Warning: Permanently added '[localhost]:44318' (ECDSA) to the list of known hosts. 2025/07/01 10:55:53 fuzzer started 2025/07/01 10:55:53 dialing manager at localhost:37637 syzkaller login: [ 51.049765] cgroup: Unknown subsys name 'net' [ 51.121446] cgroup: Unknown subsys name 'cpuset' [ 51.142079] cgroup: Unknown subsys name 'rlimit' 2025/07/01 10:56:05 syscalls: 200 2025/07/01 10:56:05 code coverage: enabled 2025/07/01 10:56:05 comparison tracing: enabled 2025/07/01 10:56:05 extra coverage: enabled 2025/07/01 10:56:05 setuid sandbox: enabled 2025/07/01 10:56:05 namespace sandbox: enabled 2025/07/01 10:56:05 Android sandbox: enabled 2025/07/01 10:56:05 fault injection: enabled 2025/07/01 10:56:05 leak checking: enabled 2025/07/01 10:56:05 net packet injection: enabled 2025/07/01 10:56:05 net device setup: enabled 2025/07/01 10:56:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/01 10:56:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/01 10:56:05 USB emulation: enabled 2025/07/01 10:56:05 hci packet injection: enabled 2025/07/01 10:56:05 wifi device emulation: enabled 2025/07/01 10:56:05 802.15.4 emulation: enabled 2025/07/01 10:56:05 fetching corpus: 0, signal 0/0 (executing program) 2025/07/01 10:56:06 starting 8 fuzzer processes 10:56:06 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x540, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x1, 0xfffff000}, {0xf49, 0x1}, 0x548}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0x9, 0x6}, {0xff, 0x8}, 0x8}) r1 = socket$inet(0x2, 0x6, 0xffffe000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000180)=0x80, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RCLUNK(r4, &(0x7f0000000340)={0x7, 0x79, 0x1}, 0x7) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000380)={0x68b}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x20, 0x9}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x100) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x1a, 0x5, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xec}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000005}, 0x8) r9 = syz_open_dev$loop(&(0x7f0000000700), 0x0, 0x20400) ioctl$LOOP_GET_STATUS64(r9, 0x4c05, &(0x7f0000000740)) ioctl$LOOP_SET_FD(r9, 0x4c00, r0) 10:56:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "a0f961f777394a22d1b17dfc4eff1a9f"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "cb402de3370f33eabed589fcf614a67b"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40044001}, 0x44) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x83322e5f9d55d883}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8393}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x11, 0x70bd28, 0x3, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0xc5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1aa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc4, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x840}, 0x20014010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048d0}, 0x0) r7 = socket(0x1, 0x4, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 10:56:06 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x14, 0xa}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0x80, 0x9, 0x8, 0x22, @mcast2, @mcast1, 0x8000, 0x8, 0x6, 0x268}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x4, 0x5, 0x91, 0x40, 0x52, @mcast2, @mcast1, 0x10, 0x7800, 0x6, 0x5}}) r3 = syz_open_dev$sg(&(0x7f0000000580), 0x3, 0x6000) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f00000005c0)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000600)=0x8, 0x4) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000640)={'\x00', 0x80, 0x1, 0x6}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4, 0x953, 0x0, 0x3, 0x14, 0x0, "8865fb6875d0ffe11eb9c5d056bc1e6c051b274291d2a2e97f88bf936ccc7c99070b2c4ccb27ca58ca0373b1d1c1e6d409226005260ba328fa0facbdf8c443e6", "7d23864f8597c5230386a3b69b6b709de824b5b70895776f5b0a3d2c7a60d8b4dbb9b0bd2589bd0b152c26271e97170611e3edad610041cd9c80558a9de3408e", "9ee8efa1cf74f9307c5ccfc2ab135087aa96f954f46036dc14c7c9cb189382f9", [0x1e, 0x10000]}) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000007c0)={0x0, {}, 0x0, {}, 0x10000, 0x5, 0x1a, 0x0, "2077263c634e5c5a2bec0ffc2fe9e6d73584bb4fa06b562e96c8a6d2843f43f14f375bed9dd273ec322bddfa59ad50f4e1fc6d30668db214008fa704a3ebbedb", "5f64bca1e087588c4f4cc3991d42655322fa475f53a5f98a64179c65b2dd7628", [0x0, 0x7]}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='net/ip_vs_stats_percpu\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'ip6gre0\x00', r2, 0x29, 0x40, 0x2, 0x80, 0x4c, @private1, @mcast1, 0x8097, 0x1, 0x101, 0x39800}}) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000980)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000009c0), 0x200, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f0000000a00)={0x10}) read$ptp(r5, &(0x7f0000000d40)=""/216, 0xd8) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000e80)) [ 63.621929] audit: type=1400 audit(1751367366.881:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:56:06 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x771, 0x7}, {}, 0x3, 0x1}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a5d80, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)={0x8}) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='statm\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000480)={{0x600, 0x5}, {0x3, 0x7}, 0x800, 0x1}) r3 = gettid() wait4(r3, &(0x7f00000004c0), 0x2, &(0x7f0000000500)) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f00000005c0)={0x3}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x2, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x60, 0x8000, 0x2, 0x11b93143}}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000b40)={0x6}) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000e80)={0x10}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001400)={'ip6gre0\x00', &(0x7f0000001380)={'ip6_vti0\x00', r5, 0x2f, 0x8, 0x1b, 