534] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:05 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2364.354515][ T8165] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2364.374504][T22921] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2364.447154][T10841] usb 6-1: USB disconnect, device number 18 [ 2364.524393][T10189] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2364.531650][T10189] ath9k_htc: Failed to initialize the device [ 2364.548940][ T1309] usb 3-1: ath9k_htc: USB layer deinitialized [ 2364.578343][ T35] usb 1-1: USB disconnect, device number 61 [ 2364.714471][ T9542] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2364.764531][ T882] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2364.774396][ T882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.782506][ T882] usb 2-1: Product: syz [ 2364.787254][ T882] usb 2-1: Manufacturer: syz [ 2364.791971][ T882] usb 2-1: SerialNumber: syz [ 2364.854925][ T882] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:05 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) [ 2364.924644][ T1309] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2364.932402][ T8165] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2364.943787][ T8165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.952074][ T8165] usb 5-1: Product: syz [ 2364.958224][ T8165] usb 5-1: Manufacturer: syz [ 2364.962825][ T8165] usb 5-1: SerialNumber: syz [ 2365.026568][ T8165] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:05 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2365.142039][T19998] usb 4-1: USB disconnect, device number 104 [ 2365.324539][ T9534] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2365.336626][ T9534] ath9k_htc: Failed to initialize the device [ 2365.342654][T10841] usb 6-1: ath9k_htc: USB layer deinitialized [ 2365.404519][T22921] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2365.414299][T22921] ath9k_htc: Failed to initialize the device [ 2365.422080][ T35] usb 1-1: ath9k_htc: USB layer deinitialized [ 2365.514453][ T882] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2365.525563][ T1309] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2365.536661][ T1309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.545437][ T1309] usb 3-1: Product: syz [ 2365.549667][ T1309] usb 3-1: Manufacturer: syz [ 2365.554852][ T1309] usb 3-1: SerialNumber: syz 02:00:06 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2365.604878][ T1309] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2365.684996][ T8165] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2365.705101][T10841] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2365.764401][ T35] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2365.814717][ T9542] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2365.823455][ T9542] ath9k_htc: Failed to initialize the device [ 2365.831847][T19998] usb 4-1: ath9k_htc: USB layer deinitialized [ 2365.955209][T10189] usb 2-1: USB disconnect, device number 116 [ 2366.105697][ T7] usb 5-1: USB disconnect, device number 120 [ 2366.184423][T19998] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2366.284831][ T35] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2366.284978][ T1309] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2366.296435][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.314718][T10841] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2366.320184][ T35] usb 1-1: Product: syz [ 2366.324608][T10841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.329169][ T35] usb 1-1: Manufacturer: syz [ 2366.338038][T10841] usb 6-1: Product: syz [ 2366.344949][ T35] usb 1-1: SerialNumber: syz [ 2366.346836][T10841] usb 6-1: Manufacturer: syz [ 2366.356849][T10841] usb 6-1: SerialNumber: syz [ 2366.395241][T10841] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2366.395247][ T35] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:07 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) 02:00:07 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2366.604529][ T882] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2366.613609][ T882] ath9k_htc: Failed to initialize the device [ 2366.621112][T10189] usb 2-1: ath9k_htc: USB layer deinitialized [ 2366.705247][T22921] usb 3-1: USB disconnect, device number 101 [ 2366.718970][T19998] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2366.729879][T19998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.741381][T19998] usb 4-1: Product: syz [ 2366.747055][T19998] usb 4-1: Manufacturer: syz [ 2366.752170][T19998] usb 4-1: SerialNumber: syz [ 2366.764502][ T8165] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2366.771963][ T8165] ath9k_htc: Failed to initialize the device [ 2366.789271][ T7] usb 5-1: ath9k_htc: USB layer deinitialized [ 2366.802543][T19998] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2366.954532][ T4813] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2366.984558][T10189] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2367.056024][T10841] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2367.154459][ T7] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2367.168053][ T35] usb 1-1: USB disconnect, device number 62 02:00:07 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2367.262194][ T3700] usb 6-1: USB disconnect, device number 19 [ 2367.324482][ T1309] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2367.334012][ T1309] ath9k_htc: Failed to initialize the device [ 2367.343467][T22921] usb 3-1: ath9k_htc: USB layer deinitialized [ 2367.384493][T19998] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2367.514993][T10189] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2367.529730][T10189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.540488][T10189] usb 2-1: Product: syz [ 2367.547526][T10189] usb 2-1: Manufacturer: syz [ 2367.554015][T10189] usb 2-1: SerialNumber: syz [ 2367.595033][T10189] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:08 executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2367.725025][T22921] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2367.754551][ T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2367.766085][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 02:00:08 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2367.777387][ T7] usb 5-1: Product: syz [ 2367.783964][ T7] usb 5-1: Manufacturer: syz [ 2367.791294][ T7] usb 5-1: SerialNumber: syz [ 2367.802448][ T882] usb 4-1: USB disconnect, device number 105 [ 2367.856600][ T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2368.044411][ T4813] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2368.053170][ T4813] ath9k_htc: Failed to initialize the device [ 2368.061573][ T35] usb 1-1: ath9k_htc: USB layer deinitialized [ 2368.124468][T10841] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2368.133118][T10841] ath9k_htc: Failed to initialize the device [ 2368.142318][ T3700] usb 6-1: ath9k_htc: USB layer deinitialized [ 2368.165027][T10189] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:08 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2368.304425][T22921] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2368.324391][T22921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2368.335425][T22921] usb 3-1: Product: syz [ 2368.340680][T22921] usb 3-1: Manufacturer: syz [ 2368.348273][T22921] usb 3-1: SerialNumber: syz [ 2368.406076][T22921] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2368.424433][ T35] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2368.444532][T19998] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2368.454027][T19998] ath9k_htc: Failed to initialize the device [ 2368.465669][ T882] usb 4-1: ath9k_htc: USB layer deinitialized [ 2368.514526][ T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2368.526057][ T3700] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2368.596562][T10185] usb 2-1: USB disconnect, device number 117 [ 2368.845044][ T882] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2368.944742][ T35] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2368.947219][ T1309] usb 5-1: USB disconnect, device number 121 [ 2368.965168][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2368.979150][ T35] usb 1-1: Product: syz [ 2368.984722][ T35] usb 1-1: Manufacturer: syz [ 2368.990178][ T35] usb 1-1: SerialNumber: syz [ 2369.034800][ T35] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:09 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2369.094522][T22921] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2369.174640][ T3700] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2369.186618][ T3700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.200630][ T3700] usb 6-1: Product: syz [ 2369.206530][ T3700] usb 6-1: Manufacturer: syz [ 2369.211845][ T3700] usb 6-1: SerialNumber: syz [ 2369.244495][T10189] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2369.253244][T10189] ath9k_htc: Failed to initialize the device [ 2369.261667][T10185] usb 2-1: ath9k_htc: USB layer deinitialized [ 2369.280001][ T3700] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2369.298473][ T4813] usb 3-1: USB disconnect, device number 102 02:00:10 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="040200ac"]) [ 2369.454929][ T882] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2369.466166][ T882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2369.477514][ T882] usb 4-1: Product: syz [ 2369.482541][ T882] usb 4-1: Manufacturer: syz [ 2369.489241][ T882] usb 4-1: SerialNumber: syz [ 2369.545128][ T882] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2369.569093][ T7] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2369.578689][ T7] ath9k_htc: Failed to initialize the device [ 2369.586208][ T1309] usb 5-1: ath9k_htc: USB layer deinitialized [ 2369.606067][ T35] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2369.624676][T10185] usb 2-1: new high-speed USB device number 118 using dummy_hcd 02:00:10 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2369.808844][T10841] usb 1-1: USB disconnect, device number 63 [ 2369.964703][ T1309] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2369.973957][ T3700] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2370.134932][T22921] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2370.143978][T22921] ath9k_htc: Failed to initialize the device [ 2370.152305][ T4813] usb 3-1: ath9k_htc: USB layer deinitialized [ 2370.159455][T10185] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2370.179556][T10185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.199151][T10185] usb 2-1: Product: syz [ 2370.204124][T10185] usb 2-1: Manufacturer: syz [ 2370.204501][ T882] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2370.213705][T10185] usb 2-1: SerialNumber: syz [ 2370.266298][T10185] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:11 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) [ 2370.385698][T10189] usb 6-1: USB disconnect, device number 20 [ 2370.524513][ T4813] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2370.604936][ T1309] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2370.616757][ T1309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.626606][ T865] usb 4-1: USB disconnect, device number 106 [ 2370.628285][ T1309] usb 5-1: Product: syz [ 2370.649066][ T1309] usb 5-1: Manufacturer: syz [ 2370.653792][ T1309] usb 5-1: SerialNumber: syz [ 2370.684474][ T35] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2370.693339][ T35] ath9k_htc: Failed to initialize the device [ 2370.704421][T10841] usb 1-1: ath9k_htc: USB layer deinitialized [ 2370.714376][ T1309] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2370.834874][T10185] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:11 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2371.004502][ T3700] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2371.013650][ T3700] ath9k_htc: Failed to initialize the device [ 2371.023785][T10189] usb 6-1: ath9k_htc: USB layer deinitialized [ 2371.065020][ T4813] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2371.075474][ T4813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.085761][ T4813] usb 3-1: Product: syz [ 2371.091215][ T4813] usb 3-1: Manufacturer: syz [ 2371.094513][T10841] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2371.096614][ T4813] usb 3-1: SerialNumber: syz 02:00:11 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2371.146864][ T4813] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2371.244621][ T882] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2371.254651][ T882] ath9k_htc: Failed to initialize the device [ 2371.262499][ T865] usb 4-1: ath9k_htc: USB layer deinitialized [ 2371.271317][ T9542] usb 2-1: USB disconnect, device number 118 [ 2371.374774][T10189] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2371.394903][ T1309] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2371.634642][ T865] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2371.674795][T10841] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2371.686215][T10841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.696839][T10841] usb 1-1: Product: syz [ 2371.702249][T10841] usb 1-1: Manufacturer: syz [ 2371.708481][T10841] usb 1-1: SerialNumber: syz [ 2371.714502][ T4813] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:12 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2371.781701][T10841] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2371.815718][ T35] usb 5-1: USB disconnect, device number 122 [ 2371.884538][T10185] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2371.894901][T10185] ath9k_htc: Failed to initialize the device [ 2371.903023][ T9542] usb 2-1: ath9k_htc: USB layer deinitialized [ 2371.908935][T10189] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2371.931015][T10189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.943943][T10189] usb 6-1: Product: syz [ 2371.950502][T10189] usb 6-1: Manufacturer: syz [ 2371.957529][T10189] usb 6-1: SerialNumber: syz [ 2371.969245][ T4548] usb 3-1: USB disconnect, device number 103 [ 2372.024842][T10189] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2372.164513][ T865] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2372.176437][ T865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.185168][ T865] usb 4-1: Product: syz [ 2372.191237][ T865] usb 4-1: Manufacturer: syz [ 2372.198086][ T865] usb 4-1: SerialNumber: syz [ 2372.235204][ T865] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:13 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="0402"]) [ 2372.284529][ T9542] usb 2-1: new high-speed USB device number 119 using dummy_hcd 02:00:13 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2372.414442][T10841] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2372.444582][ T1309] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2372.453182][ T1309] ath9k_htc: Failed to initialize the device [ 2372.463448][ T35] usb 5-1: ath9k_htc: USB layer deinitialized [ 2372.594551][T10189] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2372.619230][T19998] usb 1-1: USB disconnect, device number 64 [ 2372.764734][ T4813] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2372.773271][ T4813] ath9k_htc: Failed to initialize the device [ 2372.781524][ T4548] usb 3-1: ath9k_htc: USB layer deinitialized [ 2372.814464][ T865] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2372.824703][ T35] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2372.914511][ T9542] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2372.924427][ T9542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.932996][ T9542] usb 2-1: Product: syz [ 2372.937872][ T9542] usb 2-1: Manufacturer: syz [ 2372.942804][ T9542] usb 2-1: SerialNumber: syz [ 2372.997727][ T9542] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2373.019268][ T882] usb 6-1: USB disconnect, device number 21 02:00:13 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) [ 2373.146198][ T4548] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2373.225426][ T7] usb 4-1: USB disconnect, device number 107 [ 2373.344870][ T35] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2373.354583][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2373.363075][ T35] usb 5-1: Product: syz [ 2373.367739][ T35] usb 5-1: Manufacturer: syz [ 2373.372366][ T35] usb 5-1: SerialNumber: syz [ 2373.414867][ T35] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:14 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2373.494583][T10841] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2373.503203][T10841] ath9k_htc: Failed to initialize the device [ 2373.510120][T19998] usb 1-1: ath9k_htc: USB layer deinitialized [ 2373.644512][T10189] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2373.652269][T10189] ath9k_htc: Failed to initialize the device [ 2373.660503][ T882] usb 6-1: ath9k_htc: USB layer deinitialized [ 2373.684772][ T9542] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2373.696206][ T4548] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2373.706402][ T4548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2373.717693][ T4548] usb 3-1: Product: syz [ 2373.722260][ T4548] usb 3-1: Manufacturer: syz 02:00:14 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2373.740548][ T4548] usb 3-1: SerialNumber: syz [ 2373.785450][ T4548] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2373.884434][ T865] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2373.892074][T19998] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2373.902271][ T865] ath9k_htc: Failed to initialize the device [ 2373.909887][ T7] usb 4-1: ath9k_htc: USB layer deinitialized [ 2373.984515][ T35] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2374.044500][ T882] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2374.117785][ T8683] usb 2-1: USB disconnect, device number 119 [ 2374.264414][ T7] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2374.354557][ T4548] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2374.396655][ T1309] usb 5-1: USB disconnect, device number 123 [ 2374.424785][T19998] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2374.435107][T19998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.443753][T19998] usb 1-1: Product: syz [ 2374.450586][T19998] usb 1-1: Manufacturer: syz [ 2374.456123][T19998] usb 1-1: SerialNumber: syz [ 2374.495246][T19998] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2374.558654][T22921] usb 3-1: USB disconnect, device number 104 02:00:15 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2374.604505][ T882] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2374.615899][ T882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.635720][ T882] usb 6-1: Product: syz [ 2374.640199][ T882] usb 6-1: Manufacturer: syz [ 2374.650414][ T882] usb 6-1: SerialNumber: syz [ 2374.706329][ T882] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2374.774488][ T9542] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2374.783202][ T9542] ath9k_htc: Failed to initialize the device [ 2374.790489][ T8683] usb 2-1: ath9k_htc: USB layer deinitialized 02:00:15 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2374.844499][ T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2374.854227][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.863035][ T7] usb 4-1: Product: syz [ 2374.867953][ T7] usb 4-1: Manufacturer: syz [ 2374.873063][ T7] usb 4-1: SerialNumber: syz [ 2374.925365][ T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2375.004410][ T35] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2375.012088][ T35] ath9k_htc: Failed to initialize the device [ 2375.019370][ T1309] usb 5-1: ath9k_htc: USB layer deinitialized 02:00:15 executing program 2: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2375.064591][T19998] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2375.154495][ T8683] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2375.268593][ T865] usb 1-1: USB disconnect, device number 65 [ 2375.324732][ T882] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2375.394426][ T1309] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2375.404499][ T4548] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2375.413157][ T4548] ath9k_htc: Failed to initialize the device [ 2375.419856][T22921] usb 3-1: ath9k_htc: USB layer deinitialized 02:00:16 executing program 2: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2375.574697][ T7] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2375.676057][ T8683] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2375.685399][ T8683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2375.693532][ T8683] usb 2-1: Product: syz [ 2375.698180][ T8683] usb 2-1: Manufacturer: syz [ 2375.702842][ T8683] usb 2-1: SerialNumber: syz 02:00:16 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) [ 2375.746320][ T8683] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2375.746617][T22921] usb 6-1: USB disconnect, device number 22 [ 2375.944496][ T1309] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2375.955473][ T1309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2375.963899][ T1309] usb 5-1: Product: syz [ 2375.968258][ T1309] usb 5-1: Manufacturer: syz [ 2375.972850][ T1309] usb 5-1: SerialNumber: syz [ 2375.987081][ T4548] usb 4-1: USB disconnect, device number 108 [ 2376.025087][ T1309] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:16 executing program 2: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2376.124484][T19998] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2376.135801][T19998] ath9k_htc: Failed to initialize the device [ 2376.151523][ T865] usb 1-1: ath9k_htc: USB layer deinitialized 02:00:16 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2376.324426][ T8683] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2376.374451][ T882] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2376.381880][ T882] ath9k_htc: Failed to initialize the device [ 2376.388810][T22921] usb 6-1: ath9k_htc: USB layer deinitialized 02:00:17 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2376.504828][ T865] usb 1-1: new high-speed USB device number 66 using dummy_hcd 02:00:17 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2376.604414][ T7] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2376.611760][ T7] ath9k_htc: Failed to initialize the device [ 2376.618800][ T4548] usb 4-1: ath9k_htc: USB layer deinitialized [ 2376.694452][ T1309] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2376.765075][ T3700] usb 2-1: USB disconnect, device number 120 [ 2376.778599][T22921] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2376.974482][ T4548] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2377.024697][ T865] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2377.033971][ T865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.042272][ T865] usb 1-1: Product: syz [ 2377.046745][ T865] usb 1-1: Manufacturer: syz [ 2377.051468][ T865] usb 1-1: SerialNumber: syz [ 2377.094948][ T865] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2377.127548][ T865] usb 5-1: USB disconnect, device number 124 02:00:17 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) 02:00:17 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2377.364828][T22921] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2377.375239][T22921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.383669][T22921] usb 6-1: Product: syz [ 2377.388574][T22921] usb 6-1: Manufacturer: syz [ 2377.393279][T22921] usb 6-1: SerialNumber: syz [ 2377.404453][ T8683] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2377.412383][ T8683] ath9k_htc: Failed to initialize the device [ 2377.419600][ T3700] usb 2-1: ath9k_htc: USB layer deinitialized [ 2377.446016][T22921] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2377.494444][ T4548] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2377.504041][ T4548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.512820][ T4548] usb 4-1: Product: syz [ 2377.517355][ T4548] usb 4-1: Manufacturer: syz [ 2377.522268][ T4548] usb 4-1: SerialNumber: syz [ 2377.564699][ T4548] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:18 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) 02:00:18 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2377.664475][T19998] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2377.734638][ T1309] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2377.742224][ T1309] ath9k_htc: Failed to initialize the device [ 2377.749063][ T865] usb 5-1: ath9k_htc: USB layer deinitialized [ 2377.794437][ T3700] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2377.867315][T10189] usb 1-1: USB disconnect, device number 66 [ 2378.104394][ T865] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2378.124835][T22921] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2378.138078][ T4548] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:18 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) 02:00:19 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2378.364636][ T3700] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2378.373843][ T3700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.391908][ T3700] usb 2-1: Product: syz [ 2378.396772][ T3700] usb 2-1: Manufacturer: syz [ 2378.401408][ T3700] usb 2-1: SerialNumber: syz [ 2378.444784][ T3700] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2378.545018][ T9542] usb 6-1: USB disconnect, device number 23 [ 2378.545232][ T8683] usb 4-1: USB disconnect, device number 109 [ 2378.564990][ T882] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2378.624551][ T865] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2378.635907][ T865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.644119][ T865] usb 5-1: Product: syz [ 2378.648480][ T865] usb 5-1: Manufacturer: syz [ 2378.653224][ T865] usb 5-1: SerialNumber: syz [ 2378.684410][T19998] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2378.691477][T19998] ath9k_htc: Failed to initialize the device [ 2378.700092][ T865] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2378.708510][T10189] usb 1-1: ath9k_htc: USB layer deinitialized 02:00:19 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) 02:00:19 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="040200ac818e0d3d5b2b01a22ceacd45e8d9d5af65f04ff44ae7860fc3ca7d"]) [ 2379.074403][T10189] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2379.084425][ T3700] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2379.114897][ T882] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2379.123991][ T882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.132845][ T882] usb 3-1: Product: syz [ 2379.137707][ T882] usb 3-1: Manufacturer: syz [ 2379.142326][ T882] usb 3-1: SerialNumber: syz [ 2379.164443][ T4548] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2379.165852][T22921] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2379.172094][ T4548] ath9k_htc: Failed to initialize the device [ 2379.181376][T22921] ath9k_htc: Failed to initialize the device [ 2379.186454][ T8683] usb 4-1: ath9k_htc: USB layer deinitialized [ 2379.192838][ T882] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2379.205452][ T9542] usb 6-1: ath9k_htc: USB layer deinitialized [ 2379.284441][T10185] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2379.297881][ T4813] usb 2-1: USB disconnect, device number 121 [ 2379.564418][ T9542] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2379.564427][ T8683] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2379.595599][T10189] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2379.605000][T10189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.613320][T10189] usb 1-1: Product: syz [ 2379.620407][T10189] usb 1-1: Manufacturer: syz [ 2379.625349][T10189] usb 1-1: SerialNumber: syz [ 2379.664753][T10189] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2379.714971][ T1309] usb 5-1: USB disconnect, device number 125 02:00:20 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2379.844752][ T882] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2380.048379][ T35] usb 3-1: USB disconnect, device number 105 [ 2380.094446][ T8683] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2380.104264][ T8683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.114031][ T8683] usb 4-1: Product: syz [ 2380.118991][ T8683] usb 4-1: Manufacturer: syz [ 2380.123668][ T8683] usb 4-1: SerialNumber: syz [ 2380.134453][ T3700] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2380.141468][ T3700] ath9k_htc: Failed to initialize the device [ 2380.148017][ T9542] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2380.164416][ T9542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.167472][ T8683] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2380.172429][ T9542] usb 6-1: Product: syz [ 2380.172446][ T9542] usb 6-1: Manufacturer: syz [ 2380.172461][ T9542] usb 6-1: SerialNumber: syz 02:00:20 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2380.199935][ T4813] usb 2-1: ath9k_htc: USB layer deinitialized [ 2380.236790][T10189] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2380.245143][ T9542] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2380.364530][T10185] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2380.372069][T10185] ath9k_htc: Failed to initialize the device [ 2380.379559][ T1309] usb 5-1: ath9k_htc: USB layer deinitialized 02:00:21 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2380.574731][ T4813] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2380.646286][T19998] usb 1-1: USB disconnect, device number 67 [ 2380.734977][ T8683] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2380.764435][ T1309] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2380.895670][ T9542] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2380.924459][ T882] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2380.931487][ T882] ath9k_htc: Failed to initialize the device [ 2380.943097][ T35] usb 3-1: ath9k_htc: USB layer deinitialized [ 2381.094479][ T4813] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2381.104378][ T4813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.112624][ T4813] usb 2-1: Product: syz [ 2381.117721][ T4813] usb 2-1: Manufacturer: syz [ 2381.122391][ T4813] usb 2-1: SerialNumber: syz 02:00:21 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2381.156169][T22921] usb 4-1: USB disconnect, device number 110 [ 2381.166244][ T4813] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2381.294422][ T35] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2381.324441][T10189] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2381.328978][ T1309] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2381.331870][T10189] ath9k_htc: Failed to initialize the device [ 2381.343087][ T1309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.354072][T19998] usb 1-1: ath9k_htc: USB layer deinitialized [ 2381.357068][ T1309] usb 5-1: Product: syz [ 2381.366101][ T1309] usb 5-1: Manufacturer: syz [ 2381.374000][ T1309] usb 5-1: SerialNumber: syz [ 2381.388271][ T3700] usb 6-1: USB disconnect, device number 24 [ 2381.426571][ T1309] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:22 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2381.714414][T19998] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2381.764443][ T4813] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2381.804494][ T8683] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive 02:00:22 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2381.811669][ T8683] ath9k_htc: Failed to initialize the device [ 2381.818500][T22921] usb 4-1: ath9k_htc: USB layer deinitialized [ 2381.824598][ T35] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2381.824627][ T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.824646][ T35] usb 3-1: Product: syz [ 2381.824661][ T35] usb 3-1: Manufacturer: syz [ 2381.853236][ T35] usb 3-1: SerialNumber: syz [ 2381.894720][ T35] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2381.964394][ T9542] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2381.971663][ T9542] ath9k_htc: Failed to initialize the device [ 2381.981214][ T3700] usb 6-1: ath9k_htc: USB layer deinitialized [ 2381.982686][ T865] usb 2-1: USB disconnect, device number 122 [ 2382.074434][ T1309] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2382.194507][T22921] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2382.244412][T19998] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2382.254093][T19998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.263080][T19998] usb 1-1: Product: syz [ 2382.267677][T19998] usb 1-1: Manufacturer: syz [ 2382.272351][T19998] usb 1-1: SerialNumber: syz [ 2382.315383][T19998] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2382.364482][ T3700] usb 6-1: new high-speed USB device number 25 using dummy_hcd 02:00:23 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2382.474476][ T35] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2382.505534][T10841] usb 5-1: USB disconnect, device number 126 [ 2382.678644][ T882] usb 3-1: USB disconnect, device number 106 [ 2382.754454][T22921] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2382.763940][T22921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.774165][T22921] usb 4-1: Product: syz [ 2382.778870][T22921] usb 4-1: Manufacturer: syz [ 2382.783659][T22921] usb 4-1: SerialNumber: syz [ 2382.828255][T22921] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2382.848525][ T4813] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2382.855982][ T4813] ath9k_htc: Failed to initialize the device [ 2382.862226][ T865] usb 2-1: ath9k_htc: USB layer deinitialized [ 2382.895784][T19998] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:23 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2382.954455][ T3700] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2382.963821][ T3700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.972319][ T3700] usb 6-1: Product: syz [ 2382.976663][ T3700] usb 6-1: Manufacturer: syz [ 2382.981418][ T3700] usb 6-1: SerialNumber: syz [ 2383.036282][ T3700] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:23 executing program 2: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2383.174534][ T1309] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2383.181549][ T1309] ath9k_htc: Failed to initialize the device [ 2383.188341][T10841] usb 5-1: ath9k_htc: USB layer deinitialized [ 2383.224483][ T865] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2383.304896][ T8683] usb 1-1: USB disconnect, device number 68 [ 2383.445428][T22921] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2383.564431][ T35] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2383.571918][ T35] ath9k_htc: Failed to initialize the device [ 2383.574505][T10841] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2383.585730][ T882] usb 3-1: ath9k_htc: USB layer deinitialized [ 2383.664538][ T3700] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2383.746152][ T865] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2383.755298][ T865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2383.763459][ T865] usb 2-1: Product: syz [ 2383.769127][ T865] usb 2-1: Manufacturer: syz [ 2383.773814][ T865] usb 2-1: SerialNumber: syz 02:00:24 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2383.814994][ T865] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2383.866428][ T9542] usb 4-1: USB disconnect, device number 111 [ 2383.954464][ T882] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2383.964517][T19998] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2383.973148][T19998] ath9k_htc: Failed to initialize the device [ 2383.979685][ T8683] usb 1-1: ath9k_htc: USB layer deinitialized [ 2384.076419][ T7] usb 6-1: USB disconnect, device number 25 [ 2384.174456][T10841] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2384.185243][T10841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.193370][T10841] usb 5-1: Product: syz [ 2384.198769][T10841] usb 5-1: Manufacturer: syz [ 2384.203535][T10841] usb 5-1: SerialNumber: syz [ 2384.247685][T10841] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:25 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2384.334407][ T8683] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2384.384461][ T865] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2384.514496][ T882] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2384.524392][T22921] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2384.531316][T22921] ath9k_htc: Failed to initialize the device [ 2384.538008][ T882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.546154][ T9542] usb 4-1: ath9k_htc: USB layer deinitialized [ 2384.553776][ T882] usb 3-1: Product: syz 02:00:25 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="040200ac818e0d3d5b2b01a22ceacd45e8d9d5af65f04ff44ae7860fc3ca7d"]) [ 2384.561759][ T882] usb 3-1: Manufacturer: syz [ 2384.567003][ T882] usb 3-1: SerialNumber: syz [ 2384.600339][ T8165] usb 2-1: USB disconnect, device number 123 [ 2384.606748][ T882] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2384.685190][ T3700] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2384.692521][ T3700] ath9k_htc: Failed to initialize the device [ 2384.698842][ T7] usb 6-1: ath9k_htc: USB layer deinitialized [ 2384.854406][ T8683] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2384.864164][ T8683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.873213][ T8683] usb 1-1: Product: syz [ 2384.874454][T10841] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2384.878764][ T8683] usb 1-1: Manufacturer: syz [ 2384.891931][ T8683] usb 1-1: SerialNumber: syz [ 2384.924513][ T9542] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2384.937312][ T8683] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2385.064464][ T7] usb 6-1: new high-speed USB device number 26 using dummy_hcd 02:00:25 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2385.254519][ T1309] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2385.285218][ T9534] usb 5-1: USB disconnect, device number 127 [ 2385.404421][ T865] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2385.411322][ T865] ath9k_htc: Failed to initialize the device [ 2385.420392][ T8165] usb 2-1: ath9k_htc: USB layer deinitialized [ 2385.457338][T10185] usb 3-1: USB disconnect, device number 107 [ 2385.485138][ T9542] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2385.494291][ T9542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2385.502811][ T9542] usb 4-1: Product: syz [ 2385.505194][ T8683] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2385.507356][ T9542] usb 4-1: Manufacturer: syz [ 2385.520872][ T9542] usb 4-1: SerialNumber: syz [ 2385.574721][ T9542] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2385.614467][ T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 02:00:26 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2385.625202][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2385.633523][ T7] usb 6-1: Product: syz [ 2385.639219][ T7] usb 6-1: Manufacturer: syz [ 2385.644030][ T7] usb 6-1: SerialNumber: syz [ 2385.694780][ T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:26 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) 02:00:26 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) [ 2385.935030][ T865] usb 1-1: USB disconnect, device number 69 [ 2385.973278][T10841] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2385.989861][T10841] ath9k_htc: Failed to initialize the device [ 2385.997528][ T9534] usb 5-1: ath9k_htc: USB layer deinitialized 02:00:26 executing program 1: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2386.215798][ T9542] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2386.294486][ T1309] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2386.301563][ T1309] ath9k_htc: Failed to initialize the device [ 2386.308433][T10185] usb 3-1: ath9k_htc: USB layer deinitialized [ 2386.324478][ T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2386.384580][ T9534] usb 5-1: new high-speed USB device number 2 using dummy_hcd 02:00:27 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2386.524433][ T8683] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2386.531567][ T8683] ath9k_htc: Failed to initialize the device [ 2386.538032][ T865] usb 1-1: ath9k_htc: USB layer deinitialized [ 2386.635069][ T3700] usb 4-1: USB disconnect, device number 112 [ 2386.664394][T10185] usb 3-1: new high-speed USB device number 108 using dummy_hcd 02:00:27 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2386.745126][ T35] usb 6-1: USB disconnect, device number 26 [ 2386.894408][ T865] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2386.944433][ T9534] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2386.955639][ T9534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.964014][ T9534] usb 5-1: Product: syz [ 2386.969158][ T9534] usb 5-1: Manufacturer: syz [ 2386.973823][ T9534] usb 5-1: SerialNumber: syz [ 2387.016538][ T9534] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:27 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2387.184453][T10185] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2387.194143][T10185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.204425][T10185] usb 3-1: Product: syz [ 2387.208733][T10185] usb 3-1: Manufacturer: syz [ 2387.213464][T10185] usb 3-1: SerialNumber: syz 02:00:27 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) 02:00:27 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2387.244412][ T9542] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2387.251395][ T9542] ath9k_htc: Failed to initialize the device [ 2387.255758][T10185] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2387.264033][ T3700] usb 4-1: ath9k_htc: USB layer deinitialized [ 2387.404423][ T7] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2387.411640][ T7] ath9k_htc: Failed to initialize the device [ 2387.414425][ T865] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2387.427181][ T35] usb 6-1: ath9k_htc: USB layer deinitialized [ 2387.436465][ T865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.445815][ T865] usb 1-1: Product: syz [ 2387.450439][ T865] usb 1-1: Manufacturer: syz [ 2387.455397][ T865] usb 1-1: SerialNumber: syz [ 2387.494736][ T865] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2387.644767][ T3700] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2387.694501][T22921] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:28 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2387.784861][ T35] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2387.864447][T10185] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2388.064804][ T865] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2388.081521][T10841] usb 3-1: USB disconnect, device number 108 [ 2388.115159][ T1309] usb 5-1: USB disconnect, device number 2 [ 2388.204427][ T3700] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2388.213512][ T3700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.222995][ T3700] usb 4-1: Product: syz [ 2388.227644][ T3700] usb 4-1: Manufacturer: syz [ 2388.232230][ T3700] usb 4-1: SerialNumber: syz [ 2388.274721][ T3700] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2388.314471][ T35] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 02:00:29 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2388.323730][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.332336][ T35] usb 6-1: Product: syz [ 2388.336867][ T35] usb 6-1: Manufacturer: syz [ 2388.341521][ T35] usb 6-1: SerialNumber: syz [ 2388.385109][ T35] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2388.506317][ T4813] usb 1-1: USB disconnect, device number 70 02:00:29 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) 02:00:29 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2388.644419][ T8683] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2388.774711][T22921] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2388.781690][T22921] ath9k_htc: Failed to initialize the device [ 2388.789834][ T1309] usb 5-1: ath9k_htc: USB layer deinitialized [ 2388.924481][T10185] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2388.934210][T10185] ath9k_htc: Failed to initialize the device [ 2388.934427][ T3700] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2388.949316][T10841] usb 3-1: ath9k_htc: USB layer deinitialized [ 2388.954421][ T35] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:29 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2389.084412][ T865] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2389.091375][ T865] ath9k_htc: Failed to initialize the device [ 2389.100210][ T4813] usb 1-1: ath9k_htc: USB layer deinitialized [ 2389.154586][ T1309] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2389.174933][ T8683] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2389.184768][ T8683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2389.192930][ T8683] usb 2-1: Product: syz [ 2389.198022][ T8683] usb 2-1: Manufacturer: syz [ 2389.202852][ T8683] usb 2-1: SerialNumber: syz [ 2389.245690][ T8683] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2389.334518][T10841] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2389.355267][ T7] usb 4-1: USB disconnect, device number 113 [ 2389.379574][T10189] usb 6-1: USB disconnect, device number 27 [ 2389.454922][ T4813] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2389.785144][ T1309] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2389.795147][ T1309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2389.803293][ T1309] usb 5-1: Product: syz [ 2389.808906][ T1309] usb 5-1: Manufacturer: syz [ 2389.813589][ T1309] usb 5-1: SerialNumber: syz [ 2389.814540][ T8683] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:30 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="040200ac818e0d3d5b2b01a22ceacd45"]) 02:00:30 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2389.864716][ T1309] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2389.924897][T10841] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2389.933957][T10841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2389.950076][T10841] usb 3-1: Product: syz [ 2389.957063][T10841] usb 3-1: Manufacturer: syz [ 2389.961691][T10841] usb 3-1: SerialNumber: syz [ 2389.985134][ T4813] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2389.994465][ T4813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.002556][ T4813] usb 1-1: Product: syz [ 2390.007793][ T4813] usb 1-1: Manufacturer: syz [ 2390.012448][ T4813] usb 1-1: SerialNumber: syz [ 2390.014713][T10841] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2390.031633][ T8165] usb 2-1: USB disconnect, device number 124 [ 2390.044431][ T3700] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2390.044707][ T35] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2390.053313][ T3700] ath9k_htc: Failed to initialize the device [ 2390.060831][ T4813] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2390.079316][ T7] usb 4-1: ath9k_htc: USB layer deinitialized [ 2390.105042][ T35] ath9k_htc: Failed to initialize the device [ 2390.111079][T10189] usb 6-1: ath9k_htc: USB layer deinitialized [ 2390.455988][ T7] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2390.475236][T10189] usb 6-1: new high-speed USB device number 28 using dummy_hcd 02:00:31 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2390.514442][ T1309] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2390.664586][T10841] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2390.694448][ T4813] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2390.844438][ T8683] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2390.851656][ T8683] ath9k_htc: Failed to initialize the device [ 2390.859305][ T8165] usb 2-1: ath9k_htc: USB layer deinitialized [ 2390.872262][ T9542] usb 3-1: USB disconnect, device number 109 [ 2390.936207][T10185] usb 5-1: USB disconnect, device number 3 [ 2390.994531][T10189] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2391.003773][T10189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2391.012227][T10189] usb 6-1: Product: syz [ 2391.014878][ T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2391.017606][T10189] usb 6-1: Manufacturer: syz [ 2391.028217][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2391.031333][T10189] usb 6-1: SerialNumber: syz [ 2391.038678][ T7] usb 4-1: Product: syz [ 2391.047747][ T7] usb 4-1: Manufacturer: syz [ 2391.052777][ T7] usb 4-1: SerialNumber: syz [ 2391.085006][T10189] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2391.105027][ T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2391.115931][ T35] usb 1-1: USB disconnect, device number 71 [ 2391.274429][ T8165] usb 2-1: new high-speed USB device number 125 using dummy_hcd 02:00:32 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) 02:00:32 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) 02:00:32 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2391.574585][ T1309] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2391.581497][ T1309] ath9k_htc: Failed to initialize the device [ 2391.589366][T10185] usb 5-1: ath9k_htc: USB layer deinitialized [ 2391.654448][T10189] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2391.724424][ T4813] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2391.724463][T10841] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2391.732341][ T4813] ath9k_htc: Failed to initialize the device [ 2391.743326][T10841] ath9k_htc: Failed to initialize the device [ 2391.747368][ T35] usb 1-1: ath9k_htc: USB layer deinitialized [ 2391.750838][ T9542] usb 3-1: ath9k_htc: USB layer deinitialized [ 2391.775946][ T7] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2391.834484][ T8165] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2391.843799][ T8165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2391.852183][ T8165] usb 2-1: Product: syz [ 2391.860215][ T8165] usb 2-1: Manufacturer: syz [ 2391.865311][ T8165] usb 2-1: SerialNumber: syz [ 2391.904986][ T8165] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2391.944409][T10185] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2392.078148][ T3700] usb 6-1: USB disconnect, device number 28 [ 2392.114435][ T35] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2392.114526][ T9542] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2392.196160][ T4548] usb 4-1: USB disconnect, device number 114 [ 2392.464473][T10185] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2392.473707][T10185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.484264][T10185] usb 5-1: Product: syz [ 2392.489067][T10185] usb 5-1: Manufacturer: syz [ 2392.493866][T10185] usb 5-1: SerialNumber: syz 02:00:33 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2392.536011][T10185] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2392.564958][ T8165] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2392.634836][ T35] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2392.644090][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.652238][ T35] usb 1-1: Product: syz [ 2392.657101][ T35] usb 1-1: Manufacturer: syz [ 2392.661800][ T35] usb 1-1: SerialNumber: syz 02:00:33 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2392.684447][T10189] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2392.691335][T10189] ath9k_htc: Failed to initialize the device [ 2392.704777][ T35] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2392.705023][ T9542] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2392.722050][ T3700] usb 6-1: ath9k_htc: USB layer deinitialized [ 2392.752864][ T9542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.762108][ T9542] usb 3-1: Product: syz [ 2392.777227][ T9542] usb 3-1: Manufacturer: syz [ 2392.782195][ T9542] usb 3-1: SerialNumber: syz [ 2392.789432][ T1309] usb 2-1: USB disconnect, device number 125 [ 2392.834757][ T9542] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2392.854441][ T7] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2392.861590][ T7] ath9k_htc: Failed to initialize the device [ 2392.871710][ T4548] usb 4-1: ath9k_htc: USB layer deinitialized [ 2393.084591][ T3700] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2393.104436][T10185] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:33 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2393.234758][ T4548] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2393.274461][ T35] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2393.484512][ T9542] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2393.526551][T10841] usb 5-1: USB disconnect, device number 4 [ 2393.644496][ T8165] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2393.651422][ T8165] ath9k_htc: Failed to initialize the device [ 2393.659577][ T1309] usb 2-1: ath9k_htc: USB layer deinitialized [ 2393.670431][ T3700] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2393.683542][ T3700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.699268][ T865] usb 1-1: USB disconnect, device number 72 [ 2393.700952][ T3700] usb 6-1: Product: syz [ 2393.733365][ T3700] usb 6-1: Manufacturer: syz [ 2393.740127][ T3700] usb 6-1: SerialNumber: syz [ 2393.746570][ T9534] usb 3-1: USB disconnect, device number 110 [ 2393.755062][ T4548] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2393.764113][ T4548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.779900][ T4548] usb 4-1: Product: syz [ 2393.784715][ T4548] usb 4-1: Manufacturer: syz [ 2393.789478][ T4548] usb 4-1: SerialNumber: syz [ 2393.797078][ T3700] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2393.835348][ T4548] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:34 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2394.054755][ T1309] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2394.124472][T10185] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2394.131682][T10185] ath9k_htc: Failed to initialize the device [ 2394.138641][T10841] usb 5-1: ath9k_htc: USB layer deinitialized 02:00:34 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) 02:00:34 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2394.366287][ T35] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2394.373181][ T35] ath9k_htc: Failed to initialize the device [ 2394.381613][ T865] usb 1-1: ath9k_htc: USB layer deinitialized [ 2394.415712][ T4548] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2394.464480][ T3700] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2394.524609][T10841] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2394.532130][ T9542] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2394.539041][ T9542] ath9k_htc: Failed to initialize the device [ 2394.546051][ T9534] usb 3-1: ath9k_htc: USB layer deinitialized [ 2394.624507][ T1309] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2394.633745][ T1309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.642606][ T1309] usb 2-1: Product: syz [ 2394.647222][ T1309] usb 2-1: Manufacturer: syz [ 2394.652015][ T1309] usb 2-1: SerialNumber: syz [ 2394.698719][ T1309] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2394.744459][ T865] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2394.825185][ T8165] usb 4-1: USB disconnect, device number 115 [ 2394.896011][T10189] usb 6-1: USB disconnect, device number 29 [ 2394.909691][ T9534] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2395.094981][T10841] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2395.104455][T10841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.112873][T10841] usb 5-1: Product: syz [ 2395.118598][T10841] usb 5-1: Manufacturer: syz [ 2395.123197][T10841] usb 5-1: SerialNumber: syz [ 2395.175620][T10841] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2395.264481][ T865] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2395.274296][ T865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.284219][ T865] usb 1-1: Product: syz [ 2395.288555][ T865] usb 1-1: Manufacturer: syz [ 2395.293290][ T865] usb 1-1: SerialNumber: syz [ 2395.304781][ T1309] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:36 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2395.336606][ T865] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:36 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="040200ac818e0d3d5b2b01a22ceacd45"]) [ 2395.454553][ T9534] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2395.464009][ T9534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.472368][ T9534] usb 3-1: Product: syz [ 2395.477023][ T9534] usb 3-1: Manufacturer: syz [ 2395.481822][ T9534] usb 3-1: SerialNumber: syz [ 2395.484452][ T4548] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2395.486624][ T3700] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2395.493281][ T4548] ath9k_htc: Failed to initialize the device [ 2395.506367][ T8165] usb 4-1: ath9k_htc: USB layer deinitialized [ 2395.513322][ T3700] ath9k_htc: Failed to initialize the device [ 2395.526595][T10189] usb 6-1: ath9k_htc: USB layer deinitialized [ 2395.527304][ T7] usb 2-1: USB disconnect, device number 126 [ 2395.564777][ T9534] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2395.804458][T10841] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2395.894424][T10189] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2395.905017][ T8165] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2395.914878][ T865] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:36 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) [ 2396.224499][ T9534] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2396.226959][T10185] usb 5-1: USB disconnect, device number 5 [ 2396.337299][ T9542] usb 1-1: USB disconnect, device number 73 [ 2396.364578][ T1309] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2396.371723][ T1309] ath9k_htc: Failed to initialize the device [ 2396.380255][ T7] usb 2-1: ath9k_htc: USB layer deinitialized [ 2396.415371][T10189] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2396.424781][T10189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.433132][T10189] usb 6-1: Product: syz [ 2396.438993][T10189] usb 6-1: Manufacturer: syz [ 2396.443985][T10189] usb 6-1: SerialNumber: syz [ 2396.474499][ T8165] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2396.483747][ T8165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.485231][T10189] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2396.499175][ T8165] usb 4-1: Product: syz [ 2396.512932][ T8165] usb 4-1: Manufacturer: syz [ 2396.517624][ T8165] usb 4-1: SerialNumber: syz [ 2396.574846][ T8165] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2396.649150][ T3700] usb 3-1: USB disconnect, device number 111 02:00:37 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2396.756321][ T7] usb 2-1: new high-speed USB device number 127 using dummy_hcd 02:00:37 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) [ 2396.844428][T10841] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2396.857496][T10841] ath9k_htc: Failed to initialize the device [ 2396.863716][T10185] usb 5-1: ath9k_htc: USB layer deinitialized [ 2397.006215][ T865] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2397.013225][ T865] ath9k_htc: Failed to initialize the device [ 2397.020017][ T9542] usb 1-1: ath9k_htc: USB layer deinitialized [ 2397.064426][T10189] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:37 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2397.224478][T10185] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2397.254432][ T9534] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2397.261919][ T9534] ath9k_htc: Failed to initialize the device [ 2397.268855][ T3700] usb 3-1: ath9k_htc: USB layer deinitialized [ 2397.275566][ T8165] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2397.334523][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2397.343727][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.352879][ T7] usb 2-1: Product: syz [ 2397.357667][ T7] usb 2-1: Manufacturer: syz [ 2397.362375][ T7] usb 2-1: SerialNumber: syz [ 2397.414857][ T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2397.424021][ T9542] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2397.485793][ T4813] usb 6-1: USB disconnect, device number 30 [ 2397.665563][ T3700] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2397.686747][ T35] usb 4-1: USB disconnect, device number 116 [ 2397.744518][T10185] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2397.744547][T10185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.744565][T10185] usb 5-1: Product: syz [ 2397.744578][T10185] usb 5-1: Manufacturer: syz [ 2397.744591][T10185] usb 5-1: SerialNumber: syz [ 2397.784980][T10185] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:38 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2398.004769][ T9542] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2398.013978][ T9542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.026887][ T9542] usb 1-1: Product: syz [ 2398.031137][ T9542] usb 1-1: Manufacturer: syz [ 2398.044422][ T9542] usb 1-1: SerialNumber: syz [ 2398.064775][ T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2398.085405][ T9542] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2398.124420][T10189] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2398.131927][T10189] ath9k_htc: Failed to initialize the device [ 2398.140235][ T4813] usb 6-1: ath9k_htc: USB layer deinitialized 02:00:38 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2398.245859][ T3700] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2398.255136][ T3700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.263303][ T3700] usb 3-1: Product: syz [ 2398.273309][ T3700] usb 3-1: Manufacturer: syz [ 2398.278046][ T3700] usb 3-1: SerialNumber: syz [ 2398.283627][ T8169] usb 2-1: USB disconnect, device number 127 [ 2398.344828][ T3700] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2398.344832][ T8683] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2398.364465][ T8165] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2398.373202][ T8165] ath9k_htc: Failed to initialize the device [ 2398.386967][ T35] usb 4-1: ath9k_htc: USB layer deinitialized [ 2398.504404][ T4813] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2398.744460][ T9542] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2398.758684][ T35] usb 4-1: new high-speed USB device number 117 using dummy_hcd 02:00:39 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) [ 2398.785235][ T865] usb 5-1: USB disconnect, device number 6 [ 2398.958997][T10185] usb 1-1: USB disconnect, device number 74 [ 2398.984814][ T3700] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2399.034465][ T4813] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2399.034496][ T4813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.034515][ T4813] usb 6-1: Product: syz [ 2399.034529][ T4813] usb 6-1: Manufacturer: syz [ 2399.034542][ T4813] usb 6-1: SerialNumber: syz [ 2399.075041][ T4813] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2399.175178][ T7] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2399.182108][ T7] ath9k_htc: Failed to initialize the device [ 2399.191004][ T8169] usb 2-1: ath9k_htc: USB layer deinitialized 02:00:39 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2399.284459][ T35] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2399.304278][ T35] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.313895][ T35] usb 4-1: Product: syz [ 2399.318453][ T35] usb 4-1: Manufacturer: syz [ 2399.323124][ T35] usb 4-1: SerialNumber: syz [ 2399.365389][ T35] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2399.397878][ T8165] usb 3-1: USB disconnect, device number 112 [ 2399.404781][ T8683] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive 02:00:40 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="040200ac818e0d3d5b2b01a22ceacd45"]) [ 2399.420024][ T8683] ath9k_htc: Failed to initialize the device [ 2399.427766][ T865] usb 5-1: ath9k_htc: USB layer deinitialized [ 2399.484679][ T3236] ieee802154 phy0 wpan0: encryption failed: -22 [ 2399.490989][ T3236] ieee802154 phy1 wpan1: encryption failed: -22 [ 2399.554431][ T8169] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2399.644851][ T4813] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2399.804486][ T9542] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2399.804940][ T865] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2399.813347][ T9542] ath9k_htc: Failed to initialize the device [ 2399.828517][T10185] usb 1-1: ath9k_htc: USB layer deinitialized 02:00:40 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2399.945794][ T35] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2400.044402][ T3700] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2400.051899][ T3700] ath9k_htc: Failed to initialize the device [ 2400.058294][ T8165] usb 3-1: ath9k_htc: USB layer deinitialized [ 2400.069335][ T9534] usb 6-1: USB disconnect, device number 31 [ 2400.145521][ T8169] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2400.154996][ T8169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2400.163059][ T8169] usb 2-1: Product: syz [ 2400.169322][ T8169] usb 2-1: Manufacturer: syz [ 2400.173931][ T8169] usb 2-1: SerialNumber: syz [ 2400.184404][T10185] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2400.225827][ T8169] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2400.334784][ T865] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2400.344013][ T865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2400.354004][ T865] usb 5-1: Product: syz [ 2400.359059][ T865] usb 5-1: Manufacturer: syz [ 2400.364131][ T865] usb 5-1: SerialNumber: syz [ 2400.372067][T10189] usb 4-1: USB disconnect, device number 117 [ 2400.406913][ T865] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2400.434405][ T8165] usb 3-1: new high-speed USB device number 113 using dummy_hcd 02:00:41 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2400.684481][ T4813] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2400.692985][ T4813] ath9k_htc: Failed to initialize the device [ 2400.699885][ T9534] usb 6-1: ath9k_htc: USB layer deinitialized [ 2400.709767][T10185] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2400.721186][T10185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2400.734334][T10185] usb 1-1: Product: syz [ 2400.741089][T10185] usb 1-1: Manufacturer: syz [ 2400.746905][T10185] usb 1-1: SerialNumber: syz [ 2400.784752][T10185] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:41 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="040200ac818e0d3d5b"]) [ 2400.894922][ T8169] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2400.974458][ T865] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2400.994566][ T8165] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2401.003684][ T8165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.004474][ T35] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2401.013652][ T8165] usb 3-1: Product: syz [ 2401.020398][ T35] ath9k_htc: Failed to initialize the device [ 2401.023586][ T8165] usb 3-1: Manufacturer: syz [ 2401.033911][T10189] usb 4-1: ath9k_htc: USB layer deinitialized [ 2401.039799][ T8165] usb 3-1: SerialNumber: syz [ 2401.085093][ T8165] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2401.104719][ T9534] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2401.117405][ T3700] usb 2-1: USB disconnect, device number 2 [ 2401.179099][ T4548] usb 5-1: USB disconnect, device number 7 [ 2401.364450][T10185] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2401.394432][T10189] usb 4-1: new high-speed USB device number 118 using dummy_hcd 02:00:42 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) 02:00:42 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2401.684466][ T9534] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2401.695827][ T9534] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.704239][ T9534] usb 6-1: Product: syz [ 2401.710805][ T9534] usb 6-1: Manufacturer: syz [ 2401.717822][ T9534] usb 6-1: SerialNumber: syz [ 2401.744980][ T8165] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2401.765265][ T9534] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2401.805320][ T7] usb 1-1: USB disconnect, device number 75 [ 2401.914441][T10189] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2401.923834][T10189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.932182][T10189] usb 4-1: Product: syz [ 2401.936518][T10189] usb 4-1: Manufacturer: syz [ 2401.941290][T10189] usb 4-1: SerialNumber: syz [ 2401.964401][ T8169] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2401.972880][ T8169] ath9k_htc: Failed to initialize the device [ 2401.979880][ T3700] usb 2-1: ath9k_htc: USB layer deinitialized [ 2401.984977][T10189] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2402.044431][ T865] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2402.051477][ T865] ath9k_htc: Failed to initialize the device [ 2402.058512][ T4548] usb 5-1: ath9k_htc: USB layer deinitialized [ 2402.156176][ T9542] usb 3-1: USB disconnect, device number 113 02:00:43 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2402.364448][ T3700] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2402.414422][ T4548] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2402.444527][T10185] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2402.451535][T10185] ath9k_htc: Failed to initialize the device [ 2402.454485][ T9534] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2402.466819][ T7] usb 1-1: ath9k_htc: USB layer deinitialized [ 2402.554427][T10189] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:43 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2402.774584][ T8165] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2402.781505][ T8165] ath9k_htc: Failed to initialize the device [ 2402.788030][ T9542] usb 3-1: ath9k_htc: USB layer deinitialized [ 2402.824408][ T7] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2402.865341][T10841] usb 6-1: USB disconnect, device number 32 [ 2402.924939][ T3700] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2402.934127][ T3700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.935025][ T4548] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2402.943152][ T3700] usb 2-1: Product: syz [ 2402.953497][ T4548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.956455][ T3700] usb 2-1: Manufacturer: syz [ 2402.964266][ T4548] usb 5-1: Product: syz [ 2402.969187][ T3700] usb 2-1: SerialNumber: syz [ 2402.973100][ T4548] usb 5-1: Manufacturer: syz [ 2402.982522][ T4548] usb 5-1: SerialNumber: syz [ 2402.991444][ T35] usb 4-1: USB disconnect, device number 118 [ 2403.025104][ T4548] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2403.026795][ T3700] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2403.164420][ T9542] usb 3-1: new high-speed USB device number 114 using dummy_hcd 02:00:44 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2403.386672][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2403.415685][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.433611][ T7] usb 1-1: Product: syz [ 2403.440011][ T7] usb 1-1: Manufacturer: syz [ 2403.445644][ T7] usb 1-1: SerialNumber: syz 02:00:44 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="0402"]) [ 2403.484485][ T9534] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2403.491759][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2403.500240][ T9534] ath9k_htc: Failed to initialize the device [ 2403.517317][T10841] usb 6-1: ath9k_htc: USB layer deinitialized [ 2403.564484][T10189] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2403.571792][T10189] ath9k_htc: Failed to initialize the device [ 2403.580503][ T35] usb 4-1: ath9k_htc: USB layer deinitialized [ 2403.596289][ T4548] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2403.654542][ T3700] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2403.694557][ T9542] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2403.703791][ T9542] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.712795][ T9542] usb 3-1: Product: syz [ 2403.717352][ T9542] usb 3-1: Manufacturer: syz [ 2403.722065][ T9542] usb 3-1: SerialNumber: syz [ 2403.765251][ T9542] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2403.800088][ T8165] usb 5-1: USB disconnect, device number 8 [ 2403.860066][ T8169] usb 2-1: USB disconnect, device number 3 [ 2403.874489][T10841] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2403.934475][ T35] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2404.135086][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:44 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 02:00:45 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2404.404526][ T9542] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2404.454507][ T35] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2404.454593][T10841] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2404.465838][ T35] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2404.473179][T10841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2404.482413][ T35] usb 4-1: Product: syz [ 2404.489440][T10841] usb 6-1: Product: syz [ 2404.495561][ T35] usb 4-1: Manufacturer: syz [ 2404.497780][T10841] usb 6-1: Manufacturer: syz [ 2404.502573][ T35] usb 4-1: SerialNumber: syz [ 2404.506898][T10841] usb 6-1: SerialNumber: syz [ 2404.554798][ T35] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2404.556215][T10841] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2404.607170][ T9534] usb 1-1: USB disconnect, device number 76 [ 2404.684436][ T4548] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2404.684495][ T3700] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2404.684518][ T3700] ath9k_htc: Failed to initialize the device [ 2404.691838][ T4548] ath9k_htc: Failed to initialize the device [ 2404.699318][ T8169] usb 2-1: ath9k_htc: USB layer deinitialized [ 2404.717458][ T8165] usb 5-1: ath9k_htc: USB layer deinitialized [ 2404.818535][T22921] usb 3-1: USB disconnect, device number 114 02:00:45 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2405.094456][ T8169] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2405.102088][ T8165] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2405.124428][ T35] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2405.164876][ T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2405.171897][ T7] ath9k_htc: Failed to initialize the device [ 2405.178181][ T9534] usb 1-1: ath9k_htc: USB layer deinitialized [ 2405.224431][T10841] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:46 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2405.484411][ T9542] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2405.491492][ T9542] ath9k_htc: Failed to initialize the device [ 2405.498590][T22921] usb 3-1: ath9k_htc: USB layer deinitialized [ 2405.544903][T10189] usb 4-1: USB disconnect, device number 119 [ 2405.565495][ T9534] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2405.637427][ T4813] usb 6-1: USB disconnect, device number 33 [ 2405.646384][ T8169] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2405.656018][ T8169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.664772][ T8169] usb 2-1: Product: syz [ 2405.669358][ T8169] usb 2-1: Manufacturer: syz [ 2405.674163][ T8169] usb 2-1: SerialNumber: syz [ 2405.680034][ T8165] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2405.689525][ T8165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.698662][ T8165] usb 5-1: Product: syz [ 2405.702853][ T8165] usb 5-1: Manufacturer: syz [ 2405.714407][ T8165] usb 5-1: SerialNumber: syz [ 2405.744716][ T8169] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2405.774757][ T8165] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2405.904885][T22921] usb 3-1: new high-speed USB device number 115 using dummy_hcd 02:00:46 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) 02:00:46 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="040200ac818e0d3d5b"]) [ 2406.114464][ T9534] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2406.124685][ T9534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.132682][ T9534] usb 1-1: Product: syz [ 2406.137585][ T9534] usb 1-1: Manufacturer: syz [ 2406.151996][ T9534] usb 1-1: SerialNumber: syz [ 2406.204409][ T35] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2406.205836][ T9534] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2406.211773][ T35] ath9k_htc: Failed to initialize the device [ 2406.237877][T10189] usb 4-1: ath9k_htc: USB layer deinitialized [ 2406.284475][T10841] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2406.295862][T10841] ath9k_htc: Failed to initialize the device [ 2406.302015][ T4813] usb 6-1: ath9k_htc: USB layer deinitialized [ 2406.404507][ T8169] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2406.424908][ T8165] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2406.485277][T22921] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2406.494318][T22921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.504224][T22921] usb 3-1: Product: syz [ 2406.509080][T22921] usb 3-1: Manufacturer: syz [ 2406.513972][T22921] usb 3-1: SerialNumber: syz [ 2406.555160][T22921] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2406.594419][T10189] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2406.628719][T10185] usb 5-1: USB disconnect, device number 9 [ 2406.654408][ T4813] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2406.826238][ T7] usb 2-1: USB disconnect, device number 4 [ 2406.835161][ T9534] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2407.124812][T10189] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2407.133955][T10189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.142144][T10189] usb 4-1: Product: syz [ 2407.146484][T10189] usb 4-1: Manufacturer: syz [ 2407.155079][T10189] usb 4-1: SerialNumber: syz 02:00:47 executing program 4: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2407.174697][ T4813] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2407.175985][T22921] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2407.183794][ T4813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.205250][T10189] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2407.216819][ T4813] usb 6-1: Product: syz [ 2407.221591][ T4813] usb 6-1: Manufacturer: syz [ 2407.229826][ T4813] usb 6-1: SerialNumber: syz [ 2407.266144][ T9542] usb 1-1: USB disconnect, device number 77 [ 2407.275263][ T4813] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:48 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2407.484553][ T8165] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2407.491605][ T8169] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2407.498754][ T8165] ath9k_htc: Failed to initialize the device [ 2407.506163][ T8169] ath9k_htc: Failed to initialize the device [ 2407.512247][ T7] usb 2-1: ath9k_htc: USB layer deinitialized [ 2407.523007][T10185] usb 5-1: ath9k_htc: USB layer deinitialized [ 2407.596620][ T865] usb 3-1: USB disconnect, device number 115 02:00:48 executing program 4: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) 02:00:48 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2407.804847][T10189] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2407.844505][ T4813] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2407.874418][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2407.884481][ T9534] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2407.893509][ T9534] ath9k_htc: Failed to initialize the device [ 2407.900177][ T9542] usb 1-1: ath9k_htc: USB layer deinitialized 02:00:48 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2408.204461][T22921] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2408.211751][T22921] ath9k_htc: Failed to initialize the device [ 2408.219087][ T865] usb 3-1: ath9k_htc: USB layer deinitialized [ 2408.230874][ T4548] usb 4-1: USB disconnect, device number 120 02:00:48 executing program 4: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2408.268343][T10841] usb 6-1: USB disconnect, device number 34 [ 2408.296294][ T9542] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2408.445044][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2408.454192][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.462271][ T7] usb 2-1: Product: syz [ 2408.466462][ T7] usb 2-1: Manufacturer: syz [ 2408.471056][ T7] usb 2-1: SerialNumber: syz [ 2408.525009][ T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2408.584435][ T865] usb 3-1: new high-speed USB device number 116 using dummy_hcd 02:00:49 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) 02:00:49 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="0402"]) 02:00:49 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2408.844461][T10189] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2408.851384][T10189] ath9k_htc: Failed to initialize the device [ 2408.858863][ T4548] usb 4-1: ath9k_htc: USB layer deinitialized [ 2408.874761][ T9542] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2408.885939][ T9542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.893967][ T9542] usb 1-1: Product: syz [ 2408.901219][ T9542] usb 1-1: Manufacturer: syz [ 2408.906497][ T9542] usb 1-1: SerialNumber: syz [ 2408.924510][ T4813] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2408.932609][ T4813] ath9k_htc: Failed to initialize the device [ 2408.939694][T10841] usb 6-1: ath9k_htc: USB layer deinitialized [ 2408.950529][ T9542] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2409.104834][ T865] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2409.115555][ T865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.123649][ T865] usb 3-1: Product: syz [ 2409.128429][ T865] usb 3-1: Manufacturer: syz [ 2409.133214][ T865] usb 3-1: SerialNumber: syz [ 2409.144808][ T8169] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2409.175087][ T865] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2409.214823][ T4548] usb 4-1: new high-speed USB device number 121 using dummy_hcd 02:00:50 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2409.324425][T10841] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2409.556455][T10185] usb 2-1: USB disconnect, device number 5 [ 2409.568925][ T9534] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2409.734756][ T4548] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2409.744295][ T4548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.754706][ T865] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2409.763905][ T4548] usb 4-1: Product: syz [ 2409.769042][ T4548] usb 4-1: Manufacturer: syz [ 2409.773914][ T4548] usb 4-1: SerialNumber: syz 02:00:50 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2409.814780][ T4548] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2409.914550][T10841] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2409.925230][T10841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.933316][T10841] usb 6-1: Product: syz [ 2409.938180][T10841] usb 6-1: Manufacturer: syz [ 2409.942889][T10841] usb 6-1: SerialNumber: syz [ 2409.984837][T10841] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2410.005652][ T9542] usb 1-1: USB disconnect, device number 78 02:00:50 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2410.169000][ T4813] usb 3-1: USB disconnect, device number 116 [ 2410.204477][ T8169] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2410.211991][ T8169] ath9k_htc: Failed to initialize the device [ 2410.218477][T10185] usb 2-1: ath9k_htc: USB layer deinitialized 02:00:51 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2410.394119][ T4548] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:51 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2410.574423][T10185] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2410.604531][ T9534] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2410.611534][ T9534] ath9k_htc: Failed to initialize the device [ 2410.617930][ T9542] usb 1-1: ath9k_htc: USB layer deinitialized 02:00:51 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="040200ac818e0d3d5b"]) [ 2410.634448][T10841] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2410.674495][T10189] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2410.806852][ T35] usb 4-1: USB disconnect, device number 121 [ 2410.844478][ T865] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2410.851834][ T865] ath9k_htc: Failed to initialize the device [ 2410.858606][ T4813] usb 3-1: ath9k_htc: USB layer deinitialized [ 2410.984504][ T9542] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2411.066032][T19998] usb 6-1: USB disconnect, device number 35 [ 2411.094814][T10185] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2411.103971][T10185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.112939][T10185] usb 2-1: Product: syz [ 2411.118074][T10185] usb 2-1: Manufacturer: syz [ 2411.122708][T10185] usb 2-1: SerialNumber: syz [ 2411.166990][T10185] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2411.194781][T10189] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2411.205386][T10189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.213584][T10189] usb 5-1: Product: syz [ 2411.218601][ T4813] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2411.227302][T10189] usb 5-1: Manufacturer: syz [ 2411.232054][T10189] usb 5-1: SerialNumber: syz 02:00:52 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2411.275244][T10189] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2411.484459][ T4548] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2411.491556][ T4548] ath9k_htc: Failed to initialize the device [ 2411.498803][ T35] usb 4-1: ath9k_htc: USB layer deinitialized 02:00:52 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2411.564459][ T9542] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2411.593351][ T9542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.602450][ T9542] usb 1-1: Product: syz [ 2411.610127][ T9542] usb 1-1: Manufacturer: syz [ 2411.623244][ T9542] usb 1-1: SerialNumber: syz [ 2411.644515][T10841] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2411.655263][T10841] ath9k_htc: Failed to initialize the device [ 2411.661808][T19998] usb 6-1: ath9k_htc: USB layer deinitialized [ 2411.676462][ T9542] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2411.734469][T10185] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2411.748960][ T4813] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2411.758345][ T4813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.767401][ T4813] usb 3-1: Product: syz [ 2411.771620][ T4813] usb 3-1: Manufacturer: syz [ 2411.776971][ T4813] usb 3-1: SerialNumber: syz [ 2411.814767][ T4813] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2411.844524][T10189] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2411.854487][ T35] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2412.034530][T19998] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2412.048085][ T882] usb 5-1: USB disconnect, device number 10 [ 2412.155575][T10190] usb 2-1: USB disconnect, device number 6 [ 2412.344552][ T9534] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2412.375085][ T35] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2412.384199][ T35] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2412.392705][ T4813] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2412.407056][ T35] usb 4-1: Product: syz [ 2412.411256][ T35] usb 4-1: Manufacturer: syz [ 2412.417063][ T35] usb 4-1: SerialNumber: syz [ 2412.455113][ T35] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:53 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2412.554508][T19998] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2412.565212][T19998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2412.573664][T19998] usb 6-1: Product: syz [ 2412.579306][T19998] usb 6-1: Manufacturer: syz [ 2412.585772][T19998] usb 6-1: SerialNumber: syz 02:00:53 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2412.625600][T19998] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2412.764505][T10185] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2412.765552][T10841] usb 1-1: USB disconnect, device number 79 [ 2412.775821][T10185] ath9k_htc: Failed to initialize the device [ 2412.784184][T10190] usb 2-1: ath9k_htc: USB layer deinitialized [ 2412.845038][ T8169] usb 3-1: USB disconnect, device number 117 [ 2412.924463][T10189] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2412.931905][T10189] ath9k_htc: Failed to initialize the device [ 2412.938815][ T882] usb 5-1: ath9k_htc: USB layer deinitialized [ 2413.034425][ T35] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2413.144441][T10190] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2413.204449][T19998] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:53 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="0402"]) 02:00:54 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="0402"]) [ 2413.304412][ T882] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2413.404797][ T9534] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2413.412022][ T9534] ath9k_htc: Failed to initialize the device [ 2413.420354][T10841] usb 1-1: ath9k_htc: USB layer deinitialized [ 2413.455011][ T9542] usb 4-1: USB disconnect, device number 122 [ 2413.484514][ T4813] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2413.491454][ T4813] ath9k_htc: Failed to initialize the device [ 2413.498241][ T8169] usb 3-1: ath9k_htc: USB layer deinitialized [ 2413.636812][T22921] usb 6-1: USB disconnect, device number 36 [ 2413.664466][T10190] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2413.673966][T10190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.684072][T10190] usb 2-1: Product: syz [ 2413.688587][T10190] usb 2-1: Manufacturer: syz [ 2413.693312][T10190] usb 2-1: SerialNumber: syz [ 2413.736258][T10190] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2413.794469][T10841] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2413.854424][ T8169] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2413.884701][ T882] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2413.893828][ T882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.903479][ T882] usb 5-1: Product: syz [ 2413.907846][ T882] usb 5-1: Manufacturer: syz [ 2413.912440][ T882] usb 5-1: SerialNumber: syz 02:00:54 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2413.956588][ T882] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2414.044426][ T35] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2414.051702][ T35] ath9k_htc: Failed to initialize the device [ 2414.059795][ T9542] usb 4-1: ath9k_htc: USB layer deinitialized 02:00:54 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2414.284416][T19998] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2414.291325][T19998] ath9k_htc: Failed to initialize the device [ 2414.299990][T22921] usb 6-1: ath9k_htc: USB layer deinitialized [ 2414.323289][T10190] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2414.374904][T10841] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2414.384831][T10841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.393334][T10841] usb 1-1: Product: syz [ 2414.398714][T10841] usb 1-1: Manufacturer: syz [ 2414.403425][T10841] usb 1-1: SerialNumber: syz [ 2414.424422][ T9542] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2414.445239][T10841] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2414.455098][ T8169] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2414.464302][ T8169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.475537][ T8169] usb 3-1: Product: syz [ 2414.479987][ T8169] usb 3-1: Manufacturer: syz [ 2414.485161][ T8169] usb 3-1: SerialNumber: syz [ 2414.525721][ T8169] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2414.614538][ T882] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2414.684788][T22921] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2414.737778][ T8165] usb 2-1: USB disconnect, device number 7 [ 2414.818289][ T7] usb 5-1: USB disconnect, device number 11 [ 2414.984483][ T9542] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2414.993765][ T9542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.002277][ T9542] usb 4-1: Product: syz [ 2415.006996][ T9542] usb 4-1: Manufacturer: syz [ 2415.011714][ T9542] usb 4-1: SerialNumber: syz [ 2415.054750][ T9542] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2415.114513][T10841] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2415.154515][ T8169] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:00:55 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2415.256098][T22921] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2415.266943][T22921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.275720][T22921] usb 6-1: Product: syz [ 2415.280088][T22921] usb 6-1: Manufacturer: syz [ 2415.285418][T22921] usb 6-1: SerialNumber: syz 02:00:56 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2415.324828][T22921] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2415.404429][T10190] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2415.413021][T10190] ath9k_htc: Failed to initialize the device [ 2415.419780][ T8165] usb 2-1: ath9k_htc: USB layer deinitialized [ 2415.587075][ T9534] usb 3-1: USB disconnect, device number 118 [ 2415.593523][ T3700] usb 1-1: USB disconnect, device number 80 [ 2415.654477][ T882] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2415.662486][ T882] ath9k_htc: Failed to initialize the device [ 2415.669394][ T7] usb 5-1: ath9k_htc: USB layer deinitialized [ 2415.724567][ T9542] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2415.815023][ T8165] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2415.994493][T22921] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2416.034540][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd 02:00:56 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) 02:00:56 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2416.156296][T19998] usb 4-1: USB disconnect, device number 123 [ 2416.214567][ T8169] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2416.221486][ T8169] ath9k_htc: Failed to initialize the device [ 2416.227498][T10841] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2416.235710][T10841] ath9k_htc: Failed to initialize the device [ 2416.241728][ T3700] usb 1-1: ath9k_htc: USB layer deinitialized [ 2416.251838][ T9534] usb 3-1: ath9k_htc: USB layer deinitialized [ 2416.385389][ T8165] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2416.394880][ T8165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.402979][ T8165] usb 2-1: Product: syz [ 2416.408403][ T8165] usb 2-1: Manufacturer: syz [ 2416.413261][ T8165] usb 2-1: SerialNumber: syz [ 2416.438878][ T4813] usb 6-1: USB disconnect, device number 37 [ 2416.459563][ T8165] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2416.584455][ T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2416.595639][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.603658][ T7] usb 5-1: Product: syz [ 2416.607868][ T7] usb 5-1: Manufacturer: syz [ 2416.612474][ T7] usb 5-1: SerialNumber: syz [ 2416.618017][ T9534] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2416.625702][ T3700] usb 1-1: new high-speed USB device number 81 using dummy_hcd 02:00:57 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2416.675101][ T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2416.764433][ T9542] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2416.771848][ T9542] ath9k_htc: Failed to initialize the device [ 2416.779964][T19998] usb 4-1: ath9k_htc: USB layer deinitialized 02:00:57 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2417.094480][T22921] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2417.101710][T22921] ath9k_htc: Failed to initialize the device [ 2417.108574][ T4813] usb 6-1: ath9k_htc: USB layer deinitialized [ 2417.124550][ T8165] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2417.134503][T19998] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2417.235074][ T9534] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2417.244243][ T3700] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2417.253350][ T3700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.262722][ T9534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.271096][ T3700] usb 1-1: Product: syz [ 2417.275922][ T9534] usb 3-1: Product: syz [ 2417.280089][ T9534] usb 3-1: Manufacturer: syz [ 2417.285148][ T3700] usb 1-1: Manufacturer: syz [ 2417.289744][ T3700] usb 1-1: SerialNumber: syz [ 2417.295049][ T9534] usb 3-1: SerialNumber: syz [ 2417.355277][ T3700] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2417.365921][ T9534] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2417.395837][ T7] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2417.464459][ T4813] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2417.556391][ T8169] usb 2-1: USB disconnect, device number 8 [ 2417.598364][T10190] usb 5-1: USB disconnect, device number 12 [ 2417.654493][T19998] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2417.664289][T19998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.674581][T19998] usb 4-1: Product: syz [ 2417.678904][T19998] usb 4-1: Manufacturer: syz [ 2417.683571][T19998] usb 4-1: SerialNumber: syz [ 2417.726173][T19998] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2417.984475][ T4813] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2417.994058][ T4813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2418.005073][ T3700] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2418.005551][ T4813] usb 6-1: Product: syz [ 2418.014234][ T9534] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2418.028401][ T4813] usb 6-1: Manufacturer: syz 02:00:58 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2418.033081][ T4813] usb 6-1: SerialNumber: syz [ 2418.075055][ T4813] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:00:58 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) [ 2418.204547][ T8165] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2418.213977][ T8165] ath9k_htc: Failed to initialize the device [ 2418.227414][ T8169] usb 2-1: ath9k_htc: USB layer deinitialized [ 2418.304488][T19998] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2418.436892][ T35] usb 3-1: USB disconnect, device number 119 [ 2418.454816][ T7] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2418.464628][ T7] ath9k_htc: Failed to initialize the device [ 2418.470832][T10190] usb 5-1: ath9k_htc: USB layer deinitialized [ 2418.471487][T10841] usb 1-1: USB disconnect, device number 81 [ 2418.614409][ T8169] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2418.644503][ T4813] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2418.725475][T22921] usb 4-1: USB disconnect, device number 124 [ 2418.834501][T10190] usb 5-1: new high-speed USB device number 13 using dummy_hcd 02:00:59 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) 02:00:59 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2419.055184][ T4548] usb 6-1: USB disconnect, device number 38 [ 2419.094467][ T9534] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2419.101463][ T3700] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2419.108405][ T9534] ath9k_htc: Failed to initialize the device [ 2419.114501][ T3700] ath9k_htc: Failed to initialize the device [ 2419.120551][T10841] usb 1-1: ath9k_htc: USB layer deinitialized [ 2419.120579][ T35] usb 3-1: ath9k_htc: USB layer deinitialized 02:00:59 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2419.194471][ T8169] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2419.203937][ T8169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.212533][ T8169] usb 2-1: Product: syz [ 2419.217064][ T8169] usb 2-1: Manufacturer: syz [ 2419.221785][ T8169] usb 2-1: SerialNumber: syz [ 2419.274747][ T8169] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2419.324480][T19998] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2419.331658][T19998] ath9k_htc: Failed to initialize the device [ 2419.338567][T22921] usb 4-1: ath9k_htc: USB layer deinitialized [ 2419.354715][T10190] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2419.366780][T10190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.376912][T10190] usb 5-1: Product: syz [ 2419.383444][T10190] usb 5-1: Manufacturer: syz [ 2419.388264][T10190] usb 5-1: SerialNumber: syz [ 2419.434687][T10190] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2419.484464][ T35] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2419.494509][T10841] usb 1-1: new high-speed USB device number 82 using dummy_hcd 02:01:00 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2419.704478][T22921] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2419.724441][ T4813] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2419.732382][ T4813] ath9k_htc: Failed to initialize the device [ 2419.739113][ T4548] usb 6-1: ath9k_htc: USB layer deinitialized [ 2419.965067][ T8169] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2420.004482][ T35] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2420.013899][ T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.023136][ T35] usb 3-1: Product: syz [ 2420.027856][T10190] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2420.037102][ T35] usb 3-1: Manufacturer: syz [ 2420.041728][ T35] usb 3-1: SerialNumber: syz [ 2420.074834][T10841] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2420.084078][T10841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.084929][ T35] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2420.100423][T10841] usb 1-1: Product: syz [ 2420.104689][ T4548] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2420.119492][T10841] usb 1-1: Manufacturer: syz [ 2420.124212][T10841] usb 1-1: SerialNumber: syz [ 2420.165763][T10841] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2420.230012][T10189] usb 5-1: USB disconnect, device number 13 [ 2420.314542][T22921] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2420.325453][T22921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.333640][T22921] usb 4-1: Product: syz [ 2420.338807][T22921] usb 4-1: Manufacturer: syz [ 2420.343408][T22921] usb 4-1: SerialNumber: syz [ 2420.394920][ T9534] usb 2-1: USB disconnect, device number 9 [ 2420.405909][T22921] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2420.624473][ T4548] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2420.634027][ T4548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.644183][ T4548] usb 6-1: Product: syz [ 2420.648399][ T4548] usb 6-1: Manufacturer: syz [ 2420.653008][ T4548] usb 6-1: SerialNumber: syz [ 2420.664451][ T35] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:01:01 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) [ 2420.694718][ T4548] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2420.814500][T10841] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 02:01:01 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) [ 2421.004564][ T8169] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2421.011478][ T8169] ath9k_htc: Failed to initialize the device [ 2421.018154][ T9534] usb 2-1: ath9k_htc: USB layer deinitialized [ 2421.074495][T22921] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2421.084487][T10190] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2421.090098][ T3700] usb 3-1: USB disconnect, device number 120 [ 2421.093342][T10190] ath9k_htc: Failed to initialize the device [ 2421.115494][T10189] usb 5-1: ath9k_htc: USB layer deinitialized [ 2421.256030][ T7] usb 1-1: USB disconnect, device number 82 [ 2421.274472][ T4548] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2421.374472][ T9534] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2421.474490][T10189] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2421.506468][ T8165] usb 4-1: USB disconnect, device number 125 02:01:02 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="040200ac818e0d3d5b2b01a22ceacd45e8d9d5af65f04ff44ae7860fc3ca7d"]) 02:01:02 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="04"]) [ 2421.718762][ T9542] usb 6-1: USB disconnect, device number 39 [ 2421.724450][ T35] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2421.732199][ T35] ath9k_htc: Failed to initialize the device [ 2421.740051][ T3700] usb 3-1: ath9k_htc: USB layer deinitialized [ 2421.894748][T10841] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2421.901674][T10841] ath9k_htc: Failed to initialize the device [ 2421.908414][ T7] usb 1-1: ath9k_htc: USB layer deinitialized [ 2421.944457][ T9534] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2421.953705][ T9534] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2421.962070][ T9534] usb 2-1: Product: syz [ 2421.966717][ T9534] usb 2-1: Manufacturer: syz [ 2421.971777][ T9534] usb 2-1: SerialNumber: syz 02:01:02 executing program 3: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 2421.994860][T10189] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2422.004217][T10189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.013307][T10189] usb 5-1: Product: syz [ 2422.018276][T10189] usb 5-1: Manufacturer: syz [ 2422.027985][ T9534] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2422.038817][T10189] usb 5-1: SerialNumber: syz [ 2422.084834][T10189] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2422.116299][ T3700] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2422.134475][T22921] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2422.143460][T22921] ath9k_htc: Failed to initialize the device [ 2422.151026][ T8165] usb 4-1: ath9k_htc: USB layer deinitialized 02:01:02 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2422.294542][ T7] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2422.364470][ T4548] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2422.371451][ T4548] ath9k_htc: Failed to initialize the device [ 2422.378280][ T9542] usb 6-1: ath9k_htc: USB layer deinitialized [ 2422.535222][ T8165] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2422.646072][ T9534] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2422.654446][ T4813] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2422.674880][ T3700] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2422.685744][ T3700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.693836][ T3700] usb 3-1: Product: syz [ 2422.698921][ T3700] usb 3-1: Manufacturer: syz [ 2422.703610][ T3700] usb 3-1: SerialNumber: syz [ 2422.754547][ T9542] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2422.762740][ T3700] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2422.858176][ T35] usb 5-1: USB disconnect, device number 14 [ 2422.867933][ T5304] usb 2-1: USB disconnect, device number 10 [ 2422.875578][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2422.895133][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.903192][ T7] usb 1-1: Product: syz [ 2422.913402][ T7] usb 1-1: Manufacturer: syz [ 2422.921205][ T7] usb 1-1: SerialNumber: syz [ 2422.974826][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2423.104788][ T8165] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2423.114453][ T8165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.122706][ T8165] usb 4-1: Product: syz [ 2423.127896][ T8165] usb 4-1: Manufacturer: syz [ 2423.132636][ T8165] usb 4-1: SerialNumber: syz [ 2423.185517][ T8165] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2423.325055][ T9542] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2423.334305][ T9542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.343459][ T9542] usb 6-1: Product: syz [ 2423.348618][ T9542] usb 6-1: Manufacturer: syz [ 2423.353314][ T9542] usb 6-1: SerialNumber: syz 02:01:04 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, 0x0) 02:01:04 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2423.374491][ T3700] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2423.395183][ T9542] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2423.594928][ T8169] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2423.724435][ T4813] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2423.724533][ T9534] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2423.731896][ T4813] ath9k_htc: Failed to initialize the device [ 2423.739338][ T9534] ath9k_htc: Failed to initialize the device [ 2423.747336][ T35] usb 5-1: ath9k_htc: USB layer deinitialized [ 2423.756423][ T5304] usb 2-1: ath9k_htc: USB layer deinitialized [ 2423.796702][ T4548] usb 3-1: USB disconnect, device number 121 [ 2423.824864][ T8165] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2424.026528][ T7] usb 1-1: USB disconnect, device number 83 [ 2424.044920][ T9542] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2424.049738][T10189] usb 4-1: USB disconnect, device number 126 [ 2424.114509][ T35] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2424.154411][ T5304] usb 2-1: new high-speed USB device number 11 using dummy_hcd 02:01:04 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2424.444499][ T3700] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2424.453517][ T3700] ath9k_htc: Failed to initialize the device [ 2424.460272][ T4548] usb 3-1: ath9k_htc: USB layer deinitialized [ 2424.477764][T10190] usb 6-1: USB disconnect, device number 40 02:01:05 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) 02:01:05 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB="0402"]) [ 2424.634563][ T35] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2424.643986][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2424.652919][ T35] usb 5-1: Product: syz [ 2424.657727][ T35] usb 5-1: Manufacturer: syz [ 2424.662434][ T35] usb 5-1: SerialNumber: syz [ 2424.684421][ T8169] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2424.691690][ T8169] ath9k_htc: Failed to initialize the device [ 2424.698616][ T7] usb 1-1: ath9k_htc: USB layer deinitialized [ 2424.705207][ T35] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2424.724705][ T5304] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2424.738222][ T5304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2424.748795][ T5304] usb 2-1: Product: syz [ 2424.752976][ T5304] usb 2-1: Manufacturer: syz [ 2424.758352][ T5304] usb 2-1: SerialNumber: syz [ 2424.805570][ T5304] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2424.826255][ T4548] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2424.854472][ T8165] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2424.861771][ T8165] ath9k_htc: Failed to initialize the device [ 2424.868859][T10189] usb 4-1: ath9k_htc: USB layer deinitialized 02:01:05 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2425.064423][ T7] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2425.084827][ T9542] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2425.091939][ T9542] ath9k_htc: Failed to initialize the device [ 2425.099050][T10190] usb 6-1: ath9k_htc: USB layer deinitialized [ 2425.224561][T10189] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2425.284737][ T35] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2425.344900][ T4548] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2425.354162][ T4548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.364565][ T4548] usb 3-1: Product: syz [ 2425.368734][ T4548] usb 3-1: Manufacturer: syz [ 2425.373320][ T4548] usb 3-1: SerialNumber: syz [ 2425.404459][ T5304] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2425.418715][ T4548] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2425.454443][T10190] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2425.489347][ T4813] usb 5-1: USB disconnect, device number 15 [ 2425.625388][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2425.634660][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.642714][ T7] usb 1-1: Product: syz [ 2425.648189][ T7] usb 1-1: Manufacturer: syz [ 2425.652896][ T7] usb 1-1: SerialNumber: syz [ 2425.705112][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2425.764499][T10189] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2425.774265][T10189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.783231][T10189] usb 4-1: Product: syz [ 2425.788320][T10189] usb 4-1: Manufacturer: syz [ 2425.793053][T10189] usb 4-1: SerialNumber: syz [ 2425.825662][ T8169] usb 2-1: USB disconnect, device number 11 [ 2425.836550][T10189] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:01:06 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2425.974933][T10190] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2425.984044][T10190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.992168][ T4548] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2426.002939][T10190] usb 6-1: Product: syz [ 2426.007785][T10190] usb 6-1: Manufacturer: syz [ 2426.012683][T10190] usb 6-1: SerialNumber: syz [ 2426.055163][T10190] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:01:07 executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) [ 2426.367626][ T35] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2426.375052][ T35] ath9k_htc: Failed to initialize the device [ 2426.381059][ T4813] usb 5-1: ath9k_htc: USB layer deinitialized [ 2426.384517][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2426.414563][T10185] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2426.424147][ T9542] usb 3-1: USB disconnect, device number 122 [ 2426.454954][ T5304] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2426.463341][ T5304] ath9k_htc: Failed to initialize the device [ 2426.469637][ T8169] usb 2-1: ath9k_htc: USB layer deinitialized [ 2426.634446][T10190] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2426.754409][ T4813] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2426.806119][T19998] usb 1-1: USB disconnect, device number 84 [ 2426.844541][ T8169] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2426.852859][T10189] usb 4-1: USB disconnect, device number 127 02:01:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) r3 = socket(0x4, 0x4, 0x7) getsockname(r3, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000000c0)=0x80) 02:01:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) r3 = socket(0x4, 0x4, 0x7) getsockname(r3, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000000c0)=0x80) 02:01:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) r3 = socket(0x4, 0x4, 0x7) getsockname(r3, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000000c0)=0x80) 02:01:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) socket(0x4, 0x4, 0x7) [ 2427.004474][ T4548] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2427.012837][ T4548] ath9k_htc: Failed to initialize the device [ 2427.022201][ T9542] usb 3-1: ath9k_htc: USB layer deinitialized 02:01:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) [ 2427.066099][ T8165] usb 6-1: USB disconnect, device number 41 02:01:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) 02:01:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) 02:01:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5421, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="7f", @ANYRES32=r2, @ANYBLOB="780043a60000010000000003481200a000680000a1299001001414bb6401010089139400000000ac1e0101ac1414aa000080004418f4800000010000009404010044449b81ac1414bb0000f042ac1414bb000000050001010200000002ac14141b80be5b31873b4a4fc66d010000000600000000000000007f000001010400028913f4ac141610169c14aae0000002183200000000000001000000000000"]}) [ 2427.275000][ T4813] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2427.284193][ T4813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.294104][ T4813] usb 5-1: Product: syz [ 2427.298320][ T4813] usb 5-1: Manufacturer: syz [ 2427.302934][ T4813] usb 5-1: SerialNumber: syz 02:01:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r4, 0x0, &(0x7f0000000380)="6a5e6fa16b5675b6a0382fca50ff39cf302d2c4096744572082daf959156a86770ff2919ba36c6437cf655419754b81b4833c01a96da452919fcb698b2767ed7ab0b9783782fad427eeb294a275c88470eca5e69ddb2637b32a0e18f8da9b262f0d302af9e48fc5d2f1a5c8f72366e9a18f6463e56435d1a", 0x78, 0x10000}, 0x1a87) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) connect$nfc_llcp(r5, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x1, 0x5, 0x4, "fc522392264c8bc32f8f80e9335ecd4c1abd4acec6232b2def3427c285d9397bf79601887a5d4769598cab67c8066dc68ad44e2b31674220e32fa3eb46792c", 0x13}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) accept4$nfc_llcp(r6, &(0x7f0000000440), &(0x7f00000004c0)=0x60, 0x80000) [ 2427.346272][ T4813] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2427.464450][ T8169] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2427.473804][ T8169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.482512][ T8169] usb 2-1: Product: syz [ 2427.484423][T10185] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2427.486865][ T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2427.493541][T10185] ath9k_htc: Failed to initialize the device [ 2427.493589][T10189] usb 4-1: ath9k_htc: USB layer deinitialized [ 2427.506339][ T8169] usb 2-1: Manufacturer: syz [ 2427.517957][ T7] ath9k_htc: Failed to initialize the device [ 2427.524145][ T8169] usb 2-1: SerialNumber: syz [ 2427.529347][T19998] usb 1-1: ath9k_htc: USB layer deinitialized 02:01:08 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5421, &(0x7f00000000c0)={'gretap0\x00', 0x0}) syz_io_uring_setup(0x2a0c, &(0x7f0000000100)={0x0, 0xcda8, 0x2, 0x3, 0x7c, 0x0, r0}, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) r3 = syz_mount_image$erofs(&(0x7f00000001c0)='erofs\x00', &(0x7f0000000200)='./file0\x00', 0x2, 0x3, &(0x7f0000000400)=[{&(0x7f0000000240)="9fb01b0e2d9c986d9d9346007b1c747fbbed9e68b8172ab41f06654e7884da567ff203e9827f46860862ca0acf174ed1df7bdafed0b933f39bde7457fe387491532d344d00f47529c0d91aae9872ba39e3b65757128d59496ef31251a70cc3d30b9621b94dffdc9ff7db9f2728994024c5b360e397ba926e7aa69256fbaacaafd8fb122635696c71b1df4a8f52efcbaa444f689a8afcac229fd843db30606a94ee29b042669643e771b97c7cdca017e246565192d67decce411b2c83596523677f338daa5c06ef", 0xc7}, {&(0x7f0000000340)="1dc859e295e0ca3fc591c78383b0a5fc8c9ad3ab7c7e21538392a53776d3044f74d0e3973c71efd2d47507d318dc7fd8efc75f59dee16427", 0x38, 0x100000001}, {&(0x7f0000000380)="ab35d2a7f40fff44928fb4e5ab8b8b6d3920bbf5f6ccbffef8b13ab75e6ee074ca3d61b830ab53fba8c9a138079365a9a54242a22affb8f88709de1141b436fc0ceb30522f18ede21151c977e0d7", 0x4e, 0x3f}], 0x820000, &(0x7f0000000480)={[{@user_xattr='user_xattr'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x1f}}, {@user_xattr='user_xattr'}, {@acl='acl'}], [{@subj_type={'subj_type', 0x3d, '\x7f%/{]/+]-$-}['}}]}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0x2, 0x0, r3, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x400, 0xc00, 0x1}, 0x6) [ 2427.585331][ T8169] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2427.724460][T10190] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2427.731511][T10190] ath9k_htc: Failed to initialize the device [ 2427.738925][ T8165] usb 6-1: ath9k_htc: USB layer deinitialized [ 2427.914444][ T4813] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2428.224492][ T8169] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2428.334944][ T8165] usb 5-1: USB disconnect, device number 16 [ 2428.645843][T19998] usb 2-1: USB disconnect, device number 12 02:01:09 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2428.924477][ T4813] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2428.931356][ T4813] ath9k_htc: Failed to initialize the device [ 2428.939588][ T8165] usb 5-1: ath9k_htc: USB layer deinitialized 02:01:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80086301, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x10) getsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) 02:01:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5421, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="7f", @ANYRES32=r2, @ANYBLOB="780043a60000010000000003481200a000680000a1299001001414bb6401010089139400000000ac1e0101ac1414aa000080004418f4800000010000009404010044449b81ac1414bb0000f042ac1414bb000000050001010200000002ac14141b80be5b31873b4a4fc66d010000000600000000000000007f000001010400028913f4ac141610169c14aae0000002183200000000000001000000000000"]}) 02:01:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r4, 