621): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) 1m41.443113052s ago: executing program 3 (id=2623): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x50080, 0x173) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 1m41.36554786s ago: executing program 3 (id=2624): r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x20, 0x0, 0xf0}}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x2, 0xffffffffffffffff}) 1m26.256882585s ago: executing program 35 (id=2624): r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x20, 0x0, 0xf0}}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x2, 0xffffffffffffffff}) 35.859593813s ago: executing program 7 (id=3224): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x40804, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 35.688593674s ago: executing program 7 (id=3226): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.load\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="040800766572736928b52f", 0xb) 35.52937331s ago: executing program 7 (id=3229): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 35.283755089s ago: executing program 7 (id=3233): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0xc) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) 35.143990485s ago: executing program 7 (id=3236): openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setresuid(0x0, 0xee01, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) 34.824112594s ago: executing program 7 (id=3240): mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/ioports\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 34.338272181s ago: executing program 36 (id=3240): mkdir(&(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc_mnt/ioports\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 3.950697203s ago: executing program 1 (id=3610): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x4, 0x5, 0x3011, 0x5, 0x8, 0x1, 0x1, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 3.791039087s ago: executing program 1 (id=3613): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r2, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x0) 3.660505079s ago: executing program 1 (id=3615): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000140)=0x3) 3.369029317s ago: executing program 6 (id=3619): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000700)='\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pread64(r1, &(0x7f0000001600)=""/4096, 0x1000, 0xfffffff7) 2.222956993s ago: executing program 8 (id=3629): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2.007022846s ago: executing program 1 (id=3631): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2400, 0x4) sendto(r0, &(0x7f0000000100)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x80, 0x0, 0x0) 1.88913296s ago: executing program 6 (id=3633): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0x8001, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.857949886s ago: executing program 1 (id=3634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x20, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) 1.708534848s ago: executing program 1 (id=3636): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) 1.650736831s ago: executing program 6 (id=3637): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x82, &(0x7f0000000180)={r1, 0x2}, 0x8) 1.493956911s ago: executing program 6 (id=3639): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1ff, 0x80000001, 0x6}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d80)={'syz1\x00', {0x8000, 0x10, 0x0, 0x80}, 0x48, [0x8, 0xcf, 0xfffffff9, 0x3, 0x81, 0x0, 0x7, 0x7, 0x7, 0x7fff, 0x0, 0x8, 0x1b31, 0x92ce, 0x1, 0x4, 0x3, 0x1, 0xf, 0x1, 0x5c, 0x800, 0x8, 0x4000, 0x80000001, 0x7, 0x401, 0xe, 0x6, 0x4, 0x2, 0x4, 0x40, 0x5, 0x1, 0x8, 0x7, 0x9a04, 0x0, 0xd, 0x5, 0x9, 0x7, 0x18f0, 0x3, 0x46, 0x8, 0x6, 0x81, 0x7, 0x2, 0xfffff000, 0x8, 0xee99, 0x1, 0x7, 0x225, 0x2, 0x7, 0x2, 0x4, 0xd, 0x6, 0x2], [0x0, 0xffffffc0, 0x1, 0xe32, 0x200, 0x401, 0x10, 0x6, 0x2, 0x8, 0x30, 0x355f, 0x400, 0x15, 0x0, 0x0, 0xfffffff9, 0x5, 0x101, 0x3, 0x80000001, 0x1, 0xc8, 0x7, 0x5, 0x2, 0x1, 0x7ff, 0x5, 0x4, 0x43, 0x4, 0x100, 0xd60, 0x3, 0x9, 0xe, 0xa, 0x6, 0x1, 0x78, 0x5, 0x2, 0x7, 0x8000, 0xa, 0x12d, 0x800, 0x9, 0x4, 0x100, 0x100, 0x2fa3, 0x5, 0x5, 0x400, 0x3, 0xc63, 0x0, 0x10, 0x9cee, 0x9, 0x258c, 0xffffff01], [0x8, 0x89, 0xffff9f54, 0x9, 0xfffffc01, 0x5, 0x1, 0x4, 0x1, 0x4, 0x2, 0x7, 0x4, 0xffffff01, 0xf6e9, 0x4, 0x8, 0x1, 0xbf, 0x1, 0x7, 0x0, 0x33, 0x6, 0x4, 0xa1bd, 0x1, 0x3, 0x4f, 0x4, 0x3f9, 0x7, 0x3, 0x6, 0x1, 0x0, 0xd12, 0xb39f, 0x8, 0xcbf7, 0xffffffff, 0x101, 0x4, 0x1, 0x1, 0x8, 0x1dd8, 0x2, 0x8, 0x3, 0x7fff, 0x8, 0xf98, 0x101, 0x2, 0x1, 0x3, 0x4, 0x81, 0x6, 0xfffffffc, 0x0, 0x80000001, 0x101], [0x3, 0x5, 0xfffffffc, 0x7fffffff, 0xffffffff, 0x5, 0x2, 0x1, 0x9, 0x400, 0x6, 0x4, 0x0, 0x7, 0x9, 0xfffffffe, 0x7, 0x9, 0xa24, 0xdbd5, 0x7, 0x708d, 0x1, 0x7, 0x5, 0x6, 0x3, 0xfff, 0x1, 0x5, 0x0, 0xff, 0x8, 0x5, 0x1, 0x7, 0x0, 0x0, 0x5, 0x2, 0xf8, 0x58c0b1d, 0x4, 0x2, 0x6, 0x5, 0x3, 0xd55, 0xffffffff, 0x3ff, 0x1, 0x2, 0x5, 0x6, 0x40, 0x3, 0x4, 0x3, 0x1, 0x20, 0x2, 0xffffffff, 0x0, 0x85]}, 0x45c) 1.439039329s ago: executing program 5 (id=3640): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) 1.321394988s ago: executing program 6 (id=3641): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1.30015417s ago: executing program 5 (id=3642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x94, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0xb3, 0x2, 0x1d, 0x1ff}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4010}, 0x20000014) 1.122751239s ago: executing program 5 (id=3643): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 989.981273ms ago: executing program 8 (id=3644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000009ff000000a684000008000300", @ANYRES32=r3, @ANYBLOB="0c00238005"], 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x40008c0) 879.883283ms ago: executing program 8 (id=3645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x3, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) 668.051145ms ago: executing program 8 (id=3646): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e010000") 550.322372ms ago: executing program 8 (id=3647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)) 367.298712ms ago: executing program 8 (id=3648): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 192.436719ms ago: executing program 5 (id=3649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f00000002c0)=[@increfs], 0x0, 0x0, 0x0}) 133.451313ms ago: executing program 5 (id=3650): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 66.547922ms ago: executing program 6 (id=3651): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) capset(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='p:myevent ./file0:0', 0x13) 0s ago: executing program 5 (id=3652): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, 'kq'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. [ 81.059772][ T5603] cgroup: Unknown subsys name 'net' [ 81.157160][ T5603] cgroup: Unknown subsys name 'cpuset' [ 81.165711][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.844908][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.401504][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.410348][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.419627][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.430026][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.430903][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.432442][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.436770][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.439394][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.441730][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.448501][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.452902][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.453607][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.454618][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.455330][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.461114][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.477136][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.477857][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.479123][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.479698][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.504785][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.274219][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.276324][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.276701][ T5617] bridge_slave_0: entered allmulticast mode [ 88.285961][ T5617] bridge_slave_0: entered promiscuous mode [ 88.328854][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.329130][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.330209][ T5617] bridge_slave_1: entered allmulticast mode [ 88.335328][ T5617] bridge_slave_1: entered promiscuous mode [ 88.437256][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.437490][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.438741][ T5615] bridge_slave_0: entered allmulticast mode [ 88.444446][ T5615] bridge_slave_0: entered promiscuous mode [ 88.450754][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.454933][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.456005][ T5616] bridge_slave_0: entered allmulticast mode [ 88.460538][ T5616] bridge_slave_0: entered promiscuous mode [ 88.479403][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.489341][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.522724][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.523064][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.523416][ T5615] bridge_slave_1: entered allmulticast mode [ 88.528248][ T5615] bridge_slave_1: entered promiscuous mode [ 88.537772][ T4932] Bluetooth: hci2: command tx timeout [ 88.561247][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.561370][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.561603][ T5616] bridge_slave_1: entered allmulticast mode [ 88.566933][ T5616] bridge_slave_1: entered promiscuous mode [ 88.612853][ T4932] Bluetooth: hci0: command tx timeout [ 88.613043][ T52] Bluetooth: hci1: command tx timeout [ 88.613371][ T52] Bluetooth: hci3: command tx timeout [ 88.652486][ T5617] team0: Port device team_slave_0 added [ 88.670966][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.691823][ T5617] team0: Port device team_slave_1 added [ 88.693717][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.694094][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.694425][ T5614] bridge_slave_0: entered allmulticast mode [ 88.698617][ T5614] bridge_slave_0: entered promiscuous mode [ 88.719559][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.744587][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.772006][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.772150][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.772292][ T5614] bridge_slave_1: entered allmulticast mode [ 88.787002][ T5614] bridge_slave_1: entered promiscuous mode [ 88.809890][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.829047][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.829222][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.829325][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.878987][ T5615] team0: Port device team_slave_0 added [ 88.894996][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.895692][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.895767][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.955628][ T5615] team0: Port device team_slave_1 added [ 88.971300][ T5616] team0: Port device team_slave_0 added [ 88.981939][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.005770][ T5616] team0: Port device team_slave_1 added [ 89.027011][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.029541][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.029583][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.029654][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.103282][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.103411][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.103511][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.109225][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.109267][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.109344][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.207528][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.207575][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.207617][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.251920][ T5617] hsr_slave_0: entered promiscuous mode [ 89.258183][ T5617] hsr_slave_1: entered promiscuous mode [ 89.265606][ T5614] team0: Port device team_slave_0 added [ 89.281274][ T5614] team0: Port device team_slave_1 added [ 89.308402][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.308452][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.308480][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.383107][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.383162][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.383190][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.463991][ T5615] hsr_slave_0: entered promiscuous mode [ 89.468204][ T5615] hsr_slave_1: entered promiscuous mode [ 89.470160][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 89.470411][ T5615] Cannot create hsr debugfs directory [ 89.520432][ T5616] hsr_slave_0: entered promiscuous mode [ 89.524206][ T5616] hsr_slave_1: entered promiscuous mode [ 