0x0, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000014c0)={'syztnl0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x2f, 0x11, 0x5, 0xa7, 0x10, @mcast1, @mcast2, 0x8, 0x700, 0x8, 0x665}}) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000001500)={'\x00', 0x7, 0x1, 0x7fffffff}) 10:56:06 executing program 4: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x0, 0xb}, 0x18) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x80, 0x80800) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200800, 0x46) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xf3, 0x240201) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/cgroup\x00') ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000e002}, 0x20000040) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x206740, 0x8, 0x8}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r1, 0x4, 0x0, 0xfd, 0x7, 0x28, @mcast1, @remote, 0x40, 0x7, 0x80000001, 0xfffff800}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x32}]}, 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x24000095) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8d0) r5 = socket(0x22, 0x800, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip6tnl0\x00', r4, 0x4, 0x1f, 0x40, 0x0, 0x19, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x80, 0x80000000, 0x6}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000149}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81a7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000011}, 0x40090) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x75c9da5859cd20f1) r9 = syz_open_procfs(0x0, &(0x7f0000000a40)='net\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400448c0}, 0x4004) 10:56:06 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x8005) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x0, 0x42, @local, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8000, 0x875f, 0x3, 0x71cb}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x29000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4004) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x48400, 0x8, 0x10}, 0x18) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/uts\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008074) fspick(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x2c}}, 0x4000040) r3 = syz_open_procfs(0x0, &(0x7f0000000740)='oom_adj\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x0, 0x200, 0x4, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc084}, 0x0) getegid() r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000880)='ns/time\x00') sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x13}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20042010) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r1, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x44000) getrusage(0xffffffffffffffff, &(0x7f0000000c00)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000cc0)={0x0, 0x0, 0xec}, &(0x7f0000000d00)={'enc=', 'raw', ' hash=', {'sha512-arm64\x00'}}, &(0x7f0000000d80), &(0x7f0000000dc0)="4f0456dd7e92c0e7ecf7e75445ae00680acc32139f2f17d482d6747af9835c8f15775368ab1f60cbfcccc3016c49c82e950535fd02489a91c53a39239b50d32649fdceab0fd3aca1443c4fee7c595187c4b498a5f38a339bac255b10d750c8186a0641756ac730d8bcc34fb823c34dd6e1dbd7661be6563158a0d8c09c2c510731145df052a8efb11ae8e9929c1b72edd04fcd1508ee30c2da7d5a397dc6e7e1ee73ceeb2c7d9b88ee84a27707456026b5c1958c6fc8ac2d559354c4df0fba1369b541f7eddea50bce58b6c23a6e2e0f6800fb30617a2d175cda5c9f060d379e1193d2b55827e2cbcd65adf2") 10:56:06 executing program 6: r0 = socket(0xf, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20004890) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r1, 0x4, 0x0, 0x0, 0x6, 0x41, @mcast1, @empty, 0x7800, 0x80, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x2f, 0xfb, 0x5, 0x1, 0x36, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00', 0x700, 0x10, 0x0, 0x80}}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0xfff, 0x2, 0x4, 0x95c2, 0x100000001, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008897}, 0x40) memfd_create(&(0x7f0000000580)='ip6tnl0\x00', 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x706b5bc62461680}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r5, 0x500, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xd85, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x8}, @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8100) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={0x0, @l2tp={0x2, 0x0, @remote}, @l2tp={0x2, 0x0, @local, 0x4}, @isdn={0x22, 0x5, 0x80, 0x2, 0x2}, 0x7ff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)='veth0_to_batadv\x00', 0x1ff, 0x2, 0x6}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc2}, &(0x7f00000008c0)={0x0, "ba17f327e2b94ceefaf3f0d7bf4522e82eab36a4716b7b471dce2d0e61c7338453151f2a531254c08eaa8b06228b593b2d24cb86302b665f2d0e30c6b000a3ee", 0x35}, 0x48, 0xfffffffffffffff9) keyctl$link(0x8, r8, 0xfffffffffffffffa) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) 10:56:06 executing program 7: r0 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ff7cce77fadc8642806b6e048d5db08687a0531c660f3f7f26629c74758cfcd565c884fc7b65fbb7a98d32400b730e14613bd6ca4ec072081d0ce54958d431d598cb669025dff905eeaa091a2f19e0ea1e144b9706f764794cc05974dca74a17464c948e8a58654ab9221b39361de101e00e9d6701ae8b6ee7de5a2224485b8520e255aed61a6663ecf1550b3c96cbcef99b802e57340b7f19759642da27f5f7d8f186d159513d694a1057432330439854d458343d6b42862ff40b5f2eb2a9d11656b65ef7d0bcb91b86bb57b07b4ae9d2290038", 0xd4, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r0, 0xbf, 0x66}, &(0x7f00000001c0)={'enc=', 'raw', ' hash=', {'sha224-asm\x00'}}, &(0x7f0000000240)="e8e7e43116f5a103a33785049c3598debb773313287e28bb42b8928bec0674ad9f2f0426baadb5bbc705b748da7f5efe4c48b0ae3ba057e0d4ede630bfd125de01eda16e27da7a19b89cac93a9b62c040367be6bd183ff5e0b9e8927dc17d0b73b32b3da65170e429971adde8c9de0c66faf732f80e42731ff230486eee0a4e2b5274b412686bc5f811a92384cac1d13638e21c94231687722f159ca5bc82ce0ea5b6869b340d0ad310d17ec3a2f5ec368f8501c277469c7cf3b1370fb3dac", &(0x7f0000000300)=""/102) r1 = request_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='sha224-asm\x00', 0xfffffffffffffffe) keyctl$reject(0x13, r1, 0x8000, 0x3, r0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000440)) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000480)) keyctl$unlink(0x9, r1, r0) r2 = add_key(&(0x7f00000004c0)='pkcs7_test\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="535556f0d0ad6d6f0f0a25897050c7d141964bb724237da4ba24daf79c1d285c8b42a4c4eb5e5b06967a49", 0x2b, r0) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$negate(0xd, r2, 0x80, r3) r4 = request_key(&(0x7f0000000600)='logon\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='\\/', 0xfffffffffffffffe) r5 = add_key(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)="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", 0x1000, r2) keyctl$reject(0x13, r4, 0xe57, 0x6, r5) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000019c0)={0x24, &(0x7f0000001740)={0x20, 0x10, 0xbb, {0xbb, 0x23, "dfa86b26f61d965cb3086a162a3e0667626093aa7323e7c8aa0cb08af76d504ea554dfb96cedbf98bb6ab5fb04da4124db61cf1e2a9e3a525c77f02c57c31072dd42a22072ca6e6f30db28898ba381ec44cd6435cbdaa5ad45ee96034cc70ba4563da429edea5ddc412532b077b33b61ae3c5b0ec94623f631e070dc0731b7c28fff2355cd8ea6aa6a79782b8aa9e8288558dd156c758047d0971e2489cb99738de298cbe7af77cfc5f1df2a812aed20ba1bf985eca289180f"}}, &(0x7f0000001840)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "d8514f5b55dab457520a77ef35cd83e815eb88e024e00c9ea1f6c22ede36c478d37ab4d620ad33e2775c61c46c0044c074c8dcebcd361defb652957dcd5c8ae7cf87e201b983a42e2e70065541f5412dfa6352ddff4053f070a155e6c2c66a4ff9492d231419212c27a2b2ba422c8bccfd374d5626eef82a7ab6098ee891f2ba8de4e7d279cb5e725b025ef855268da2e37e094ec0249d8accff677e6ad13ab64afecbdc2710748dec9c579bbc31df4d61e1762bb509fa897a53bbfee3cc6cb35783479809125768e614b4649039285d77f40a51e3cf2a1538621f16607e6459194249dfaabba26b9f3bf2ab28c888edbabab3"}}, &(0x7f0000001940)={0x0, 0x22, 0x1a, {[@main=@item_012={0x2, 0x0, 0xb, "19c5"}, @global=@item_4={0x3, 0x1, 0x5, "6acd4328"}, @global=@item_4={0x3, 0x1, 0x0, "84e9bf50"}, @main=@item_012={0x1, 0x0, 0xb, "f3"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xc, "daed585d"}, @local=@item_4={0x3, 0x2, 0x2, "13b54017"}]}}, &(0x7f0000001980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0x11, 0x1, {0x22, 0xf6e}}}}, &(0x7f0000001c40)={0x2c, &(0x7f0000001a00)={0x40, 0xe, 0xd9, "df9b47527a481124049e4c12ee93ee9b91df773c6743cf1cf183c8f2815fadda1e4242b65a57fa7b885b631e23667657e801544548e0bfc3277475b64233e78008d294950f411eac5e5e879b345c5696a80826b49e309b073656e421f6ba2236be70fae7a6add733e416b734b091bb428ca491e8fd38cf5437ac7156999984693d479feb21e6455e10ad1576964818e42989af7590939110f8575cf15fe318dba6aaff73f854275aa9a3e436330da1bc4a3d1f3000890addcd8b9b527765fa216714f035a0a8bb574c036aa86da538df11b0628899d2aee50b"}, &(0x7f0000001b00)={0x0, 0xa, 0x1, 0xcf}, &(0x7f0000001b40)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001b80)={0x20, 0x1, 0x6a, "07b122c4f8f3e66f62e79ac742053c34e2ea6d8aedf9a63b55011101c86a9edd542d2937bdd20bcb4dc3c6fa254c7ff565ef505ffddfbbfcdc0bac07bfbae5e138b24258eb9fcd9e29dedd7d42de084c52d67cac2af69573434412a127b4c8a7b2d43c66cb99ffe4098a"}, &(0x7f0000001c00)={0x20, 0x3, 0x1, 0x20}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000001c80)='pkcs7_test\x00', &(0x7f0000001cc0)) r6 = add_key$keyring(&(0x7f0000001d00), &(0x7f0000001d40)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$describe(0x6, r6, &(0x7f0000001d80)=""/166, 0xa6) keyctl$reject(0x13, r6, 0x0, 0xd0900000000000, r4) add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0, r5) request_key(&(0x7f0000001ec0)='id_resolver\x00', &(0x7f0000001f00)={'syz', 0x3}, &(0x7f0000001f40)='\x00', 0x0) [ 64.963112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.969156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.973391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.975337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.977541] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.980575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.982427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.983322] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.985794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.987431] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.989080] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.991595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.995610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.997084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.999439] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.001383] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.005846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.017983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.029859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.037443] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.042244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.044274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.047842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.049302] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.052189] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.052287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.053276] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.058917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.068142] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.070904] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.075296] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.080191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.086157] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.089104] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.091947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.102201] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.104322] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.108818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.127034] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.129547] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.056439] Bluetooth: hci2: command tx timeout [ 67.120309] Bluetooth: hci3: command tx timeout [ 67.120577] Bluetooth: hci0: command tx timeout [ 67.120890] Bluetooth: hci1: command tx timeout [ 67.183811] Bluetooth: hci5: command tx timeout [ 67.185170] Bluetooth: hci6: command tx timeout [ 67.185714] Bluetooth: hci7: command tx timeout [ 67.186076] Bluetooth: hci4: command tx timeout [ 69.103802] Bluetooth: hci2: command tx timeout [ 69.167754] Bluetooth: hci0: command tx timeout [ 69.168187] Bluetooth: hci3: command tx timeout [ 69.168567] Bluetooth: hci1: command tx timeout [ 69.231849] Bluetooth: hci7: command tx timeout [ 69.231880] Bluetooth: hci6: command tx timeout [ 69.232282] Bluetooth: hci4: command tx timeout [ 69.233083] Bluetooth: hci5: command tx timeout [ 71.151792] Bluetooth: hci2: command tx timeout [ 71.216859] Bluetooth: hci3: command tx timeout [ 71.216896] Bluetooth: hci0: command tx timeout [ 71.217314] Bluetooth: hci1: command tx timeout [ 71.279807] Bluetooth: hci5: command tx timeout [ 71.279839] Bluetooth: hci6: command tx timeout [ 71.280251] Bluetooth: hci7: command tx timeout [ 71.281073] Bluetooth: hci4: command tx timeout [ 73.200480] Bluetooth: hci2: command tx timeout [ 73.263800] Bluetooth: hci0: command tx timeout [ 73.263884] Bluetooth: hci3: command tx timeout [ 73.264566] Bluetooth: hci1: command tx timeout [ 73.327821] Bluetooth: hci4: command tx timeout [ 73.328243] Bluetooth: hci7: command tx timeout [ 73.328616] Bluetooth: hci6: command tx timeout [ 73.329277] Bluetooth: hci5: command tx timeout [ 101.468265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.469695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.634328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.635251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.839841] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 10:56:46 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x771, 0x7}, {}, 0x3, 0x1}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a5d80, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)={0x8}) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='statm\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000480)={{0x600, 0x5}, {0x3, 0x7}, 0x800, 0x1}) r3 = gettid() wait4(r3, &(0x7f00000004c0), 0x2, &(0x7f0000000500)) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f00000005c0)={0x3}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x2, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x60, 0x8000, 0x2, 0x11b93143}}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000b40)={0x6}) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000e80)={0x10}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001400)={'ip6gre0\x00', &(0x7f0000001380)={'ip6_vti0\x00', r5, 0x2f, 0x8, 0x1b, 0x0, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000014c0)={'syztnl0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x2f, 0x11, 0x5, 0xa7, 0x10, @mcast1, @mcast2, 0x8, 0x700, 0x8, 0x665}}) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000001500)={'\x00', 0x7, 0x1, 0x7fffffff}) [ 103.533504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.534146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.718558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.719699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:56:46 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x771, 0x7}, {}, 0x3, 0x1}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a5d80, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)={0x8}) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='statm\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000480)={{0x600, 0x5}, {0x3, 0x7}, 0x800, 0x1}) r3 = gettid() wait4(r3, &(0x7f00000004c0), 0x2, &(0x7f0000000500)) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f00000005c0)={0x3}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x2, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x60, 0x8000, 0x2, 0x11b93143}}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000b40)={0x6}) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000e80)={0x10}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001400)={'ip6gre0\x00', &(0x7f0000001380)={'ip6_vti0\x00', r5, 0x2f, 0x8, 0x1b, 0x0, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000014c0)={'syztnl0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x2f, 0x11, 0x5, 0xa7, 0x10, @mcast1, @mcast2, 0x8, 0x700, 0x8, 0x665}}) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000001500)={'\x00', 0x7, 0x1, 0x7fffffff}) 10:56:47 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x771, 0x7}, {}, 0x3, 0x1}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a5d80, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)={0x8}) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='statm\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000480)={{0x600, 0x5}, {0x3, 0x7}, 0x800, 0x1}) r3 = gettid() wait4(r3, &(0x7f00000004c0), 0x2, &(0x7f0000000500)) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f00000005c0)={0x3}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x2, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x60, 0x8000, 0x2, 0x11b93143}}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000b40)={0x6}) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000e80)={0x10}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001400)={'ip6gre0\x00', &(0x7f0000001380)={'ip6_vti0\x00', r5, 0x2f, 0x8, 0x1b, 0x0, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000014c0)={'syztnl0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x2f, 0x11, 0x5, 0xa7, 0x10, @mcast1, @mcast2, 