0x0, &(0x7f0000000380)="6a5e6fa16b5675b6a0382fca50ff39cf302d2c4096744572082daf959156a86770ff2919ba36c6437cf655419754b81b4833c01a96da452919fcb698b2767ed7ab0b9783782fad427eeb294a275c88470eca5e69ddb2637b32a0e18f8da9b262f0d302af9e48fc5d2f1a5c8f72366e9a18f6463e56435d1a", 0x78, 0x10000}, 0x1a87) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) connect$nfc_llcp(r5, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x1, 0x5, 0x4, "fc522392264c8bc32f8f80e9335ecd4c1abd4acec6232b2def3427c285d9397bf79601887a5d4769598cab67c8066dc68ad44e2b31674220e32fa3eb46792c", 0x13}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) accept4$nfc_llcp(r6, &(0x7f0000000440), &(0x7f00000004c0)=0x60, 0x80000) 02:01:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket(0x28, 0x1, 0xfffff801) socket$inet(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x2, 0x2, 0xa, 0x0, 'syzkaller\x00'}}, 0x33) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x0, 0x7, 0x8}, @initr0, @exit, @map={0x18, 0x5, 0x1, 0x0, 0x1}, @generic={0x7, 0xe, 0x5, 0x9, 0x3f}]}, &(0x7f0000000180)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x5e583fde90dddb21, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x4, 0x0, 0x7c}, 0x10}, 0x78) 02:01:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket(0x28, 0x1, 0xfffff801) socket$inet(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x2, 0x2, 0xa, 0x0, 'syzkaller\x00'}}, 0x33) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x0, 0x7, 0x8}, @initr0, @exit, @map={0x18, 0x5, 0x1, 0x0, 0x1}, @generic={0x7, 0xe, 0x5, 0x9, 0x3f}]}, &(0x7f0000000180)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x5e583fde90dddb21, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x4, 0x0, 0x7c}, 0x10}, 0x78) 02:01:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3, &(0x7f00000001c0)=0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) 02:01:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5421, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="7f", @ANYRES32=r2, @ANYBLOB="780043a60000010000000003481200a000680000a1299001001414bb6401010089139400000000ac1e0101ac1414aa000080004418f4800000010000009404010044449b81ac1414bb0000f042ac1414bb000000050001010200000002ac14141b80be5b31873b4a4fc66d010000000600000000000000007f000001010400028913f4ac141610169c14aae0000002183200000000000001000000000000"]}) 02:01:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r4, 0x0, &(0x7f0000000380)="6a5e6fa16b5675b6a0382fca50ff39cf302d2c4096744572082daf959156a86770ff2919ba36c6437cf655419754b81b4833c01a96da452919fcb698b2767ed7ab0b9783782fad427eeb294a275c88470eca5e69ddb2637b32a0e18f8da9b262f0d302af9e48fc5d2f1a5c8f72366e9a18f6463e56435d1a", 0x78, 0x10000}, 0x1a87) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) connect$nfc_llcp(r5, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x1, 0x5, 0x4, "fc522392264c8bc32f8f80e9335ecd4c1abd4acec6232b2def3427c285d9397bf79601887a5d4769598cab67c8066dc68ad44e2b31674220e32fa3eb46792c", 0x13}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) accept4$nfc_llcp(r6, &(0x7f0000000440), &(0x7f00000004c0)=0x60, 0x80000) 02:01:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3, &(0x7f00000001c0)=0x80) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) [ 2429.249415][ T8169] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2429.262621][ T8169] ath9k_htc: Failed to initialize the device [ 2429.281331][T19998] usb 2-1: ath9k_htc: USB layer deinitialized 02:01:09 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$gtp(&(0x7f0000000380)='gtp\x00', r7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x3}) [ 2429.294564][ T8165] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2429.357198][ T5882] fuse: Bad value for 'fd' [ 2429.376111][ T5882] fuse: Bad value for 'fd' [ 2429.894858][ T8165] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2429.904139][ T8165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2429.912742][ T8165] usb 5-1: Product: syz [ 2429.917168][ T8165] usb 5-1: Manufacturer: syz [ 2429.921769][ T8165] usb 5-1: SerialNumber: syz [ 2429.974674][ T8165] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2430.584452][ T8165] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2430.996908][ T4813] usb 5-1: USB disconnect, device number 17 02:01:12 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) 02:01:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket(0x28, 0x1, 0xfffff801) socket$inet(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x2, 0x2, 0xa, 0x0, 'syzkaller\x00'}}, 0x33) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x0, 0x7, 0x8}, @initr0, @exit, @map={0x18, 0x5, 0x1, 0x0, 0x1}, @generic={0x7, 0xe, 0x5, 0x9, 0x3f}]}, &(0x7f0000000180)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x5e583fde90dddb21, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x4, 0x0, 0x7c}, 0x10}, 0x78) 02:01:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5421, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 02:01:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) 02:01:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r4, 0x0, &(0x7f0000000380)="6a5e6fa16b5675b6a0382fca50ff39cf302d2c4096744572082daf959156a86770ff2919ba36c6437cf655419754b81b4833c01a96da452919fcb698b2767ed7ab0b9783782fad427eeb294a275c88470eca5e69ddb2637b32a0e18f8da9b262f0d302af9e48fc5d2f1a5c8f72366e9a18f6463e56435d1a", 0x78, 0x10000}, 0x1a87) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) connect$nfc_llcp(r5, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x1, 0x5, 0x4, "fc522392264c8bc32f8f80e9335ecd4c1abd4acec6232b2def3427c285d9397bf79601887a5d4769598cab67c8066dc68ad44e2b31674220e32fa3eb46792c", 0x13}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) accept4$nfc_llcp(r6, &(0x7f0000000440), &(0x7f00000004c0)=0x60, 0x80000) 02:01:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$gtp(&(0x7f0000000380)='gtp\x00', r7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x3}) 02:01:12 executing program 2: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) [ 2431.555392][ T5905] fuse: Bad value for 'fd' 02:01:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket(0x28, 0x1, 0xfffff801) socket$inet(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x2, 0x2, 0xa, 0x0, 'syzkaller\x00'}}, 0x33) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 02:01:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5421, 0x0) pipe2(&(0x7f0000000080), 0x4000) [ 2431.579570][ T5905] fuse: Bad value for 'fd' 02:01:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r4, 0x0, &(0x7f0000000380)="6a5e6fa16b5675b6a0382fca50ff39cf302d2c4096744572082daf959156a86770ff2919ba36c6437cf655419754b81b4833c01a96da452919fcb698b2767ed7ab0b9783782fad427eeb294a275c88470eca5e69ddb2637b32a0e18f8da9b262f0d302af9e48fc5d2f1a5c8f72366e9a18f6463e56435d1a", 0x78, 0x10000}, 0x1a87) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) connect$nfc_llcp(r5, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x1, 0x5, 0x4, "fc522392264c8bc32f8f80e9335ecd4c1abd4acec6232b2def3427c285d9397bf79601887a5d4769598cab67c8066dc68ad44e2b31674220e32fa3eb46792c", 0x13}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 02:01:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) socket(0x28, 0x1, 0xfffff801) socket$inet(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000002c0)={0x33, 0x6, 0x0, {0x2, 0x2, 0xa, 0x0, 'syzkaller\x00'}}, 0x33) 02:01:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$gtp(&(0x7f0000000380)='gtp\x00', r7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x3}) [ 2431.644427][ T8165] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2431.654128][ T8165] ath9k_htc: Failed to initialize the device [ 2431.703530][ T4813] usb 5-1: ath9k_htc: USB layer deinitialized [ 2431.733799][ T5932] fuse: Bad value for 'fd' [ 2431.740262][ T5932] fuse: Bad value for 'fd' [ 2432.094436][ T4813] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2432.694766][ T4813] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2432.704034][ T4813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2432.712549][ T4813] usb 5-1: Product: syz [ 2432.716926][ T4813] usb 5-1: Manufacturer: syz [ 2432.721645][ T4813] usb 5-1: SerialNumber: syz [ 2432.764831][ T4813] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2433.434491][ T4813] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2433.855077][ T8165] usb 5-1: USB disconnect, device number 18 02:01:15 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) 02:01:15 executing program 2: pipe2(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) 02:01:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r4, 0x0, &(0x7f0000000380)="6a5e6fa16b5675b6a0382fca50ff39cf302d2c4096744572082daf959156a86770ff2919ba36c6437cf655419754b81b4833c01a96da452919fcb698b2767ed7ab0b9783782fad427eeb294a275c88470eca5e69ddb2637b32a0e18f8da9b262f0d302af9e48fc5d2f1a5c8f72366e9a18f6463e56435d1a", 0x78, 0x10000}, 0x1a87) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) connect$nfc_llcp(r5, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x1, 0x5, 0x4, "fc522392264c8bc32f8f80e9335ecd4c1abd4acec6232b2def3427c285d9397bf79601887a5d4769598cab67c8066dc68ad44e2b31674220e32fa3eb46792c", 0x13}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 02:01:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5421, 0x0) 02:01:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) socket(0x28, 0x1, 0xfffff801) socket$inet(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 02:01:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="000707870000000200000006430e004c0064000001299078ffffffffac1414aa01442cbc630a01010200000081e00000010000018a0a01010000eb0005ac1414bb00000004ac14140e096c1147008307dbac02000000000000009701b6a1a4767b274ef68e8931d15311d6d00e1ef51f9c5761e597416443883c27ac687851c8759befc669d55f33f08a254979b34bbb859c660cc525fcc99fd4f3075550c87b3bee49f1f69ba53b86e2e750207340475a93dedcda055fd642d0b98c9c24230a11c92cb8db85bfbe1179b64e2ff403cd2db5b84ed78cf1c67dd0e01cd7c4459d0633740a01a474b30b0af5e716bac485c167154516d1b985a56342a3327c12dabf5bec558dd49c8446b21ece3f926a99f064760475c07d4f5dbee12d9d1fd5e7dad64db37ecaab96c2619e3e38338fc249db9c62f39065e0ac86cf6dcd8c6a63abfc18101d69776f0c1799de57405b"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$gtp(&(0x7f0000000380)='gtp\x00', r7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x3}) 02:01:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r4, 0x0, &(0x7f0000000380)="6a5e6fa16b5675b6a0382fca50ff39cf302d2c4096744572082daf959156a86770ff2919ba36c6437cf655419754b81b4833c01a96da452919fcb698b2767ed7ab0b9783782fad427eeb294a275c88470eca5e69ddb2637b32a0e18f8da9b262f0d302af9e48fc5d2f1a5c8f72366e9a18f6463e56435d1a", 0x78, 0x10000}, 0x1a87) r5 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) connect$nfc_llcp(r5, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x1, 0x5, 0x4, "fc522392264c8bc32f8f80e9335ecd4c1abd4acec6232b2def3427c285d9397bf79601887a5d4769598cab67c8066dc68ad44e2b31674220e32fa3eb46792c", 0x13}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2434.433636][ T5956] fuse: Bad value for 'fd' 02:01:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 02:01:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) socket(0x28, 0x1, 0xfffff801) socket$inet(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 02:01:15 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r3, 0x0, &(0x7f0000000380)="6a5e6fa16b5675b6a0382fca50ff39cf302d2c4096744572082daf959156a86770ff2919ba36c6437cf655419754b81b4833c01a96da452919fcb698b2767ed7ab0b9783782fad427eeb294a275c88470eca5e69ddb2637b32a0e18f8da9b262f0d302af9e48fc5d2f1a5c8f72366e9a18f6463e56435d1a", 0x78, 0x10000}, 0x1a87) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) connect$nfc_llcp(r4, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x1, 0x5, 0x4, "fc522392264c8bc32f8f80e9335ecd4c1abd4acec6232b2def3427c285d9397bf79601887a5d4769598cab67c8066dc68ad44e2b31674220e32fa3eb46792c", 0x13}, 0x60) 02:01:15 executing program 2: pipe2(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) [ 2434.458221][ T4813] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2434.467944][ T5956] fuse: Bad value for 'fd' [ 2434.472630][ T4813] ath9k_htc: Failed to initialize the device 02:01:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$gtp(&(0x7f0000000380)='gtp\x00', r7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) [ 2434.510504][ T8165] usb 5-1: ath9k_htc: USB layer deinitialized [ 2434.605790][ T5981] fuse: Bad value for 'fd' [ 2434.611220][ T5981] fuse: Bad value for 'fd' [ 2434.874460][ T8165] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2435.394477][ T8165] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2435.403532][ T8165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.412198][ T8165] usb 5-1: Product: syz [ 2435.416710][ T8165] usb 5-1: Manufacturer: syz [ 2435.421309][ T8165] usb 5-1: SerialNumber: syz [ 2435.465279][ T8165] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2436.124458][ T8165] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2436.535997][ T8169] usb 5-1: USB disconnect, device number 19 02:01:17 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 02:01:17 executing program 2: pipe2(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) 02:01:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) socket(0x28, 0x1, 0xfffff801) socket$inet(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) 02:01:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r3, 0x0, &(0x7f0000000380)="6a5e6fa16b5675b6a0382fca50ff39cf302d2c4096744572082daf959156a86770ff2919ba36c6437cf655419754b81b4833c01a96da452919fcb698b2767ed7ab0b9783782fad427eeb294a275c88470eca5e69ddb2637b32a0e18f8da9b262f0d302af9e48fc5d2f1a5c8f72366e9a18f6463e56435d1a", 0x78, 0x10000}, 0x1a87) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) 02:01:17 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) 02:01:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$gtp(&(0x7f0000000380)='gtp\x00', r7) [ 2437.089367][ T6000] fuse: Bad value for 'fd' 02:01:17 executing program 2: pipe2(&(0x7f0000000100), 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) 02:01:17 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 02:01:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) socket(0x28, 0x1, 0xfffff801) socket$inet(0x2, 0x3, 0x1) [ 2437.113677][ T6000] fuse: Bad value for 'fd' 02:01:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r3, 0x0, &(0x7f0000000380)="6a5e6fa16b5675b6a0382fca50ff39cf302d2c4096744572082daf959156a86770ff2919ba36c6437cf655419754b81b4833c01a96da452919fcb698b2767ed7ab0b9783782fad427eeb294a275c88470eca5e69ddb2637b32a0e18f8da9b262f0d302af9e48fc5d2f1a5c8f72366e9a18f6463e56435d1a", 0x78, 0x10000}, 0x1a87) 02:01:17 executing program 2: pipe2(&(0x7f0000000100), 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) 02:01:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 02:01:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) socket$inet(0x2, 0x3, 0x1) [ 2437.167650][ T8165] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2437.177398][ T8165] ath9k_htc: Failed to initialize the device [ 2437.190491][ T8169] usb 5-1: ath9k_htc: USB layer deinitialized 02:01:17 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 02:01:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 02:01:17 executing program 2: pipe2(&(0x7f0000000100), 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5421, &(0x7f0000000000)={'erspan0\x00', 0x0}) [ 2437.280171][ T6029] fuse: Bad value for 'fd' [ 2437.288110][ T6029] fuse: Bad value for 'fd' [ 2437.564460][ T8169] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2438.084719][ T8169] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2438.093759][ T8169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2438.102640][ T8169] usb 5-1: Product: syz [ 2438.107053][ T8169] usb 5-1: Manufacturer: syz [ 2438.111647][ T8169] usb 5-1: SerialNumber: syz [ 2438.154779][ T8169] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2438.724460][ T8169] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2439.144895][ T8165] usb 5-1: USB disconnect, device number 20 02:01:20 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) 02:01:20 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x3, 0x1) 02:01:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 02:01:20 executing program 0: syz_open_procfs$namespace(0x0, 0x0) 02:01:20 executing program 2: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) 02:01:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 02:01:20 executing program 5: socket$inet(0x2, 0x3, 0x1) [ 2439.716834][ T6058] fuse: Bad value for 'fd' 02:01:20 executing program 2: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) 02:01:20 executing program 0: syz_open_procfs$namespace(0x0, 0x0) [ 2439.740825][ T6058] fuse: Bad value for 'fd' 02:01:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x415c, &(0x7f0000000280)={0x0, 0x84b5, 0x1, 0x1, 0xa5}, &(0x7f0000fa9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 02:01:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) 02:01:20 executing program 5: socket$inet(0x2, 0x0, 0x1) [ 2439.804434][ T8169] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2439.813880][ T8169] ath9k_htc: Failed to initialize the device [ 2439.836460][ T6072] fuse: Bad value for 'fd' [ 2439.844506][ T6072] fuse: Bad value for 'fd' [ 2439.851791][ T8165] usb 5-1: ath9k_htc: USB layer deinitialized [ 2440.244434][ T8165] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2440.764867][ T8165] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2440.773982][ T8165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2440.782653][ T8165] usb 5-1: Product: syz [ 2440.787189][ T8165] usb 5-1: Manufacturer: syz [ 2440.791768][ T8165] usb 5-1: SerialNumber: syz [ 2440.834731][ T8165] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2441.404680][ T8165] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2441.826768][T19998] usb 5-1: USB disconnect, device number 21 02:01:23 executing program 5: socket$inet(0x2, 0x0, 0x1) 02:01:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 02:01:23 executing program 0: syz_open_procfs$namespace(0x0, 0x0) 02:01:23 executing program 2: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) 02:01:23 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:23 executing program 4: syz_open_procfs$namespace(0x0, 0x0) [ 2442.370750][ T6097] fuse: Bad value for 'fd' [ 2442.383403][ T6097] fuse: Bad value for 'fd' 02:01:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 02:01:23 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[@ANYBLOB]) 02:01:23 executing program 5: socket$inet(0x2, 0x0, 0x1) 02:01:23 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:23 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:23 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000000180)=ANY=[]) [ 2442.444480][ T8165] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2442.453474][ T8165] ath9k_htc: Failed to initialize the device [ 2442.468663][T19998] usb 5-1: ath9k_htc: USB layer deinitialized 02:01:23 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:23 executing program 5: socket$inet(0x2, 0x3, 0x0) [ 2442.547843][ T6135] fuse: Bad value for 'fd' 02:01:23 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = io_uring_setup(0x3ef6, &(0x7f0000000000)={0x0, 0xea11, 0x1, 0x3, 0x2c4}) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:23 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 2442.590019][ T6135] fuse: Bad value for 'fd' 02:01:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 02:01:23 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:23 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 2442.718790][ T6168] fuse: Bad value for 'fd' [ 2442.727579][ T6168] fuse: Bad value for 'fd' [ 2442.764811][ T3700] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2442.934442][T19998] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2443.314504][ T3700] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2443.323666][ T3700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.333919][ T3700] usb 3-1: Product: syz [ 2443.338510][ T3700] usb 3-1: Manufacturer: syz [ 2443.343489][ T3700] usb 3-1: SerialNumber: syz [ 2443.386959][ T3700] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2443.494459][T19998] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2443.503529][T19998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.512252][T19998] usb 5-1: Product: syz [ 2443.517003][T19998] usb 5-1: Manufacturer: syz [ 2443.521630][T19998] usb 5-1: SerialNumber: syz [ 2443.564869][T19998] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2443.954482][ T3700] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2444.244480][T19998] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2444.375385][ T8165] usb 3-1: USB disconnect, device number 123 [ 2444.675328][T10190] usb 5-1: USB disconnect, device number 22 02:01:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:25 executing program 5: socket$inet(0x2, 0x3, 0x0) 02:01:25 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:25 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 2445.004453][ T3700] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2445.012984][ T3700] ath9k_htc: Failed to initialize the device [ 2445.019615][ T8165] usb 3-1: ath9k_htc: USB layer deinitialized 02:01:25 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)) write$FUSE_LK(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, {{0x99, 0x9, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x9}}, 0x18) 02:01:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 02:01:25 executing program 5: socket$inet(0x2, 0x3, 0x0) 02:01:25 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:25 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:25 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2445.256721][ T6218] fuse: Bad value for 'fd' 02:01:25 executing program 3: syz_io_uring_setup(0x8a2, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = geteuid() syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) [ 2445.285652][ T6218] fuse: Bad value for 'fd' 02:01:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x29, 0x5, 0xfffffffe) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) socket$inet(0x2, 0x5, 0x5) 02:01:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400082, &(0x7f0000000580)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize'}}], [{@audit='audit'}]}}) 02:01:26 executing program 3: syz_io_uring_setup(0x8a2, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = geteuid() syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x29, 0x5, 0xfffffffe) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) socket$inet(0x2, 0x5, 0x5) [ 2445.324706][T19998] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2445.333972][T19998] ath9k_htc: Failed to initialize the device [ 2445.355161][T10190] usb 5-1: ath9k_htc: USB layer deinitialized 02:01:26 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xd57f, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 2445.449916][ T6244] fuse: Bad value for 'fd' 02:01:26 executing program 3: syz_io_uring_setup(0x8a2, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:26 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000000)=0x10d0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x541b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2445.470442][ T6244] fuse: Bad value for 'fd' 02:01:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, &(0x7f0000000840)) 02:01:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = geteuid() syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:26 executing program 0: syz_io_uring_setup(0x8a2, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x29, 0x5, 0xfffffffe) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) socket$inet(0x2, 0x5, 0x5) 02:01:26 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 2445.582143][ T6267] fuse: Bad value for 'fd' 02:01:26 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000000)=0x10d0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x541b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="000707870000000200000006430e004c0064000001299078ffffffffac1414aa01442cbc630a01010200000081e00000010000018a0a01010000eb0005ac1414bb00000004ac14140e096c1147008307dbac02000000000000009701b6a1a4767b274ef68e8931d15311d6d00e1ef51f9c5761e597416443883c27ac687851c8759befc669d55f33f08a254979b34bbb859c660cc525fcc99fd4f3075550c87b3bee49f1f69ba53b86e2e750207340475a93dedcda055fd642d0b98c9c24230a11c92cb8db85bfbe1179b64e2ff403cd2db5b84ed78cf1c67dd0e01cd7c4459d0633740a01a474b30b0af5e716bac485c167154516d1b985a56342a3327c12dabf5bec558dd49c8446b21ece3f926a99f064760475c07d4f5dbee12d9d1fd5e7dad64db37ecaab96c2619e3e38338fc249db9c62f39065e0ac86cf6dcd8c6a63abfc18101d69776f0c1799de57405b"]}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x200, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESHEX, @ANYRES64=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r3, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x29, 0x5, 0xfffffffe) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) socket$inet(0x2, 0x5, 0x5) 02:01:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:26 executing program 0: syz_io_uring_setup(0x8a2, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:26 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 2445.702649][ T6286] fuse: Bad value for 'fd' 02:01:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESHEX, @ANYRES64=r1, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:26 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000000)=0x10d0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x541b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:26 executing program 0: syz_io_uring_setup(0x8a2, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x29, 0x5, 0xfffffffe) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:26 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 2445.838933][ T6306] fuse: Bad value for 'fd' 02:01:26 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:26 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000000)=0x10d0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 02:01:26 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x29, 0x5, 0xfffffffe) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:01:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:26 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x0, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:26 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000000)=0x10d0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:26 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:26 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:26 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x29, 0x5, 0xfffffffe) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 2446.000425][ T6326] fuse: Bad value for 'fd' 02:01:26 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:26 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x29, 0x5, 0xfffffffe) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 02:01:26 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:26 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000240)) 02:01:26 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:26 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:26 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x29, 0x5, 0xfffffffe) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) [ 2446.163105][ T6350] fuse: Bad value for 'fd' 02:01:26 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000240)) 02:01:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="424ede677274617030000000000000000002cbbb585596a3c504f700e8a293f14b9e8198931f14b26f7e4916d7215b67d378163c", @ANYRES32=0x0, @ANYBLOB="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"]}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:26 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:26 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f, 0x0, 0x0, 0x2d6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 02:01:26 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:26 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket(0x29, 0x5, 0xfffffffe) 02:01:26 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000240)) 02:01:27 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:27 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:27 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 2446.318197][ T6370] fuse: Bad value for 'fd' 02:01:27 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), 0x0) 02:01:27 executing program 2: socket(0x29, 0x5, 0xfffffffe) 02:01:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:27 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000240)) 02:01:27 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:27 executing program 2: socket(0x0, 0x5, 0xfffffffe) 02:01:27 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:27 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000240)) [ 2446.492438][ T6400] fuse: Bad value for 'fd' 02:01:27 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), 0x0) 02:01:27 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:27 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:27 executing program 2: socket(0x0, 0x5, 0xfffffffe) 02:01:27 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:27 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000240)) 02:01:27 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), 0x0) 02:01:27 executing program 2: socket(0x0, 0x5, 0xfffffffe) 02:01:27 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) [ 2446.648005][ T6422] fuse: Bad value for 'fd' 02:01:27 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:27 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:27 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), 0x0) 02:01:27 executing program 2: socket(0x29, 0x0, 0xfffffffe) 02:01:27 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:27 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), 0x0) 02:01:27 executing program 5: r0 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:27 executing program 2: socket(0x29, 0x0, 0xfffffffe) 02:01:27 executing program 3: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000240)) 02:01:27 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:27 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:27 executing program 2: socket(0x29, 0x0, 0xfffffffe) 02:01:27 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:27 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:27 executing program 0: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), 0x0) 02:01:27 executing program 2: socket(0x29, 0x5, 0x0) 02:01:27 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2446.979899][ T6471] fuse: Bad value for 'fd' 02:01:27 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:27 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:27 executing program 2: socket(0x29, 0x5, 0x0) 02:01:27 executing program 0: socket(0x29, 0x5, 0x0) 02:01:27 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) [ 2447.090376][ T6483] fuse: Bad value for 'fd' 02:01:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:27 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:27 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:27 executing program 2: socket(0x29, 0x5, 0x0) 02:01:27 executing program 0: socket(0x29, 0x5, 0x0) 02:01:27 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:27 executing program 5: r0 = syz_io_uring_setup(0x3af9, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:27 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2447.238350][ T6497] fuse: Bad value for 'fd' 02:01:27 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, 0x0) 02:01:27 executing program 2: syz_io_uring_setup(0x8a2, &(0x7f0000000180)={0x0, 0xd57f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000200), 0x0) 02:01:27 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',fsname=)*-).