89.527848][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 89.527909][ T5616] Cannot create hsr debugfs directory [ 89.645887][ T5614] hsr_slave_0: entered promiscuous mode [ 89.648656][ T5614] hsr_slave_1: entered promiscuous mode [ 89.651686][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 89.651754][ T5614] Cannot create hsr debugfs directory [ 90.010125][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.024938][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.031664][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.044758][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.047139][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.061912][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.071915][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.083148][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.156149][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.169326][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.176824][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.186375][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.199860][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.209612][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.234455][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.245562][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.313451][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.326267][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.342461][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.354722][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.358195][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.370730][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.387544][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.398098][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.507216][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.516400][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.519180][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.531749][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.548605][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.559792][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.571830][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.581744][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.614404][ T4932] Bluetooth: hci2: command tx timeout [ 90.640433][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.695089][ T4932] Bluetooth: hci0: command tx timeout [ 90.695117][ T52] Bluetooth: hci3: command tx timeout [ 90.695148][ T52] Bluetooth: hci1: command tx timeout [ 90.716869][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.736875][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.758712][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.759090][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.804705][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.804950][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.836500][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.858291][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.858377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.889734][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.909132][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.910762][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.973907][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.012148][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.012448][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.031776][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.058825][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.058914][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.121718][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.161829][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.162077][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.225614][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.225756][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.980002][ T25] cfg80211: failed to load regulatory.db [ 92.014416][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.187844][ T5617] veth0_vlan: entered promiscuous mode [ 92.224205][ T5617] veth1_vlan: entered promiscuous mode [ 92.254217][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.365160][ T5617] veth0_macvtap: entered promiscuous mode [ 92.404354][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.420818][ T5617] veth1_macvtap: entered promiscuous mode [ 92.456685][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.464847][ T5615] veth0_vlan: entered promiscuous mode [ 92.495837][ T5615] veth1_vlan: entered promiscuous mode [ 92.507862][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.517962][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.654849][ T5615] veth0_macvtap: entered promiscuous mode [ 92.664597][ T5616] veth0_vlan: entered promiscuous mode [ 92.668606][ T5614] veth0_vlan: entered promiscuous mode [ 92.686771][ T5615] veth1_macvtap: entered promiscuous mode [ 92.692910][ T4932] Bluetooth: hci2: command tx timeout [ 92.717499][ T5616] veth1_vlan: entered promiscuous mode [ 92.737588][ T5614] veth1_vlan: entered promiscuous mode [ 92.773861][ T4932] Bluetooth: hci0: command tx timeout [ 92.773885][ T52] Bluetooth: hci3: command tx timeout [ 92.784805][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.785131][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.785238][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.785343][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.786701][ T52] Bluetooth: hci1: command tx timeout [ 92.799410][ T2150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.799474][ T2150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.818906][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.882155][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.927233][ T2150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.927272][ T2150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.933961][ T38] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.937967][ T2150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.938199][ T2150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.938305][ T2150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.989636][ T5616] veth0_macvtap: entered promiscuous mode [ 93.008736][ T5616] veth1_macvtap: entered promiscuous mode [ 93.052615][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.071331][ T5614] veth0_macvtap: entered promiscuous mode [ 93.135184][ T5614] veth1_macvtap: entered promiscuous mode [ 93.163180][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.186563][ T5770] printk: console [ttyS0] disabled serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.