0x8, 0x700, 0x8, 0x665}}) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000001500)={'\x00', 0x7, 0x1, 0x7fffffff}) [ 104.168273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.168928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.386097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.386766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:56:47 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x771, 0x7}, {}, 0x3, 0x1}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a5d80, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)={0x8}) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='statm\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000480)={{0x600, 0x5}, {0x3, 0x7}, 0x800, 0x1}) r3 = gettid() wait4(r3, &(0x7f00000004c0), 0x2, &(0x7f0000000500)) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f00000005c0)={0x3}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x2, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x60, 0x8000, 0x2, 0x11b93143}}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000b40)={0x6}) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000e80)={0x10}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001400)={'ip6gre0\x00', &(0x7f0000001380)={'ip6_vti0\x00', r5, 0x2f, 0x8, 0x1b, 0x0, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000014c0)={'syztnl0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x2f, 0x11, 0x5, 0xa7, 0x10, @mcast1, @mcast2, 0x8, 0x700, 0x8, 0x665}}) [ 104.610038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.611021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.865256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.866204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:56:48 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x771, 0x7}, {}, 0x3, 0x1}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a5d80, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)={0x8}) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='statm\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000480)={{0x600, 0x5}, {0x3, 0x7}, 0x800, 0x1}) r3 = gettid() wait4(r3, &(0x7f00000004c0), 0x2, &(0x7f0000000500)) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f00000005c0)={0x3}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x2, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x60, 0x8000, 0x2, 0x11b93143}}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000b40)={0x6}) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000e80)={0x10}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001400)={'ip6gre0\x00', &(0x7f0000001380)={'ip6_vti0\x00', r5, 0x2f, 0x8, 0x1b, 0x0, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0xfff}}) [ 105.124054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.124638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:56:48 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x771, 0x7}, {}, 0x3, 0x1}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a5d80, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)={0x8}) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='statm\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000480)={{0x600, 0x5}, {0x3, 0x7}, 0x800, 0x1}) r3 = gettid() wait4(r3, &(0x7f00000004c0), 0x2, &(0x7f0000000500)) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f00000005c0)={0x3}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x2, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x60, 0x8000, 0x2, 0x11b93143}}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000b40)={0x6}) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000e80)={0x10}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001340)) [ 105.266535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.267181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:56:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "a0f961f777394a22d1b17dfc4eff1a9f"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "cb402de3370f33eabed589fcf614a67b"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40044001}, 0x44) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x83322e5f9d55d883}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8393}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x11, 0x70bd28, 0x3, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0xc5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1aa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc4, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x840}, 0x20014010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048d0}, 0x0) r7 = socket(0x1, 0x4, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 10:56:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "a0f961f777394a22d1b17dfc4eff1a9f"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "cb402de3370f33eabed589fcf614a67b"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40044001}, 0x44) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x83322e5f9d55d883}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8393}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x11, 0x70bd28, 0x3, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0xc5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1aa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc4, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x840}, 0x20014010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048d0}, 0x0) r7 = socket(0x1, 0x4, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) [ 106.848292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.849091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.903502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.904604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.358515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.359483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.393338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.393897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.731112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.732197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.758152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.758876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.947386] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 