}+,\x00']) 02:01:28 executing program 0: socket(0x29, 0x5, 0x0) 02:01:28 executing program 5: r0 = syz_io_uring_setup(0x3af9, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:28 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, 0x0) [ 2447.386948][ T6518] fuse: Bad value for 'fd' 02:01:28 executing program 0: socket(0x0, 0x5, 0x0) 02:01:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 5: r0 = syz_io_uring_setup(0x3af9, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:28 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:01:28 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, 0x0) 02:01:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 0: socket(0x0, 0x5, 0x0) 02:01:28 executing program 5: r0 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xa7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:28 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:01:28 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 5: r0 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xa7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:28 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:01:28 executing program 0: socket(0x0, 0x5, 0x0) 02:01:28 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 5: r0 = syz_io_uring_setup(0x3af9, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:28 executing program 0: socket(0x29, 0x0, 0x0) 02:01:28 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:28 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<', @ANYRESDEC]) 02:01:28 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfsdef={'smackfsdef'}}]}}) 02:01:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108907, 0x0) 02:01:28 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 5: r0 = syz_io_uring_setup(0x3af9, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:28 executing program 0: socket(0x29, 0x0, 0x0) [ 2447.868221][ T6578] fuse: Bad value for 'fd' 02:01:28 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC, @ANYBLOB=',fowner<']) 02:01:28 executing program 0: socket(0x29, 0x0, 0x0) 02:01:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0xe, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) 02:01:28 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) 02:01:28 executing program 5: r0 = syz_io_uring_setup(0x3af9, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:28 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0xe, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) [ 2448.029420][ T6596] fuse: Bad value for 'fd' 02:01:28 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<', @ANYRESDEC]) 02:01:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 5: r0 = syz_io_uring_setup(0x3af9, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:28 executing program 4: syz_mount_image$fuse(&(0x7f00000000c0)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1260046, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 02:01:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0xe, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) 02:01:28 executing program 5: r0 = syz_io_uring_setup(0x3af9, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:28 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x80108906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2448.219269][ T6618] fuse: Bad value for 'fd' 02:01:28 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0xe, 0x84) 02:01:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108906, 0x0) 02:01:28 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',max_read=0x0000000000000008,allow_other,default_permissions,blksize=0x0000000000000200,allow_other,blksize=0x0000000000001e00,blksize=0x0000000000000200,allow_other,seclabel,euid<']) 02:01:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x700, 0x6, 0xfffb}, 0x8) getsockname(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000100)=@raw=[@alu={0x4, 0x1, 0x5, 0x6, 0x3, 0x6, 0xfffffffffffffff0}, @exit, @generic={0x89, 0x4, 0x6, 0x3, 0x4}, @ldst={0x1, 0x1, 0x0, 0x9, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3ff}, @alu={0x7, 0x0, 0x3, 0x0, 0xa, 0x10, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1020}, @jmp={0x5, 0x1, 0x6, 0x6, 0x9, 0xffffffffffffffff, 0x10}, @generic={0x1f, 0xf, 0x7, 0x400}], &(0x7f0000000180)='GPL\x00', 0x20, 0x1a, &(0x7f00000001c0)=""/26, 0x41100, 0x0, [], r3, 0x0, r4, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xc, 0x461a, 0x8}, 0x10, 0x7587, r5}, 0x78) 02:01:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 5: r0 = syz_io_uring_setup(0x3af9, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 5: r0 = syz_io_uring_setup(0x3af9, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:29 executing program 3: socket$inet6_sctp(0xa, 0xe, 0x84) 02:01:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2448.403698][ T6649] fuse: Bad value for 'fd' 02:01:29 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC]) 02:01:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x700, 0x6, 0xfffb}, 0x8) getsockname(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000100)=@raw=[@alu={0x4, 0x1, 0x5, 0x6, 0x3, 0x6, 0xfffffffffffffff0}, @exit, @generic={0x89, 0x4, 0x6, 0x3, 0x4}, @ldst={0x1, 0x1, 0x0, 0x9, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3ff}, @alu={0x7, 0x0, 0x3, 0x0, 0xa, 0x10, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1020}, @jmp={0x5, 0x1, 0x6, 0x6, 0x9, 0xffffffffffffffff, 0x10}, @generic={0x1f, 0xf, 0x7, 0x400}], &(0x7f0000000180)='GPL\x00', 0x20, 0x1a, &(0x7f00000001c0)=""/26, 0x41100, 0x0, [], r3, 0x0, r4, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xc, 0x461a, 0x8}, 0x10, 0x7587, r5}, 0x78) 02:01:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 5: syz_io_uring_setup(0x3af9, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:29 executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) 02:01:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x700, 0x6, 0xfffb}, 0x8) getsockname(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000100)=@raw=[@alu={0x4, 0x1, 0x5, 0x6, 0x3, 0x6, 0xfffffffffffffff0}, @exit, @generic={0x89, 0x4, 0x6, 0x3, 0x4}, @ldst={0x1, 0x1, 0x0, 0x9, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3ff}, @alu={0x7, 0x0, 0x3, 0x0, 0xa, 0x10, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1020}, @jmp={0x5, 0x1, 0x6, 0x6, 0x9, 0xffffffffffffffff, 0x10}, @generic={0x1f, 0xf, 0x7, 0x400}], &(0x7f0000000180)='GPL\x00', 0x20, 0x1a, &(0x7f00000001c0)=""/26, 0x41100, 0x0, [], r3, 0x0, r4, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xc, 0x461a, 0x8}, 0x10, 0x7587, r5}, 0x78) 02:01:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2448.540233][ T6663] fuse: Bad value for 'fd' 02:01:29 executing program 5: syz_io_uring_setup(0x3af9, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYBLOB=',group_id=']) 02:01:29 executing program 5: syz_io_uring_setup(0x3af9, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2b, 'rdma'}, {0x2d, 'io'}, {0x2b, 'rdma'}]}, 0x10) 02:01:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x700, 0x6, 0xfffb}, 0x8) getsockname(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f00000002c0), 0x0) 02:01:29 executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) 02:01:29 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2448.683651][ T6683] fuse: Bad value for 'fd' 02:01:29 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX, @ANYRES64]) 02:01:29 executing program 5: r0 = syz_io_uring_setup(0x3af9, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_subtree(r0, 0x0, 0x0) 02:01:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x700, 0x6, 0xfffb}, 0x8) getsockname(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 02:01:29 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2448.804212][ T6704] fuse: Bad value for 'fd' 02:01:29 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESHEX]) 02:01:29 executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) 02:01:29 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x700, 0x6, 0xfffb}, 0x8) getsockname(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 02:01:29 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2448.945440][ T6718] fuse: Bad value for 'fd' 02:01:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x700, 0x6, 0xfffb}, 0x8) getsockname(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:29 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) 02:01:29 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2449.105268][ T6742] fuse: Bad value for 'fd' 02:01:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x700, 0x6, 0xfffb}, 0x8) getsockname(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x80) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:29 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) 02:01:29 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x700, 0x6, 0xfffb}, 0x8) getsockname(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) [ 2449.218582][ T6755] fuse: Bad value for 'fd' 02:01:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, 0x0) 02:01:29 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) 02:01:29 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x200, 0x700, 0x6, 0xfffb}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, 0x0) 02:01:30 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, 0x0) [ 2449.379839][ T6771] fuse: Bad value for 'fd' 02:01:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, 0x0) 02:01:30 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) 02:01:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, 0x0) 02:01:30 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) [ 2449.491746][ T6786] fuse: Bad value for 'fd' 02:01:30 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) 02:01:30 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, 0x0) 02:01:30 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, 0x0) 02:01:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) [ 2449.623387][ T6801] fuse: Bad value for 'fd' 02:01:30 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, 0x0) 02:01:30 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) 02:01:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, 0x0) 02:01:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, 0x0) 02:01:30 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, 0x0) 02:01:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, 0x0) 02:01:30 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX, @ANYRESHEX]) [ 2449.794296][ T6818] fuse: Bad value for 'fd' 02:01:30 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:30 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, 0x0) 02:01:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, 0x0) 02:01:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, 0x0) [ 2449.882005][ T6827] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' 02:01:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, 0x0) 02:01:30 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX, @ANYRESHEX]) 02:01:30 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, 0x0) 02:01:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, 0x0) 02:01:30 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, 0x0) 02:01:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:30 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, 0x0) 02:01:30 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX, @ANYRESHEX]) [ 2450.054816][ T6849] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' 02:01:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, 0x0) 02:01:30 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, 0x0) 02:01:30 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, 0x0) 02:01:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, 0x0) 02:01:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:30 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, 0x0) 02:01:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, 0x0) 02:01:30 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, 0x0) [ 2450.204136][ T6867] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' 02:01:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:30 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX]) 02:01:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, 0x0) 02:01:30 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, 0x0) 02:01:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89a0, 0x0) 02:01:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, 0x0) 02:01:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2450.386212][ T6890] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' 02:01:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8983, 0x0) 02:01:31 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX]) 02:01:31 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, 0x0) 02:01:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8954, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8953, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2450.552879][ T6911] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' 02:01:31 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX]) 02:01:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8954, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, 0x0) 02:01:31 executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:01:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8953, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, 0x0) 02:01:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8954, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2450.680390][ T6927] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' 02:01:31 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRESHEX]) 02:01:31 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 02:01:31 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8953, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 02:01:31 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, 0x0) [ 2450.835310][ T6944] fuse: Unknown parameter 'fd0xffffffffffffffff0xffffffffffffffff' 02:01:31 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 02:01:31 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRESHEX]) 02:01:31 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, 0x0) 02:01:31 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x894c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2450.986238][ T6962] fuse: Unknown parameter 'fd0xffffffffffffffff0xffffffffffffffff' 02:01:31 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 1: syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRESHEX]) 02:01:31 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, 0x0) 02:01:31 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x894c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2451.110780][ T6975] fuse: Unknown parameter 'fd0xffffffffffffffff0xffffffffffffffff' 02:01:31 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8955, 0x0) 02:01:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8940, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x894c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8940, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891c, 0x0) 02:01:32 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8940, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8954, 0x0) 02:01:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891c, 0x0) 02:01:32 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891c, 0x0) 02:01:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8953, 0x0) 02:01:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8934, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8934, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8934, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x894c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x894c, 0x0) 02:01:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8940, 0x0) 02:01:32 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891a, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, 0x0) 02:01:33 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8934, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, 0x0) 02:01:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891a, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8934, 0x0) 02:01:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, 0x0) 02:01:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891a, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8934, 0x0) 02:01:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, 0x0) 02:01:33 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8934, 0x0) 02:01:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, 0x0) 02:01:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, 0x0) 02:01:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891b, 0x0) 02:01:33 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8919, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, 0x0) 02:01:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, 0x0) 02:01:33 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, 0x0) 02:01:33 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891b, 0x0) 02:01:33 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, 0x0) 02:01:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8919, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891b, 0x0) 02:01:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, 0x0) 02:01:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) r1 = socket(0x18, 0x2, 0xfffffffa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x40, 0x80, 0x800, 0xaaf2, {{0x28, 0x4, 0x1, 0x9, 0xa0, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0x97, [@local]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xd2, 0x3, 0x7, [{@local, 0x84d8}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1ff}, {@local, 0x42}, {@broadcast, 0x7}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0xc, 0x7e, 0x1, 0x1, [{@multicast2}]}, @timestamp_prespec={0x44, 0x1c, 0x4e, 0x3, 0x5, [{@private=0xa010101, 0x6}, {@private=0xa010101, 0x8}, {@broadcast, 0xfffffffa}]}, @rr={0x7, 0x2b, 0xc5, [@multicast2, @multicast2, @multicast2, @local, @multicast1, @private=0xa010100, @loopback, @remote, @multicast1, @multicast2]}]}}}}}) 02:01:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8919, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) r1 = socket(0x18, 0x2, 0xfffffffa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x40, 0x80, 0x800, 0xaaf2, {{0x28, 0x4, 0x1, 0x9, 0xa0, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0x97, [@local]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xd2, 0x3, 0x7, [{@local, 0x84d8}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1ff}, {@local, 0x42}, {@broadcast, 0x7}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0xc, 0x7e, 0x1, 0x1, [{@multicast2}]}, @timestamp_prespec={0x44, 0x1c, 0x4e, 0x3, 0x5, [{@private=0xa010101, 0x6}, {@private=0xa010101, 0x8}, {@broadcast, 0xfffffffa}]}, @rr={0x7, 0x2b, 0xc5, [@multicast2, @multicast2, @multicast2, @local, @multicast1, @private=0xa010100, @loopback, @remote, @multicast1, @multicast2]}]}}}}}) 02:01:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0xfffffffc, 0x1, 0x3, 0xab, 0x0, r0}, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)={0xe6, ""/230}) r1 = socket(0x3, 0x80000, 0xf80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x7fff, 0x1, 0x1, 0x8}, 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x400000, 0x20, 0x3, 0x17b, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x5452, 0x0) 02:01:33 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, 0x0) 02:01:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, 0x0) 02:01:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) r1 = socket(0x18, 0x2, 0xfffffffa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x40, 0x80, 0x800, 0xaaf2, {{0x28, 0x4, 0x1, 0x9, 0xa0, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0x97, [@local]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xd2, 0x3, 0x7, [{@local, 0x84d8}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1ff}, {@local, 0x42}, {@broadcast, 0x7}, {@remote, 0x1}]}, @timestamp_addr={0x44, 0xc, 0x7e, 0x1, 0x1, [{@multicast2}]}, @timestamp_prespec={0x44, 0x1c, 0x4e, 0x3, 0x5, [{@private=0xa010101, 0x6}, {@private=0xa010101, 0x8}, {@broadcast, 0xfffffffa}]}, @rr={0x7, 0x2b, 0xc5, [@multicast2, @multicast2, @multicast2, @local, @multicast1, @private=0xa010100, @loopback, @remote, @multicast1, @multicast2]}]}}}}}) 02:01:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891a, 0x0) 02:01:33 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, 0x0) 02:01:34 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, 0x0) 02:01:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) socket(0x18, 0x2, 0xfffffffa) 02:01:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0xfffffffc, 0x1, 0x3, 0xab, 0x0, r0}, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)={0xe6, ""/230}) r1 = socket(0x3, 0x80000, 0xf80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x7fff, 0x1, 0x1, 0x8}, 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x400000, 0x20, 0x3, 0x17b, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x5452, 0x0) 02:01:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891a, 0x0) 02:01:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, 0x0) 02:01:34 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0xfffffffc, 0x1, 0x3, 0xab, 0x0, r0}, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)={0xe6, ""/230}) r1 = socket(0x3, 0x80000, 0xf80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x7fff, 0x1, 0x1, 0x8}, 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x400000, 0x20, 0x3, 0x17b, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x5452, 0x0) 02:01:34 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, 0x0) 02:01:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, 0x0) socket(0x18, 0x2, 0xfffffffa) 02:01:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891a, 0x0) 02:01:34 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8935, 0x0) 02:01:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0xfffffffc, 0x1, 0x3, 0xab, 0x0, r0}, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)={0xe6, ""/230}) r1 = socket(0x3, 0x80000, 0xf80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x7fff, 0x1, 0x1, 0x8}, 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x400000, 0x20, 0x3, 0x17b, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) 02:01:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, 0x0) 02:01:34 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:34 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) socket(0x18, 0x2, 0xfffffffa) 02:01:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8918, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0xfffffffc, 0x1, 0x3, 0xab, 0x0, r0}, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)={0xe6, ""/230}) r1 = socket(0x3, 0x80000, 0xf80) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x7fff, 0x1, 0x1, 0x8}, 0x8) 02:01:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}, {0x40, 0x4, 0x3f, 0x5a}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r0, 0x4}) 02:01:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, 0x0) 02:01:34 executing program 3: socket(0x18, 0x2, 0xfffffffa) 02:01:34 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}, {0x40, 0x4, 0x3f, 0x5a}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r0, 0x4}) 02:01:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0xfffffffc, 0x1, 0x3, 0xab, 0x0, r0}, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)={0xe6, ""/230}) socket(0x3, 0x80000, 0xf80) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 02:01:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8918, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, 0x0) 02:01:34 executing program 3: socket(0x0, 0x2, 0xfffffffa) 02:01:34 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}, {0x40, 0x4, 0x3f, 0x5a}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r0, 0x4}) 02:01:34 executing program 3: socket(0x0, 0x2, 0xfffffffa) 02:01:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0xfffffffc, 0x1, 0x3, 0xab, 0x0, r0}, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000200)={0xe6, ""/230}) socket(0x3, 0x80000, 0xf80) 02:01:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8918, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:34 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, 0x0) 02:01:34 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}, {0x40, 0x4, 0x3f, 0x5a}]}) 02:01:34 executing program 3: socket(0x0, 0x2, 0xfffffffa) 02:01:34 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, 0x0) 02:01:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8919, 0x0) 02:01:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0xfffffffc, 0x1, 0x3, 0xab, 0x0, r0}, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) socket(0x3, 0x80000, 0xf80) 02:01:34 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:34 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}, {0x40, 0x4, 0x3f, 0x5a}]}) 02:01:34 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, 0x0) 02:01:34 executing program 3: socket(0x18, 0x0, 0xfffffffa) 02:01:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8919, 0x0) 02:01:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socket(0x3, 0x80000, 0xf80) 02:01:34 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}, {0x40, 0x4, 0x3f, 0x5a}]}) 02:01:34 executing program 3: socket(0x18, 0x0, 0x0) 02:01:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8919, 0x0) 02:01:34 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket(0x3, 0x80000, 0xf80) 02:01:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, 0x0) 02:01:34 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}, {0x40, 0x4, 0x3f, 0x5a}]}) 02:01:34 executing program 3: socket(0x18, 0x0, 0x0) 02:01:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8917, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 0: socket(0x3, 0x80000, 0xf80) 02:01:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, 0x0) 02:01:35 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:01:35 executing program 0: socket(0x0, 0x80000, 0xf80) 02:01:35 executing program 3: socket(0x18, 0x0, 0x0) 02:01:35 executing program 0: socket(0x0, 0x80000, 0xf80) 02:01:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8917, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:01:35 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8912, 0x0) 02:01:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 0: socket(0x0, 0x80000, 0xf80) 02:01:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:01:35 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8901, 0x0) 02:01:35 executing program 0: socket(0x3, 0x0, 0xf80) 02:01:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8918, 0x0) 02:01:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:01:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8917, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8901, 0x0) 02:01:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:01:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8918, 0x0) 02:01:35 executing program 0: socket(0x3, 0x0, 0x0) 02:01:35 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8917, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:01:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8901, 0x0) 02:01:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8918, 0x0) 02:01:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}]}) 02:01:35 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8917, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 0: socket(0x3, 0x0, 0x0) 02:01:35 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8901, 0x0) 02:01:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890d, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}]}) 02:01:35 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8917, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 0: socket(0x3, 0x0, 0x0) 02:01:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890d, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8901, 0x0) 02:01:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8917, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}]}) 02:01:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890d, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8901, 0x0) 02:01:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}, {0x0, 0x4, 0x3f, 0x5a}]}) 02:01:35 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8917, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8901, 0x0) 02:01:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8917, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}, {0x0, 0x0, 0x3f, 0x5a}]}) 02:01:36 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8901, 0x0) 02:01:36 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8917, 0x0) 02:01:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8901, 0x0) 02:01:36 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x5a}]}) 02:01:36 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8917, 0x0) 02:01:36 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x1, 0x40, 0x0, 0x40}, {}]}) 02:01:36 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, 0x0) 02:01:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8917, 0x0) 02:01:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, 0x0) 02:01:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {}]}) 02:01:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, 0x0) 02:01:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {}]}) 02:01:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890d, 0x0) 02:01:36 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {}]}) 02:01:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x0, 0x40, 0x0, 0x40}, {}]}) 02:01:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {0x0, 0x0, 0x0, 0x40}, {}]}) 02:01:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:37 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x6, 0x52, 0x5, 0xfff}, {}, {}]}) 02:01:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {}, {}]}) 02:01:37 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {}, {}]}) 02:01:37 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890b, 0x0) 02:01:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:37 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {}, {}]}) 02:01:37 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, 0x0) 02:01:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890b, 0x0) 02:01:37 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x0, 0x52, 0x5, 0xfff}, {}, {}]}) 02:01:37 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8907, 0x0) 02:01:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890b, 0x0) 02:01:37 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, 0x0) 02:01:37 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x0, 0x0, 0x5, 0xfff}, {}, {}]}) 02:01:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8906, 0x0) 02:01:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, 0x0) 02:01:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, 0x0) 02:01:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {0x0, 0x0, 0x0, 0xfff}, {}, {}]}) 02:01:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, 0x0) 02:01:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, 0x0) 02:01:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x3, 0x3, 0x4}, {}, {}, {}]}) 02:01:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, 0x0) 02:01:37 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, 0x0) 02:01:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {}, {}, {}]}) 02:01:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:37 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, 0x0) 02:01:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, 0x0) 02:01:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {}, {}, {}]}) 02:01:38 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, 0x0) 02:01:38 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {}, {}, {}]}) 02:01:38 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:38 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, 0x0) [ 2457.470913][ T7810] FAULT_INJECTION: forcing a failure. [ 2457.470913][ T7810] name failslab, interval 1, probability 0, space 0, times 0 02:01:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x0, 0x3, 0x4}, {}, {}, {}]}) [ 2457.535087][ T7810] CPU: 1 PID: 7810 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller #0 [ 2457.543800][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.553861][ T7810] Call Trace: [ 2457.557144][ T7810] dump_stack+0x137/0x19d [ 2457.561487][ T7810] should_fail+0x23c/0x250 [ 2457.565977][ T7810] __should_failslab+0x81/0x90 [ 2457.570764][ T7810] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2457.576576][ T7810] should_failslab+0x5/0x20 [ 2457.581104][ T7810] __kmalloc+0x66/0x380 [ 2457.585318][ T7810] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 2457.590965][ T7810] ? __rcu_read_unlock+0x5c/0x250 [ 2457.596044][ T7810] tomoyo_realpath_from_path+0x98/0x3b0 [ 2457.601718][ T7810] tomoyo_path_number_perm+0xc1/0x2d0 [ 2457.607211][ T7810] ? __rcu_read_unlock+0x5c/0x250 [ 2457.612256][ T7810] tomoyo_file_ioctl+0x1c/0x20 [ 2457.617112][ T7810] security_file_ioctl+0x45/0x90 [ 2457.622089][ T7810] __se_sys_ioctl+0x48/0x140 [ 2457.626744][ T7810] __x64_sys_ioctl+0x3f/0x50 [ 2457.631448][ T7810] do_syscall_64+0x39/0x80 [ 2457.635883][ T7810] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2457.641800][ T7810] RIP: 0033:0x466459 [ 2457.645699][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.665344][ T7810] RSP: 002b:00007f1eea08e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2457.673772][ T7810] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:01:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {0x0, 0x0, 0x4}, {}, {}, {}]}) 02:01:38 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, 0x0) 02:01:38 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5, 0x8, 0x3}, {}, {}, {}, {}]}) 02:01:38 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, 0x0) [ 2457.681895][ T7810] RDX: 0000000000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 2457.689880][ T7810] RBP: 00007f1eea08e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.697862][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2457.705873][ T7810] R13: 00007ffc594f265f R14: 00007f1eea08e300 R15: 0000000000022000 02:01:38 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:38 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) 02:01:38 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, 0x0) [ 2457.812300][ T7810] ERROR: Out of memory at tomoyo_realpath_from_path. 02:01:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, 0x0) 02:01:38 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2457.915871][ T7851] FAULT_INJECTION: forcing a failure. [ 2457.915871][ T7851] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.944258][ T7851] CPU: 0 PID: 7851 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller #0 [ 2457.952976][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.963036][ T7851] Call Trace: 02:01:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2457.966319][ T7851] dump_stack+0x137/0x19d [ 2457.970664][ T7851] should_fail+0x23c/0x250 [ 2457.975102][ T7851] __should_failslab+0x81/0x90 [ 2457.979876][ T7851] ? tomoyo_encode2+0x1d3/0x350 [ 2457.984851][ T7851] should_failslab+0x5/0x20 [ 2457.989370][ T7851] __kmalloc+0x66/0x380 [ 2457.993610][ T7851] tomoyo_encode2+0x1d3/0x350 [ 2457.998358][ T7851] ? sock_free_inode+0x30/0x30 [ 2458.003240][ T7851] tomoyo_realpath_from_path+0x35e/0x3b0 [ 2458.008891][ T7851] tomoyo_path_number_perm+0xc1/0x2d0 02:01:38 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, 0x0) [ 2458.014313][ T7851] ? __rcu_read_unlock+0x5c/0x250 [ 2458.019368][ T7851] tomoyo_file_ioctl+0x1c/0x20 [ 2458.024150][ T7851] security_file_ioctl+0x45/0x90 [ 2458.029112][ T7851] __se_sys_ioctl+0x48/0x140 [ 2458.033845][ T7851] __x64_sys_ioctl+0x3f/0x50 [ 2458.038453][ T7851] do_syscall_64+0x39/0x80 [ 2458.042876][ T7851] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2458.048792][ T7851] RIP: 0033:0x466459 02:01:38 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2458.052763][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.072421][ T7851] RSP: 002b:00007f1eea08e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.080976][ T7851] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2458.088958][ T7851] RDX: 0000000000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 2458.096959][ T7851] RBP: 00007f1eea08e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.104940][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2458.113093][ T7851] R13: 00007ffc594f265f R14: 00007f1eea08e300 R15: 0000000000022000 02:01:38 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:38 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) 02:01:38 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8904, 0x0) 02:01:38 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2458.140272][ T7851] ERROR: Out of memory at tomoyo_realpath_from_path. 02:01:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, 0x0) 02:01:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:38 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) 02:01:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) [ 2458.255497][ T7876] FAULT_INJECTION: forcing a failure. [ 2458.255497][ T7876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2458.303702][ T7876] CPU: 0 PID: 7876 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller #0 [ 2458.312419][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.322512][ T7876] Call Trace: [ 2458.325839][ T7876] dump_stack+0x137/0x19d [ 2458.330179][ T7876] should_fail+0x23c/0x250 [ 2458.334615][ T7876] should_fail_usercopy+0x16/0x20 [ 2458.339652][ T7876] _copy_from_user+0x1c/0xd0 [ 2458.344359][ T7876] inet_ioctl+0xa5/0x290 [ 2458.348615][ T7876] sock_do_ioctl+0x4d/0x210 02:01:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) [ 2458.353126][ T7876] ? sock_poll+0x260/0x260 [ 2458.357566][ T7876] sock_ioctl+0x321/0x510 [ 2458.361949][ T7876] ? tomoyo_file_ioctl+0x1c/0x20 [ 2458.367046][ T7876] ? sock_poll+0x260/0x260 [ 2458.371510][ T7876] __se_sys_ioctl+0xcb/0x140 [ 2458.376172][ T7876] __x64_sys_ioctl+0x3f/0x50 [ 2458.380818][ T7876] do_syscall_64+0x39/0x80 [ 2458.385249][ T7876] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2458.391159][ T7876] RIP: 0033:0x466459 [ 2458.395053][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.414674][ T7876] RSP: 002b:00007f1eea08e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.423122][ T7876] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2458.431109][ T7876] RDX: 0000000000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 2458.439085][ T7876] RBP: 00007f1eea08e1d0 R08: 0000000000000000 R09: 0000000000000000 02:01:39 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, 0x0) 02:01:39 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0, 0x5, 0x8, 0x3}, {}, {}, {}, {}]}) [ 2458.447103][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2458.455075][ T7876] R13: 00007ffc594f265f R14: 00007f1eea08e300 R15: 0000000000022000 02:01:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) [ 2458.524269][ T7897] FAULT_INJECTION: forcing a failure. [ 2458.524269][ T7897] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.572573][ T7897] CPU: 1 PID: 7897 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 [ 2458.581288][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.591357][ T7897] Call Trace: [ 2458.594675][ T7897] dump_stack+0x137/0x19d [ 2458.599022][ T7897] should_fail+0x23c/0x250 [ 2458.603446][ T7897] __should_failslab+0x81/0x90 [ 2458.608249][ T7897] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2458.609331][ T7902] FAULT_INJECTION: forcing a failure. [ 2458.609331][ T7902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2458.614001][ T7897] should_failslab+0x5/0x20 [ 2458.631529][ T7897] __kmalloc+0x66/0x380 [ 2458.635696][ T7897] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 2458.641353][ T7897] ? __rcu_read_unlock+0x5c/0x250 [ 2458.646448][ T7897] tomoyo_realpath_from_path+0x98/0x3b0 [ 2458.651999][ T7897] tomoyo_path_number_perm+0xc1/0x2d0 [ 2458.657405][ T7897] ? __rcu_read_unlock+0x5c/0x250 [ 2458.662503][ T7897] tomoyo_file_ioctl+0x1c/0x20 [ 2458.667270][ T7897] security_file_ioctl+0x45/0x90 02:01:39 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) [ 2458.672293][ T7897] __se_sys_ioctl+0x48/0x140 [ 2458.676887][ T7897] __x64_sys_ioctl+0x3f/0x50 [ 2458.681486][ T7897] do_syscall_64+0x39/0x80 [ 2458.685907][ T7897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2458.691852][ T7897] RIP: 0033:0x466459 [ 2458.695746][ T7897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.715370][ T7897] RSP: 002b:00007fab1cb9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.723797][ T7897] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2458.731772][ T7897] RDX: 00000000200000c0 RSI: 0000000000008902 RDI: 0000000000000003 [ 2458.739745][ T7897] RBP: 00007fab1cb9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.747718][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2458.755779][ T7897] R13: 00007ffe56537cbf R14: 00007fab1cb9a300 R15: 0000000000022000 [ 2458.763782][ T7902] CPU: 0 PID: 7902 Comm: syz-executor.0 Not tainted 5.12.0-rc5-syzkaller #0 [ 2458.772472][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.782623][ T7902] Call Trace: [ 2458.785910][ T7902] dump_stack+0x137/0x19d [ 2458.790288][ T7902] should_fail+0x23c/0x250 [ 2458.793995][ T7897] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2458.794717][ T7902] should_fail_usercopy+0x16/0x20 [ 2458.806493][ T7902] _copy_to_user+0x1c/0x90 [ 2458.810916][ T7902] simple_read_from_buffer+0xab/0x120 [ 2458.816321][ T7902] proc_fail_nth_read+0xf6/0x140 02:01:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0, 0x5, 0x8, 0x3}, {}, {}, {}, {}]}) 02:01:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, 0x0) 02:01:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0, 0x5, 0x8, 0x3}, {}, {}, {}, {}]}) [ 2458.821317][ T7902] ? rw_verify_area+0x136/0x250 [ 2458.826253][ T7902] ? proc_fault_inject_write+0x200/0x200 [ 2458.831900][ T7902] vfs_read+0x154/0x5d0 [ 2458.836070][ T7902] ? __fget_light+0x219/0x260 [ 2458.840753][ T7902] ? sock_poll+0x260/0x260 [ 2458.845183][ T7902] ksys_read+0xce/0x180 [ 2458.849397][ T7902] __x64_sys_read+0x3e/0x50 [ 2458.853905][ T7902] do_syscall_64+0x39/0x80 [ 2458.858323][ T7902] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2458.864220][ T7902] RIP: 0033:0x4191dc [ 2458.868145][ T7902] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2458.887822][ T7902] RSP: 002b:00007f1eea08e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2458.896247][ T7902] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191dc [ 2458.904238][ T7902] RDX: 000000000000000f RSI: 00007f1eea08e1e0 RDI: 0000000000000004 [ 2458.912217][ T7902] RBP: 00007f1eea08e1d0 R08: 0000000000000000 R09: 0000000000000000 02:01:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:39 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) 02:01:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x0, 0x8, 0x3}, {}, {}, {}, {}]}) [ 2458.920224][ T7902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2458.929517][ T7902] R13: 00007ffc594f265f R14: 00007f1eea08e300 R15: 0000000000022000 02:01:39 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:39 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x2, 0x0) [ 2459.031190][ T7924] FAULT_INJECTION: forcing a failure. [ 2459.031190][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 2459.047763][ T7922] FAULT_INJECTION: forcing a failure. [ 2459.047763][ T7922] name failslab, interval 1, probability 0, space 0, times 0 02:01:39 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) 02:01:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x3}, {}, {}, {}, {}]}) [ 2459.092849][ T7924] CPU: 1 PID: 7924 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 [ 2459.101567][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.111627][ T7924] Call Trace: [ 2459.114915][ T7924] dump_stack+0x137/0x19d [ 2459.119287][ T7924] should_fail+0x23c/0x250 [ 2459.123711][ T7924] __should_failslab+0x81/0x90 [ 2459.128483][ T7924] ? tomoyo_encode2+0x1d3/0x350 [ 2459.133373][ T7924] should_failslab+0x5/0x20 [ 2459.137965][ T7924] __kmalloc+0x66/0x380 02:01:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) [ 2459.142121][ T7924] tomoyo_encode2+0x1d3/0x350 [ 2459.146876][ T7924] ? sock_free_inode+0x30/0x30 [ 2459.151654][ T7924] tomoyo_realpath_from_path+0x35e/0x3b0 [ 2459.157366][ T7924] tomoyo_path_number_perm+0xc1/0x2d0 [ 2459.162756][ T7924] ? __rcu_read_unlock+0x5c/0x250 [ 2459.167793][ T7924] tomoyo_file_ioctl+0x1c/0x20 [ 2459.172579][ T7924] security_file_ioctl+0x45/0x90 [ 2459.177536][ T7924] __se_sys_ioctl+0x48/0x140 [ 2459.182173][ T7924] __x64_sys_ioctl+0x3f/0x50 [ 2459.186867][ T7924] do_syscall_64+0x39/0x80 [ 2459.191321][ T7924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2459.197347][ T7924] RIP: 0033:0x466459 [ 2459.201274][ T7924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2459.220887][ T7924] RSP: 002b:00007fab1cb9a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2459.229335][ T7924] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:01:39 executing program 5 (fault-call:0 fault-nth:0): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) [ 2459.237326][ T7924] RDX: 00000000200000c0 RSI: 0000000000008902 RDI: 0000000000000003 [ 2459.245309][ T7924] RBP: 00007fab1cb9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.253340][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2459.261418][ T7924] R13: 00007ffe56537cbf R14: 00007fab1cb9a300 R15: 0000000000022000 [ 2459.272200][ T7924] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2459.275681][ T7922] CPU: 0 PID: 7922 Comm: syz-executor.2 Not tainted 5.12.0-rc5-syzkaller #0 [ 2459.287658][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.297808][ T7922] Call Trace: [ 2459.301089][ T7922] dump_stack+0x137/0x19d [ 2459.305434][ T7922] should_fail+0x23c/0x250 [ 2459.309862][ T7922] __should_failslab+0x81/0x90 [ 2459.314634][ T7922] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2459.320446][ T7922] should_failslab+0x5/0x20 [ 2459.325021][ T7922] __kmalloc+0x66/0x380 [ 2459.329188][ T7922] ? __rcu_read_unlock+0x5c/0x250 [ 2459.334231][ T7922] ? __rcu_read_unlock+0x5c/0x250 [ 2459.339339][ T7922] tomoyo_realpath_from_path+0x98/0x3b0 [ 2459.344958][ T7922] tomoyo_path_number_perm+0xc1/0x2d0 [ 2459.350355][ T7922] ? __rcu_read_unlock+0x5c/0x250 [ 2459.355468][ T7922] tomoyo_file_ioctl+0x1c/0x20 [ 2459.359582][ T7941] FAULT_INJECTION: forcing a failure. [ 2459.359582][ T7941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2459.360267][ T7922] security_file_ioctl+0x45/0x90 [ 2459.379772][ T7922] __se_sys_ioctl+0x48/0x140 [ 2459.384436][ T7922] __x64_sys_ioctl+0x3f/0x50 [ 2459.389119][ T7922] do_syscall_64+0x39/0x80 [ 2459.393545][ T7922] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2459.399470][ T7922] RIP: 0033:0x466459 [ 2459.403372][ T7922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2459.422984][ T7922] RSP: 002b:00007fd152710188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2459.431499][ T7922] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:01:40 executing program 1 (fault-call:1 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:40 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, 0x0) 02:01:40 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, 0x0) [ 2459.439549][ T7922] RDX: 00000000200000c0 RSI: 0000000000008903 RDI: 0000000000000003 [ 2459.447528][ T7922] RBP: 00007fd1527101d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.455557][ T7922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2459.463561][ T7922] R13: 00007ffd1e8e4a2f R14: 00007fd152710300 R15: 0000000000022000 [ 2459.472136][ T7941] CPU: 1 PID: 7941 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 [ 2459.480830][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.490888][ T7941] Call Trace: [ 2459.494162][ T7941] dump_stack+0x137/0x19d [ 2459.498551][ T7941] should_fail+0x23c/0x250 [ 2459.503040][ T7941] should_fail_usercopy+0x16/0x20 [ 2459.505371][ T7922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2459.508117][ T7941] _copy_to_user+0x1c/0x90 [ 2459.508144][ T7941] simple_read_from_buffer+0xab/0x120 [ 2459.524665][ T7941] proc_fail_nth_read+0xf6/0x140 [ 2459.529678][ T7941] ? rw_verify_area+0x136/0x250 [ 2459.534538][ T7941] ? proc_fault_inject_write+0x200/0x200 [ 2459.540176][ T7941] vfs_read+0x154/0x5d0 02:01:40 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:40 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) 02:01:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x10, 0x0) [ 2459.544339][ T7941] ? __fget_light+0x219/0x260 [ 2459.549027][ T7941] ksys_read+0xce/0x180 [ 2459.553191][ T7941] __x64_sys_read+0x3e/0x50 [ 2459.557707][ T7941] do_syscall_64+0x39/0x80 [ 2459.562142][ T7941] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2459.568117][ T7941] RIP: 0033:0x4191dc [ 2459.572011][ T7941] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2459.583502][ T7951] FAULT_INJECTION: forcing a failure. [ 2459.583502][ T7951] name failslab, interval 1, probability 0, space 0, times 0 [ 2459.592622][ T7941] RSP: 002b:00007fab1cb9a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2459.613648][ T7941] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191dc [ 2459.621625][ T7941] RDX: 000000000000000f RSI: 00007fab1cb9a1e0 RDI: 0000000000000004 [ 2459.629634][ T7941] RBP: 00007fab1cb9a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.637787][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2459.645762][ T7941] R13: 00007ffe56537cbf R14: 00007fab1cb9a300 R15: 0000000000022000 [ 2459.658700][ T7946] FAULT_INJECTION: forcing a failure. [ 2459.658700][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2459.659049][ T7951] CPU: 0 PID: 7951 Comm: syz-executor.2 Not tainted 5.12.0-rc5-syzkaller #0 [ 2459.680420][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.690476][ T7951] Call Trace: [ 2459.693753][ T7951] dump_stack+0x137/0x19d [ 2459.698221][ T7951] should_fail+0x23c/0x250 [ 2459.702641][ T7951] __should_failslab+0x81/0x90 [ 2459.707453][ T7951] ? tomoyo_encode2+0x1d3/0x350 [ 2459.712338][ T7951] should_failslab+0x5/0x20 [ 2459.716980][ T7951] __kmalloc+0x66/0x380 [ 2459.721141][ T7951] tomoyo_encode2+0x1d3/0x350 [ 2459.725835][ T7951] ? sock_free_inode+0x30/0x30 [ 2459.730615][ T7951] tomoyo_realpath_from_path+0x35e/0x3b0 [ 2459.736257][ T7951] tomoyo_path_number_perm+0xc1/0x2d0 [ 2459.741758][ T7951] ? __rcu_read_unlock+0x5c/0x250 [ 2459.746791][ T7951] tomoyo_file_ioctl+0x1c/0x20 [ 2459.751633][ T7951] security_file_ioctl+0x45/0x90 [ 2459.756603][ T7951] __se_sys_ioctl+0x48/0x140 [ 2459.761247][ T7951] __x64_sys_ioctl+0x3f/0x50 [ 2459.765835][ T7951] do_syscall_64+0x39/0x80 [ 2459.770367][ T7951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2459.776345][ T7951] RIP: 0033:0x466459 [ 2459.780246][ T7951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2459.799868][ T7951] RSP: 002b:00007fd152710188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2459.808445][ T7951] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2459.816480][ T7951] RDX: 00000000200000c0 RSI: 0000000000008903 RDI: 0000000000000003 [ 2459.824455][ T7951] RBP: 00007fd1527101d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.832430][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2459.840406][ T7951] R13: 00007ffd1e8e4a2f R14: 00007fd152710300 R15: 0000000000022000 [ 2459.848479][ T7946] CPU: 1 PID: 7946 Comm: syz-executor.5 Not tainted 5.12.0-rc5-syzkaller #0 [ 2459.857239][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.861370][ T7951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2459.867302][ T7946] Call Trace: [ 2459.867313][ T7946] dump_stack+0x137/0x19d [ 2459.867339][ T7946] should_fail+0x23c/0x250 [ 2459.867358][ T7946] should_fail_usercopy+0x16/0x20 [ 2459.891098][ T7946] _copy_from_user+0x1c/0xd0 02:01:40 executing program 2 (fault-call:1 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2459.895834][ T7946] do_seccomp+0x38b/0x1560 [ 2459.900281][ T7946] ? fput+0x2d/0x130 [ 2459.904179][ T7946] ? ksys_write+0x157/0x180 [ 2459.908688][ T7946] ? fpregs_assert_state_consistent+0x7d/0x90 [ 2459.914763][ T7946] __x64_sys_seccomp+0x3c/0x50 [ 2459.919547][ T7946] do_syscall_64+0x39/0x80 [ 2459.922996][ T7957] FAULT_INJECTION: forcing a failure. [ 2459.922996][ T7957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2459.923965][ T7946] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2459.942879][ T7946] RIP: 0033:0x466459 [ 2459.946778][ T7946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2459.966662][ T7946] RSP: 002b:00007fc090f72188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2459.975079][ T7946] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2459.983057][ T7946] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 2459.991101][ T7946] RBP: 00007fc090f721d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.999078][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2460.007315][ T7946] R13: 00007ffc2c2e87ef R14: 00007fc090f72300 R15: 0000000000022000 [ 2460.017718][ T7957] CPU: 0 PID: 7957 Comm: syz-executor.2 Not tainted 5.12.0-rc5-syzkaller #0 [ 2460.026471][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.036537][ T7957] Call Trace: [ 2460.039838][ T7957] dump_stack+0x137/0x19d [ 2460.044175][ T7957] should_fail+0x23c/0x250 [ 2460.048597][ T7957] should_fail_usercopy+0x16/0x20 [ 2460.053624][ T7957] _copy_to_user+0x1c/0x90 [ 2460.058065][ T7957] simple_read_from_buffer+0xab/0x120 [ 2460.063466][ T7957] proc_fail_nth_read+0xf6/0x140 [ 2460.068496][ T7957] ? rw_verify_area+0x136/0x250 [ 2460.073434][ T7957] ? proc_fault_inject_write+0x200/0x200 [ 2460.079084][ T7957] vfs_read+0x154/0x5d0 [ 2460.083250][ T7957] ? __fget_light+0x219/0x260 [ 2460.087991][ T7957] ? sock_poll+0x260/0x260 [ 2460.092418][ T7957] ksys_read+0xce/0x180 02:01:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:40 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, 0x0) 02:01:40 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, 0x0) [ 2460.096579][ T7957] __x64_sys_read+0x3e/0x50 [ 2460.101089][ T7957] do_syscall_64+0x39/0x80 [ 2460.105580][ T7957] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2460.111532][ T7957] RIP: 0033:0x4191dc [ 2460.115451][ T7957] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2460.135068][ T7957] RSP: 002b:00007fd152710170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 02:01:40 executing program 5 (fault-call:0 fault-nth:1): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x2, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x2288, 0x0) 02:01:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:40 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, 0x0) 02:01:40 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) [ 2460.143591][ T7957] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004191dc [ 2460.151576][ T7957] RDX: 000000000000000f RSI: 00007fd1527101e0 RDI: 0000000000000004 [ 2460.159900][ T7957] RBP: 00007fd1527101d0 R08: 0000000000000000 R09: 0000000000000000 [ 2460.167945][ T7957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2460.175918][ T7957] R13: 00007ffd1e8e4a2f R14: 00007fd152710300 R15: 0000000000022000 02:01:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4c00, 0x0) 02:01:40 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, 0x0) 02:01:40 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) 02:01:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x10, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x2, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2460.275505][ T7976] FAULT_INJECTION: forcing a failure. [ 2460.275505][ T7976] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.341240][ T7976] CPU: 1 PID: 7976 Comm: syz-executor.5 Not tainted 5.12.0-rc5-syzkaller #0 [ 2460.350041][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.360122][ T7976] Call Trace: [ 2460.363400][ T7976] dump_stack+0x137/0x19d [ 2460.367745][ T7976] should_fail+0x23c/0x250 [ 2460.372171][ T7976] __should_failslab+0x81/0x90 [ 2460.376955][ T7976] ? do_seccomp+0x5a4/0x1560 [ 2460.381633][ T7976] should_failslab+0x5/0x20 [ 2460.386231][ T7976] kmem_cache_alloc_trace+0x49/0x340 [ 2460.391532][ T7976] do_seccomp+0x5a4/0x1560 [ 2460.395962][ T7976] ? fput+0x2d/0x130 [ 2460.400132][ T7976] ? ksys_write+0x157/0x180 [ 2460.404665][ T7976] __x64_sys_seccomp+0x3c/0x50 [ 2460.409503][ T7976] do_syscall_64+0x39/0x80 [ 2460.413998][ T7976] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2460.419909][ T7976] RIP: 0033:0x466459 02:01:41 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) [ 2460.423811][ T7976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2460.443425][ T7976] RSP: 002b:00007fc090f72188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2460.451915][ T7976] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2460.459979][ T7976] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 2460.467953][ T7976] RBP: 00007fc090f721d0 R08: 0000000000000000 R09: 0000000000000000 [ 2460.475933][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2460.483920][ T7976] R13: 00007ffc2c2e87ef R14: 00007fc090f72300 R15: 0000000000022000 [ 2460.497960][ T7989] FAULT_INJECTION: forcing a failure. [ 2460.497960][ T7989] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.510916][ T7989] CPU: 0 PID: 7989 Comm: syz-executor.3 Not tainted 5.12.0-rc5-syzkaller #0 [ 2460.519639][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.529702][ T7989] Call Trace: [ 2460.532994][ T7989] dump_stack+0x137/0x19d [ 2460.537413][ T7989] should_fail+0x23c/0x250 [ 2460.541912][ T7989] __should_failslab+0x81/0x90 [ 2460.546709][ T7989] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2460.552488][ T7989] should_failslab+0x5/0x20 [ 2460.557092][ T7989] __kmalloc+0x66/0x380 [ 2460.561269][ T7989] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 2460.566907][ T7989] ? __rcu_read_unlock+0x5c/0x250 [ 2460.571512][ T7996] FAULT_INJECTION: forcing a failure. [ 2460.571512][ T7996] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.571943][ T7989] tomoyo_realpath_from_path+0x98/0x3b0 [ 2460.590097][ T7989] tomoyo_path_number_perm+0xc1/0x2d0 [ 