10:57:09 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x540, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x1, 0xfffff000}, {0xf49, 0x1}, 0x548}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0x9, 0x6}, {0xff, 0x8}, 0x8}) r1 = socket$inet(0x2, 0x6, 0xffffe000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000180)=0x80, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RCLUNK(r4, &(0x7f0000000340)={0x7, 0x79, 0x1}, 0x7) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000380)={0x68b}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x20, 0x9}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x100) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x1a, 0x5, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xec}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000005}, 0x8) r9 = syz_open_dev$loop(&(0x7f0000000700), 0x0, 0x20400) ioctl$LOOP_GET_STATUS64(r9, 0x4c05, &(0x7f0000000740)) ioctl$LOOP_SET_FD(r9, 0x4c00, r0) 10:57:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "a0f961f777394a22d1b17dfc4eff1a9f"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "cb402de3370f33eabed589fcf614a67b"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40044001}, 0x44) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x83322e5f9d55d883}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8393}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x11, 0x70bd28, 0x3, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0xc5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1aa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc4, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x840}, 0x20014010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048d0}, 0x0) r7 = socket(0x1, 0x4, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) 10:57:09 executing program 2: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x14, 0xa}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x2f, 0x80, 0x9, 0x8, 0x22, @mcast2, @mcast1, 0x8000, 0x8, 0x6, 0x268}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x4, 0x5, 0x91, 0x40, 0x52, @mcast2, @mcast1, 0x10, 0x7800, 0x6, 0x5}}) r3 = syz_open_dev$sg(&(0x7f0000000580), 0x3, 0x6000) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f00000005c0)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000600)=0x8, 0x4) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000640)={'\x00', 0x80, 0x1, 0x6}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4, 0x953, 0x0, 0x3, 0x14, 0x0, "8865fb6875d0ffe11eb9c5d056bc1e6c051b274291d2a2e97f88bf936ccc7c99070b2c4ccb27ca58ca0373b1d1c1e6d409226005260ba328fa0facbdf8c443e6", "7d23864f8597c5230386a3b69b6b709de824b5b70895776f5b0a3d2c7a60d8b4dbb9b0bd2589bd0b152c26271e97170611e3edad610041cd9c80558a9de3408e", "9ee8efa1cf74f9307c5ccfc2ab135087aa96f954f46036dc14c7c9cb189382f9", [0x1e, 0x10000]}) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000007c0)={0x0, {}, 0x0, {}, 0x10000, 0x5, 0x1a, 0x0, "2077263c634e5c5a2bec0ffc2fe9e6d73584bb4fa06b562e96c8a6d2843f43f14f375bed9dd273ec322bddfa59ad50f4e1fc6d30668db214008fa704a3ebbedb", "5f64bca1e087588c4f4cc3991d42655322fa475f53a5f98a64179c65b2dd7628", [0x0, 0x7]}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='net/ip_vs_stats_percpu\x00') ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f00000008c0)={'ip6gre0\x00', r2, 0x29, 0x40, 0x2, 0x80, 0x4c, @private1, @mcast1, 0x8097, 0x1, 0x101, 0x39800}}) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000980)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000009c0), 0x200, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f0000000a00)={0x10}) read$ptp(r5, &(0x7f0000000d40)=""/216, 0xd8) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000e80)) 10:57:09 executing program 3: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x771, 0x7}, {}, 0x3, 0x1}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1a5d80, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000000c0)={0x8}) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='statm\x00') ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000480)={{0x600, 0x5}, {0x3, 0x7}, 0x800, 0x1}) r3 = gettid() wait4(r3, &(0x7f00000004c0), 0x2, &(0x7f0000000500)) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f00000005c0)={0x3}) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x2, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x60, 0x8000, 0x2, 0x11b93143}}) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000b40)={0x6}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001340)) 10:57:09 executing program 7: r0 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="ff7cce77fadc8642806b6e048d5db08687a0531c660f3f7f26629c74758cfcd565c884fc7b65fbb7a98d32400b730e14613bd6ca4ec072081d0ce54958d431d598cb669025dff905eeaa091a2f19e0ea1e144b9706f764794cc05974dca74a17464c948e8a58654ab9221b39361de101e00e9d6701ae8b6ee7de5a2224485b8520e255aed61a6663ecf1550b3c96cbcef99b802e57340b7f19759642da27f5f7d8f186d159513d694a1057432330439854d458343d6b42862ff40b5f2eb2a9d11656b65ef7d0bcb91b86bb57b07b4ae9d2290038", 0xd4, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r0, 0xbf, 0x66}, &(0x7f00000001c0)={'enc=', 'raw', ' hash=', {'sha224-asm\x00'}}, &(0x7f0000000240)="e8e7e43116f5a103a33785049c3598debb773313287e28bb42b8928bec0674ad9f2f0426baadb5bbc705b748da7f5efe4c48b0ae3ba057e0d4ede630bfd125de01eda16e27da7a19b89cac93a9b62c040367be6bd183ff5e0b9e8927dc17d0b73b32b3da65170e429971adde8c9de0c66faf732f80e42731ff230486eee0a4e2b5274b412686bc5f811a92384cac1d13638e21c94231687722f159ca5bc82ce0ea5b6869b340d0ad310d17ec3a2f5ec368f8501c277469c7cf3b1370fb3dac", &(0x7f0000000300)=""/102) r1 = request_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000400)='sha224-asm\x00', 0xfffffffffffffffe) keyctl$reject(0x13, r1, 0x8000, 0x3, r0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000440)) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000480)) keyctl$unlink(0x9, r1, r0) r2 = add_key(&(0x7f00000004c0)='pkcs7_test\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="535556f0d0ad6d6f0f0a25897050c7d141964bb724237da4ba24daf79c1d285c8b42a4c4eb5e5b06967a49", 0x2b, r0) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$negate(0xd, r2, 0x80, r3) r4 = request_key(&(0x7f0000000600)='logon\x00', &(0x7f0000000640)={'syz', 0x2}, &(0x7f0000000680)='\\/', 0xfffffffffffffffe) r5 = add_key(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)="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", 0x1000, r2) keyctl$reject(0x13, r4, 0xe57, 0x6, r5) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000019c0)={0x24, &(0x7f0000001740)={0x20, 0x10, 0xbb, {0xbb, 0x23, "dfa86b26f61d965cb3086a162a3e0667626093aa7323e7c8aa0cb08af76d504ea554dfb96cedbf98bb6ab5fb04da4124db61cf1e2a9e3a525c77f02c57c31072dd42a22072ca6e6f30db28898ba381ec44cd6435cbdaa5ad45ee96034cc70ba4563da429edea5ddc412532b077b33b61ae3c5b0ec94623f631e070dc0731b7c28fff2355cd8ea6aa6a79782b8aa9e8288558dd156c758047d0971e2489cb99738de298cbe7af77cfc5f1df2a812aed20ba1bf985eca289180f"}}, &(0x7f0000001840)={0x0, 0x3, 0xf5, @string={0xf5, 0x3, "d8514f5b55dab457520a77ef35cd83e815eb88e024e00c9ea1f6c22ede36c478d37ab4d620ad33e2775c61c46c0044c074c8dcebcd361defb652957dcd5c8ae7cf87e201b983a42e2e70065541f5412dfa6352ddff4053f070a155e6c2c66a4ff9492d231419212c27a2b2ba422c8bccfd374d5626eef82a7ab6098ee891f2ba8de4e7d279cb5e725b025ef855268da2e37e094ec0249d8accff677e6ad13ab64afecbdc2710748dec9c579bbc31df4d61e1762bb509fa897a53bbfee3cc6cb35783479809125768e614b4649039285d77f40a51e3cf2a1538621f16607e6459194249dfaabba26b9f3bf2ab28c888edbabab3"}}, &(0x7f0000001940)={0x0, 0x22, 0x1a, {[@main=@item_012={0x2, 0x0, 0xb, "19c5"}, @global=@item_4={0x3, 0x1, 0x5, "6acd4328"}, @global=@item_4={0x3, 0x1, 0x0, "84e9bf50"}, @main=@item_012={0x1, 0x0, 0xb, "f3"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xc, "daed585d"}, @local=@item_4={0x3, 0x2, 0x2, "13b54017"}]}}, &(0x7f0000001980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0x11, 0x1, {0x22, 0xf6e}}}}, &(0x7f0000001c40)={0x2c, &(0x7f0000001a00)={0x40, 0xe, 0xd9, "df9b47527a481124049e4c12ee93ee9b91df773c6743cf1cf183c8f2815fadda1e4242b65a57fa7b885b631e23667657e801544548e0bfc3277475b64233e78008d294950f411eac5e5e879b345c5696a80826b49e309b073656e421f6ba2236be70fae7a6add733e416b734b091bb428ca491e8fd38cf5437ac7156999984693d479feb21e6455e10ad1576964818e42989af7590939110f8575cf15fe318dba6aaff73f854275aa9a3e436330da1bc4a3d1f3000890addcd8b9b527765fa216714f035a0a8bb574c036aa86da538df11b0628899d2aee50b"}, &(0x7f0000001b00)={0x0, 0xa, 0x1, 0xcf}, &(0x7f0000001b40)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000001b80)={0x20, 0x1, 0x6a, "07b122c4f8f3e66f62e79ac742053c34e2ea6d8aedf9a63b55011101c86a9edd542d2937bdd20bcb4dc3c6fa254c7ff565ef505ffddfbbfcdc0bac07bfbae5e138b24258eb9fcd9e29dedd7d42de084c52d67cac2af69573434412a127b4c8a7b2d43c66cb99ffe4098a"}, &(0x7f0000001c00)={0x20, 0x3, 0x1, 0x20}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000001c80)='pkcs7_test\x00', &(0x7f0000001cc0)) r6 = add_key$keyring(&(0x7f0000001d00), &(0x7f0000001d40)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$describe(0x6, r6, &(0x7f0000001d80)=""/166, 0xa6) keyctl$reject(0x13, r6, 0x0, 0xd0900000000000, r4) add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0, r5) request_key(&(0x7f0000001ec0)='id_resolver\x00', &(0x7f0000001f00)={'syz', 0x3}, &(0x7f0000001f40)='\x00', 0x0) 10:57:09 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x8005) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x0, 0x42, @local, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8000, 0x875f, 0x3, 0x71cb}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x29000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4004) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x48400, 0x8, 0x10}, 0x18) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/uts\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r1, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008074) fspick(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x2c}}, 0x4000040) r3 = syz_open_procfs(0x0, &(0x7f0000000740)='oom_adj\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x0, 0x200, 0x4, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc084}, 0x0) getegid() r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000880)='ns/time\x00') sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x13}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20042010) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r1, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x44000) getrusage(0xffffffffffffffff, &(0x7f0000000c00)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000cc0)={0x0, 0x0, 0xec}, &(0x7f0000000d00)={'enc=', 'raw', ' hash=', {'sha512-arm64\x00'}}, &(0x7f0000000d80), &(0x7f0000000dc0)="4f0456dd7e92c0e7ecf7e75445ae00680acc32139f2f17d482d6747af9835c8f15775368ab1f60cbfcccc3016c49c82e950535fd02489a91c53a39239b50d32649fdceab0fd3aca1443c4fee7c595187c4b498a5f38a339bac255b10d750c8186a0641756ac730d8bcc34fb823c34dd6e1dbd7661be6563158a0d8c09c2c510731145df052a8efb11ae8e9929c1b72edd04fcd1508ee30c2da7d5a397dc6e7e1ee73ceeb2c7d9b88ee84a27707456026b5c1958c6fc8ac2d559354c4df0fba1369b541f7eddea50bce58b6c23a6e2e0f6800fb30617a2d175cda5c9f060d379e1193d2b55827e2cbcd65adf2") 10:57:09 executing program 6: r0 = socket(0xf, 0x3, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20004890) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r1, 0x4, 0x0, 0x0, 0x6, 0x41, @mcast1, @empty, 0x7800, 0x80, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', r2, 0x2f, 0xfb, 0x5, 0x1, 0x36, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00', 0x700, 0x10, 0x0, 0x80}}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0xfff, 0x2, 0x4, 0x95c2, 0x100000001, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008897}, 0x40) memfd_create(&(0x7f0000000580)='ip6tnl0\x00', 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x706b5bc62461680}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r5, 0x500, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xd85, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x8}, @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8100) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={0x0, @l2tp={0x2, 0x0, @remote}, @l2tp={0x2, 0x0, @local, 0x4}, @isdn={0x22, 0x5, 0x80, 0x2, 0x2}, 0x7ff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)='veth0_to_batadv\x00', 0x1ff, 0x2, 0x6}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc2}, &(0x7f00000008c0)={0x0, "ba17f327e2b94ceefaf3f0d7bf4522e82eab36a4716b7b471dce2d0e61c7338453151f2a531254c08eaa8b06228b593b2d24cb86302b665f2d0e30c6b000a3ee", 0x35}, 0x48, 0xfffffffffffffff9) keyctl$link(0x8, r8, 0xfffffffffffffffa) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) 10:57:09 executing program 4: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x0, 0xb}, 0x18) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x80, 0x80800) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200800, 0x46) r2 = syz_open_dev$loop(&(0x7f0000000180), 0xf3, 0x240201) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/cgroup\x00') ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000e002}, 0x20000040) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x206740, 0x8, 0x8}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r1, 0x4, 0x0, 0xfd, 0x7, 0x28, @mcast1, @remote, 0x40, 0x7, 0x80000001, 0xfffff800}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x32}]}, 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x24000095) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8d0) r5 = socket(0x22, 0x800, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip6tnl0\x00', r4, 0x4, 0x1f, 0x40, 0x0, 0x19, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x80, 0x80000000, 0x6}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000149}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81a7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000011}, 0x40090) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x75c9da5859cd20f1) r9 = syz_open_procfs(0x0, &(0x7f0000000a40)='net\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r9, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400448c0}, 0x4004) [ 136.231781] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88801a618500 (size 184): comm "syz-executor.1", pid 282, jiffies 4294793444 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc e14d17ca): kmem_cache_alloc_noprof+0x399/0x470 prepare_creds+0x2c/0x7e0 copy_creds+0x7a/0xa20 copy_process+0xf5a/0x73e0 kernel_clone+0xea/0x820 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff8880345b4000 (size 128): comm "syz-executor.1", pid 282, jiffies 4294793444 hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 ................ backtrace (crc 3586e13): __kmalloc_noprof+0x393/0x4c0 security_prepare_creds+0x101/0x160 prepare_creds+0x579/0x7e0 copy_creds+0x7a/0xa20 copy_process+0xf5a/0x73e0 kernel_clone+0xea/0x820 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff8880321ae000 (size 360): comm "syz-executor.1", pid 4055, jiffies 4294793506 hex dump (first 32 bytes): 00 00 00 00 ad 4e ad de ff ff ff ff 10 00 60 06 .....N........`. ff ff ff ff ff ff ff ff a0 be 6d 88 ff ff ff ff ..........m..... backtrace (crc 7a56c9c8): kmem_cache_alloc_noprof+0x399/0x470 alloc_empty_file+0x58/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_sys_openat2+0x104/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff8880344df940 (size 16): comm "syz-executor.1", pid 4055, jiffies 4294793506 hex dump (first 16 bytes): 01 00 00 00 01 00 00 00 36 00 00 00 01 00 00 00 ........6....... backtrace (crc ced3e061): kmem_cache_alloc_noprof+0x399/0x470 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 path_openat+0xe0/0x2880 do_filp_open+0x1e8/0x450 do_sys_openat2+0x104/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88801ae68700 (size 32): comm "syz-executor.1", pid 4055, jiffies 4294793506 hex dump (first 32 bytes): 00 60 07 0a 80 88 ff ff 00 e0 1a 32 80 88 ff ff .`.........2.... 00 80 39 1a 80 88 ff ff 00 00 00 00 00 00 00 00 ..9............. backtrace (crc caba7600): __kmalloc_cache_noprof+0x3b8/0x4a0 posix_clock_open+0xc9/0x290 chrdev_open+0x234/0x690 do_dentry_open+0x71c/0x1420 vfs_open+0x82/0x3f0 path_openat+0x1c3f/0x2880 do_filp_open+0x1e8/0x450 do_sys_openat2+0x104/0x1b0 __x64_sys_openat+0x142/0x200 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: leak checking failed VM DIAGNOSIS: 10:57:25 Registers: info registers vcpu 0 RAX=00000000000605a1 RBX=0000000000000000 RCX=ffffffff84b83987 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c6b04 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff86438650 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b826be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff392e9d68 CR3=000000000d7f5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934383120657a697328203030353831 XMM03=3220646970202c22312e726f74756365 XMM04=3030202020200a2e2e2e2e2e2e2e2e2e XMM05=30203030203030203030203030203030 XMM06=3030203030203130202020200a3a2973 XMM07=6d75642078656820200a343434333937 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000006cbf9 RBX=0000000000000001 RCX=ffffffff84b83987 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c6b04 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86438650 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b826be RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c005c1a020 CR3=000000000df96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=cddd0a8900301f3d4abca10d3336e4a3 XMM14=4c57bba8a035f0146721fa6577529b8b XMM15=0be5aed2998862b011df38a56da86a03