2460.595577][ T7989] ? __rcu_read_unlock+0x5c/0x250 [ 2460.600621][ T7989] tomoyo_file_ioctl+0x1c/0x20 [ 2460.605435][ T7989] security_file_ioctl+0x45/0x90 [ 2460.610433][ T7989] __se_sys_ioctl+0x48/0x140 [ 2460.615045][ T7989] __x64_sys_ioctl+0x3f/0x50 [ 2460.619647][ T7989] do_syscall_64+0x39/0x80 [ 2460.624111][ T7989] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2460.630058][ T7989] RIP: 0033:0x466459 [ 2460.633995][ T7989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2460.653608][ T7989] RSP: 002b:00007f139322d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2460.662027][ T7989] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2460.670036][ T7989] RDX: 0000000000000000 RSI: 0000000000008902 RDI: 0000000000000003 [ 2460.678017][ T7989] RBP: 00007f139322d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2460.685994][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 02:01:41 executing program 5 (fault-call:0 fault-nth:2): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:41 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x10, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4c01, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4c01, 0x0) [ 2460.693976][ T7989] R13: 00007ffd6fe19a6f R14: 00007f139322d300 R15: 0000000000022000 [ 2460.716274][ T7996] CPU: 1 PID: 7996 Comm: syz-executor.4 Not tainted 5.12.0-rc5-syzkaller #0 [ 2460.724986][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.735073][ T7996] Call Trace: [ 2460.738550][ T7996] dump_stack+0x137/0x19d [ 2460.742950][ T7996] should_fail+0x23c/0x250 02:01:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, 0x0) [ 2460.747459][ T7996] __should_failslab+0x81/0x90 [ 2460.749086][ T8002] FAULT_INJECTION: forcing a failure. [ 2460.749086][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.752229][ T7996] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2460.770731][ T7996] should_failslab+0x5/0x20 [ 2460.775252][ T7996] __kmalloc+0x66/0x380 [ 2460.779428][ T7996] ? __mod_memcg_lruvec_state+0xfa/0x260 [ 2460.785081][ T7996] ? __rcu_read_unlock+0x5c/0x250 [ 2460.790187][ T7996] tomoyo_realpath_from_path+0x98/0x3b0 [ 2460.795908][ T7996] tomoyo_path_number_perm+0xc1/0x2d0 [ 2460.801343][ T7996] ? __rcu_read_unlock+0x5c/0x250 [ 2460.806453][ T7996] tomoyo_file_ioctl+0x1c/0x20 [ 2460.811255][ T7996] security_file_ioctl+0x45/0x90 [ 2460.816265][ T7996] __se_sys_ioctl+0x48/0x140 [ 2460.820865][ T7996] __x64_sys_ioctl+0x3f/0x50 [ 2460.825505][ T7996] do_syscall_64+0x39/0x80 [ 2460.829940][ T7996] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2460.835849][ T7996] RIP: 0033:0x466459 02:01:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) [ 2460.839744][ T7996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2460.859935][ T7996] RSP: 002b:00007f0869873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2460.869023][ T7996] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2460.877218][ T7996] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 2460.885211][ T7996] RBP: 00007f08698731d0 R08: 0000000000000000 R09: 0000000000000000 [ 2460.893253][ T7996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2460.902523][ T7996] R13: 00007fff2ef3e17f R14: 00007f0869873300 R15: 0000000000022000 [ 2460.910506][ T8002] CPU: 0 PID: 8002 Comm: syz-executor.5 Not tainted 5.12.0-rc5-syzkaller #0 [ 2460.919209][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.929273][ T8002] Call Trace: [ 2460.932565][ T8002] dump_stack+0x137/0x19d [ 2460.936907][ T8002] should_fail+0x23c/0x250 [ 2460.941332][ T8002] __should_failslab+0x81/0x90 [ 2460.946104][ T8002] should_failslab+0x5/0x20 [ 2460.950623][ T8002] kmem_cache_alloc_node_trace+0x5b/0x310 [ 2460.955260][ T7996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2460.956353][ T8002] ? __rcu_read_unlock+0x5c/0x250 [ 2460.963591][ T7989] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2460.968045][ T8002] ? __get_vm_area_node+0x11b/0x240 [ 2460.968080][ T8002] __get_vm_area_node+0x11b/0x240 [ 2460.984977][ T8002] __vmalloc_node_range+0xba/0x540 [ 2460.990145][ T8002] ? bpf_prog_alloc_no_stats+0x33/0x210 [ 2460.995697][ T8002] ? bpf_prog_alloc_no_stats+0x33/0x210 [ 2461.001312][ T8002] __vmalloc+0x5a/0x70 [ 2461.005389][ T8002] ? bpf_prog_alloc_no_stats+0x33/0x210 [ 2461.010962][ T8002] bpf_prog_alloc_no_stats+0x33/0x210 [ 2461.016422][ T8002] bpf_prog_alloc+0x14/0xd0 [ 2461.020985][ T8002] bpf_prog_create_from_user+0x6f/0x240 [ 2461.026658][ T8002] ? seccomp_run_filters+0x2b0/0x2b0 [ 2461.031950][ T8002] do_seccomp+0x5ec/0x1560 [ 2461.036381][ T8002] ? fput+0x2d/0x130 [ 2461.039674][ T8014] FAULT_INJECTION: forcing a failure. [ 2461.039674][ T8014] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.040275][ T8002] ? ksys_write+0x157/0x180 [ 2461.057358][ T8002] __x64_sys_seccomp+0x3c/0x50 [ 2461.062131][ T8002] do_syscall_64+0x39/0x80 [ 2461.066549][ T8002] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2461.072475][ T8002] RIP: 0033:0x466459 [ 2461.076372][ T8002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:01:41 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x2288, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2461.096806][ T8002] RSP: 002b:00007fc090f72188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2461.105226][ T8002] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2461.113249][ T8002] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 2461.121235][ T8002] RBP: 00007fc090f721d0 R08: 0000000000000000 R09: 0000000000000000 [ 2461.129300][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2461.137318][ T8002] R13: 00007ffc2c2e87ef R14: 00007fc090f72300 R15: 0000000000022000 02:01:41 executing program 3 (fault-call:1 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) [ 2461.145713][ T3236] ieee802154 phy0 wpan0: encryption failed: -22 [ 2461.152014][ T3236] ieee802154 phy1 wpan1: encryption failed: -22 [ 2461.170348][ T8014] CPU: 1 PID: 8014 Comm: syz-executor.4 Not tainted 5.12.0-rc5-syzkaller #0 [ 2461.179056][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.189111][ T8014] Call Trace: [ 2461.192565][ T8014] dump_stack+0x137/0x19d [ 2461.195557][ T8018] FAULT_INJECTION: forcing a failure. [ 2461.195557][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.197787][ T8014] should_fail+0x23c/0x250 [ 2461.214816][ T8014] __should_failslab+0x81/0x90 [ 2461.219598][ T8014] ? tomoyo_encode2+0x1d3/0x350 [ 2461.224473][ T8014] should_failslab+0x5/0x20 [ 2461.229025][ T8014] __kmalloc+0x66/0x380 [ 2461.233200][ T8014] tomoyo_encode2+0x1d3/0x350 [ 2461.237885][ T8014] ? sock_free_inode+0x30/0x30 [ 2461.242648][ T8014] tomoyo_realpath_from_path+0x35e/0x3b0 [ 2461.248293][ T8014] tomoyo_path_number_perm+0xc1/0x2d0 [ 2461.253688][ T8014] ? __rcu_read_unlock+0x5c/0x250 [ 2461.258722][ T8014] tomoyo_file_ioctl+0x1c/0x20 [ 2461.263531][ T8014] security_file_ioctl+0x45/0x90 [ 2461.268538][ T8014] __se_sys_ioctl+0x48/0x140 [ 2461.273134][ T8014] __x64_sys_ioctl+0x3f/0x50 [ 2461.277758][ T8014] do_syscall_64+0x39/0x80 [ 2461.282295][ T8014] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2461.288206][ T8014] RIP: 0033:0x466459 [ 2461.292096][ T8014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2461.311762][ T8014] RSP: 002b:00007f0869873188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2461.320254][ T8014] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2461.328247][ T8014] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 2461.336223][ T8014] RBP: 00007f08698731d0 R08: 0000000000000000 R09: 0000000000000000 [ 2461.344235][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2461.352226][ T8014] R13: 00007fff2ef3e17f R14: 00007f0869873300 R15: 0000000000022000 [ 2461.360211][ T8018] CPU: 0 PID: 8018 Comm: syz-executor.3 Not tainted 5.12.0-rc5-syzkaller #0 [ 2461.368908][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.376081][ T8014] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2461.378971][ T8018] Call Trace: [ 2461.378983][ T8018] dump_stack+0x137/0x19d [ 2461.386120][ T8002] syz-executor.5: vmalloc: allocation failure: 4096 bytes, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 2461.388951][ T8018] should_fail+0x23c/0x250 [ 2461.388979][ T8018] __should_failslab+0x81/0x90 [ 2461.404761][ T8002] ,cpuset= [ 2461.405920][ T8018] ? tomoyo_encode2+0x1d3/0x350 [ 2461.410868][ T8002] / [ 2461.415125][ T8018] should_failslab+0x5/0x20 [ 2461.424765][ T8002] ,mems_allowed=0-1 [ 2461.425430][ T8018] __kmalloc+0x66/0x380 [ 2461.436141][ T8002] [ 2461.437867][ T8018] tomoyo_encode2+0x1d3/0x350 [ 2461.445035][ T8018] ? sock_free_inode+0x30/0x30 [ 2461.449949][ T8018] tomoyo_realpath_from_path+0x35e/0x3b0 [ 2461.455646][ T8018] tomoyo_path_number_perm+0xc1/0x2d0 [ 2461.461117][ T8018] ? __rcu_read_unlock+0x5c/0x250 [ 2461.466174][ T8018] tomoyo_file_ioctl+0x1c/0x20 [ 2461.471005][ T8018] security_file_ioctl+0x45/0x90 [ 2461.475952][ T8018] __se_sys_ioctl+0x48/0x140 [ 2461.480549][ T8018] __x64_sys_ioctl+0x3f/0x50 [ 2461.485143][ T8018] do_syscall_64+0x39/0x80 [ 2461.489638][ T8018] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2461.496870][ T8018] RIP: 0033:0x466459 [ 2461.500777][ T8018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2461.520398][ T8018] RSP: 002b:00007f139322d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2461.528865][ T8018] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2461.536853][ T8018] RDX: 0000000000000000 RSI: 0000000000008902 RDI: 0000000000000003 [ 2461.544851][ T8018] RBP: 00007f139322d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2461.552859][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2461.560840][ T8018] R13: 00007ffd6fe19a6f R14: 00007f139322d300 R15: 0000000000022000 [ 2461.568893][ T8002] CPU: 1 PID: 8002 Comm: syz-executor.5 Not tainted 5.12.0-rc5-syzkaller #0 [ 2461.577589][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.584024][ T8018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2461.587650][ T8002] Call Trace: [ 2461.587663][ T8002] dump_stack+0x137/0x19d [ 2461.587690][ T8002] warn_alloc+0x105/0x160 [ 2461.606345][ T8002] __vmalloc_node_range+0x1df/0x540 [ 2461.611624][ T8002] ? bpf_prog_alloc_no_stats+0x33/0x210 [ 2461.617206][ T8002] __vmalloc+0x5a/0x70 [ 2461.621298][ T8002] ? bpf_prog_alloc_no_stats+0x33/0x210 [ 2461.627049][ T8002] bpf_prog_alloc_no_stats+0x33/0x210 [ 2461.632426][ T8002] bpf_prog_alloc+0x14/0xd0 [ 2461.636950][ T8002] bpf_prog_create_from_user+0x6f/0x240 [ 2461.642498][ T8002] ? seccomp_run_filters+0x2b0/0x2b0 [ 2461.647783][ T8002] do_seccomp+0x5ec/0x1560 [ 2461.652235][ T8002] ? fput+0x2d/0x130 [ 2461.656113][ T8002] ? ksys_write+0x157/0x180 [ 2461.660617][ T8002] __x64_sys_seccomp+0x3c/0x50 [ 2461.665366][ T8002] do_syscall_64+0x39/0x80 [ 2461.669768][ T8002] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2461.675698][ T8002] RIP: 0033:0x466459 [ 2461.679614][ T8002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2461.699210][ T8002] RSP: 002b:00007fc090f72188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 2461.707653][ T8002] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 2461.715701][ T8002] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 2461.723677][ T8002] RBP: 00007fc090f721d0 R08: 0000000000000000 R09: 0000000000000000 [ 2461.731653][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2461.739638][ T8002] R13: 00007ffc2c2e87ef R14: 00007fc090f72300 R15: 0000000000022000 [ 2461.754402][ T8002] Mem-Info: [ 2461.757777][ T8002] active_anon:284 inactive_anon:442771 isolated_anon:0 [ 2461.757777][ T8002] active_file:6864 inactive_file:65747 isolated_file:0 [ 2461.757777][ T8002] unevictable:768 dirty:208 writeback:0 [ 2461.757777][ T8002] slab_reclaimable:12947 slab_unreclaimable:29360 [ 2461.757777][ T8002] mapped:63178 shmem:10170 pagetables:33150 bounce:0 [ 2461.757777][ T8002] free:1085206 free_pcp:1295 free_cma:0 [ 2461.796376][ T8002] Node 0 active_anon:1136kB inactive_anon:1770616kB active_file:27340kB inactive_file:262988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:252712kB dirty:828kB writeback:0kB shmem:38676kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1652736kB writeback_tmp:0kB kernel_stack:23152kB pagetables:132596kB all_unreclaimable? no [ 2461.828996][ T8002] Node 1 active_anon:0kB inactive_anon:468kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 2461.858316][ T8002] Node 0 DMA free:15904kB min:176kB low:220kB high:264kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2461.884931][ T8002] lowmem_reserve[]: 0 2862 3821 3821 3821 [ 2461.890692][ T8002] Node 0 DMA32 free:266512kB min:32808kB low:41008kB high:49208kB reserved_highatomic:0KB active_anon:20kB inactive_anon:1532176kB active_file:3072kB inactive_file:5684kB unevictable:0kB writepending:220kB present:3129332kB managed:2936712kB mlocked:0kB bounce:0kB free_pcp:2452kB local_pcp:1092kB free_cma:0kB [ 2461.920098][ T8002] lowmem_reserve[]: 0 0 959 959 959 [ 2461.925411][ T8002] Node 0 Normal free:13728kB min:11000kB low:13748kB high:16496kB reserved_highatomic:0KB active_anon:1116kB inactive_anon:238440kB active_file:24268kB inactive_file:257304kB unevictable:1536kB writepending:608kB present:1048576kB managed:982572kB mlocked:0kB bounce:0kB free_pcp:2720kB local_pcp:1352kB free_cma:0kB [ 2461.955185][ T8002] lowmem_reserve[]: 0 0 0 0 0 [ 2461.959879][ T8002] Node 1 Normal free:4044680kB min:46120kB low:57648kB high:69176kB reserved_highatomic:0KB active_anon:0kB inactive_anon:468kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119864kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2461.988998][ T8002] lowmem_reserve[]: 0 0 0 0 0 [ 2461.993821][ T8002] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 2462.008078][ T8002] Node 0 DMA32: 104*4kB (U) 55*8kB (UME) 30*16kB (UME) 37*32kB (UME) 7*64kB (UME) 5*128kB (UME) 3*256kB (UM) 2*512kB (UM) 1*1024kB (M) 7*2048kB (UM) 60*4096kB (UM) = 266520kB [ 2462.025846][ T8002] Node 0 Normal: 112*4kB (UE) 10*8kB (UM) 1*16kB (M) 0*32kB 0*64kB 1*128kB (M) 15*256kB (M) 10*512kB (M) 4*1024kB (M) 0*2048kB 0*4096kB = 13728kB [ 2462.041265][ T8002] Node 1 Normal: 4*4kB (UE) 3*8kB (UE) 2*16kB (UE) 4*32kB (UM) 7*64kB (UME) 0*128kB 3*256kB (UME) 3*512kB (UME) 1*1024kB (U) 1*2048kB (M) 986*4096kB (M) = 4044680kB [ 2462.057980][ T8002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2462.067577][ T8002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2462.076896][ T8002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2462.086735][ T8002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2462.096799][ T8002] 59623 total pagecache pages [ 2462.101493][ T8002] 0 pages in swap cache 02:01:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5450, 0x0) 02:01:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4c01, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:42 executing program 4 (fault-call:1 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:42 executing program 3 (fault-call:1 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5450, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2462.105829][ T8002] Swap cache stats: add 0, delete 0, find 0/0 [ 2462.111922][ T8002] Free swap = 0kB [ 2462.115709][ T8002] Total swap = 0kB [ 2462.119460][ T8002] 2097051 pages RAM [ 2462.123238][ T8002] 0 pages HighMem/MovableOnly [ 2462.127951][ T8002] 83288 pages reserved [ 2462.132022][ T8002] 0 pages cma reserved 02:01:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5451, 0x0) 02:01:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) [ 2462.190525][ T8025] FAULT_INJECTION: forcing a failure. [ 2462.190525][ T8025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2462.211263][ T8027] FAULT_INJECTION: forcing a failure. [ 2462.211263][ T8027] name fail_usercopy, interval 1, probability 0, space 0, times 0 02:01:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5451, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, 0x0) [ 2462.261998][ T8025] CPU: 1 PID: 8025 Comm: syz-executor.3 Not tainted 5.12.0-rc5-syzkaller #0 [ 2462.270709][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.280770][ T8025] Call Trace: [ 2462.284054][ T8025] dump_stack+0x137/0x19d [ 2462.288398][ T8025] should_fail+0x23c/0x250 [ 2462.292821][ T8025] should_fail_usercopy+0x16/0x20 [ 2462.297857][ T8025] _copy_to_user+0x1c/0x90 [ 2462.302384][ T8025] simple_read_from_buffer+0xab/0x120 02:01:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5460, 0x0) [ 2462.307838][ T8025] proc_fail_nth_read+0xf6/0x140 [ 2462.312835][ T8025] ? rw_verify_area+0x136/0x250 [ 2462.317694][ T8025] ? proc_fault_inject_write+0x200/0x200 [ 2462.323341][ T8025] vfs_read+0x154/0x5d0 [ 2462.327519][ T8025] ? __fget_light+0x219/0x260 [ 2462.332215][ T8025] ksys_read+0xce/0x180 [ 2462.336469][ T8025] __x64_sys_read+0x3e/0x50 [ 2462.341054][ T8025] do_syscall_64+0x39/0x80 [ 2462.345476][ T8025] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2462.351384][ T8025] RIP: 0033:0x4191dc [ 2462.355274][ T8025] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2462.374906][ T8025] RSP: 002b:00007f139322d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2462.383331][ T8025] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191dc [ 2462.391355][ T8025] RDX: 000000000000000f RSI: 00007f139322d1e0 RDI: 0000000000000004 [ 2462.399335][ T8025] RBP: 00007f139322d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.407309][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2462.415285][ T8025] R13: 00007ffd6fe19a6f R14: 00007f139322d300 R15: 0000000000022000 [ 2462.423274][ T8027] CPU: 0 PID: 8027 Comm: syz-executor.4 Not tainted 5.12.0-rc5-syzkaller #0 [ 2462.431973][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.442064][ T8027] Call Trace: [ 2462.445350][ T8027] dump_stack+0x137/0x19d [ 2462.449788][ T8027] should_fail+0x23c/0x250 [ 2462.454211][ T8027] should_fail_usercopy+0x16/0x20 02:01:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) [ 2462.459274][ T8027] _copy_to_user+0x1c/0x90 [ 2462.463745][ T8027] simple_read_from_buffer+0xab/0x120 [ 2462.469149][ T8027] proc_fail_nth_read+0xf6/0x140 [ 2462.474100][ T8027] ? rw_verify_area+0x136/0x250 [ 2462.479089][ T8027] ? proc_fault_inject_write+0x200/0x200 [ 2462.484761][ T8027] vfs_read+0x154/0x5d0 [ 2462.489014][ T8027] ? __fget_light+0x219/0x260 [ 2462.493695][ T8027] ? sock_poll+0x260/0x260 [ 2462.498197][ T8027] ksys_read+0xce/0x180 [ 2462.502385][ T8027] __x64_sys_read+0x3e/0x50 [ 2462.506895][ T8027] do_syscall_64+0x39/0x80 02:01:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2462.511318][ T8027] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2462.517227][ T8027] RIP: 0033:0x4191dc [ 2462.521122][ T8027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2462.540753][ T8027] RSP: 002b:00007f0869873170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2462.549190][ T8027] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191dc 02:01:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x4, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x6364, 0x0) 02:01:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2462.557270][ T8027] RDX: 000000000000000f RSI: 00007f08698731e0 RDI: 0000000000000004 [ 2462.565247][ T8027] RBP: 00007f08698731d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.573263][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2462.581232][ T8027] R13: 00007fff2ef3e17f R14: 00007f0869873300 R15: 0000000000022000 02:01:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5450, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x8, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8901, 0x0) 02:01:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x2, 0x0) 02:01:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5460, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x2, 0x0) 02:01:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5451, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xb, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x6364, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x10, 0x0) 02:01:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x10, 0x0) 02:01:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x14, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4c01, 0x0) 02:01:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4c01, 0x0) 02:01:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8901, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5460, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x7c00, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, 0x0) 02:01:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, 0x0) 02:01:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, 0x0) 02:01:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x9500, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x6364, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, 0x0) 02:01:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) 02:01:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8901, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1eba43, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) 02:01:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5450, 0x0) 02:01:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8906, 0x0) 02:01:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5451, 0x0) 02:01:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5450, 0x0) 02:01:43 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8907, 0x0) 02:01:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, 0x0) 02:01:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8905, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5451, 0x0) 02:01:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890b, 0x0) 02:01:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5460, 0x0) 02:01:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5452, 0x0) 02:01:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890d, 0x0) 02:01:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x6364, 0x0) 02:01:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5460, 0x0) 02:01:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8913, 0x0) 02:01:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x6364, 0x0) 02:01:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8901, 0x0) 02:01:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8914, 0x0) 02:01:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8908, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8913, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, 0x0) 02:01:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8901, 0x0) 02:01:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8913, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, 0x0) 02:01:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8916, 0x0) 02:01:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, 0x0) 02:01:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, 0x0) 02:01:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8933, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8917, 0x0) 02:01:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8904, 0x0) 02:01:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8906, 0x0) 02:01:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8918, 0x0) 02:01:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8933, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8940, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8905, 0x0) 02:01:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8919, 0x0) 02:01:44 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x15, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8907, 0x0) 02:01:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8906, 0x0) 02:01:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8941, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891a, 0x0) 02:01:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890b, 0x0) 02:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8940, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x16, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8907, 0x0) 02:01:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x894c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891b, 0x0) 02:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8941, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8908, 0x0) 02:01:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891c, 0x0) 02:01:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8913, 0x0) 02:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x894c, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890d, 0x0) 02:01:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x25, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8914, 0x0) 02:01:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8933, 0x0) 02:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x28, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8913, 0x0) 02:01:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8933, 0x0) 02:01:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8934, 0x0) 02:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2d, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8940, 0x0) 02:01:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8914, 0x0) 02:01:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, 0x0) 02:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x30, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, 0x0) 02:01:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8940, 0x0) 02:01:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8941, 0x0) 02:01:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400448c9, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x34, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400448dd, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8941, 0x0) 02:01:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8916, 0x0) 02:01:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x894c, 0x0) 02:01:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x35, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8917, 0x0) 02:01:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400454ca, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, 0x0) 02:01:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400448c9, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x894c, 0x0) 02:01:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8918, 0x0) 02:01:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40049409, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, 0x0) 02:01:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400448dd, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8953, 0x0) 02:01:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8919, 0x0) 02:01:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40186366, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x45, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, 0x0) 02:01:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8954, 0x0) 02:01:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891a, 0x0) 02:01:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400454ca, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, 0x0) 02:01:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4d, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891b, 0x0) 02:01:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, 0x0) 02:01:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40046205, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400448c9, 0x0) 02:01:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x891c, 0x0) 02:01:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x60, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80086301, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, 0x0) 02:01:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400448dd, 0x0) 02:01:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40049409, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8933, 0x0) 02:01:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x61, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, 0x0) 02:01:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400454ca, 0x0) 02:01:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40186366, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x64, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8934, 0x0) 02:01:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x74, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40049409, 0x0) 02:01:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, 0x0) 02:01:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8935, 0x0) 02:01:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40186366, 0x0) 02:01:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x94, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, 0x0) 02:01:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8940, 0x0) 02:01:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80086301, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, 0x0) 02:01:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb1, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400448c9, 0x0) 02:01:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8941, 0x0) 02:01:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108906, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80086301, 0x0) 02:01:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400448dd, 0x0) 02:01:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x894c, 0x0) 02:01:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc020660b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108907, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400454ca, 0x0) 02:01:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108906, 0x0) 02:01:47 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_create1(0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) read$midi(r2, &(0x7f0000002200)=""/191, 0xbf) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002140)={0xa0, 0x0, r3, [{0x4, 0x9, 0x1, 0x1ff, '{'}, {0x5, 0x1000, 0x0, 0x1c000000}, {0x4, 0x6, 0x8, 0x3, 'syztnl2\x00'}, {0x0, 0x10000000000000, 0x8, 0x100, 'syztnl2\x00'}, {0x4, 0x73a, 0x0, 0x7408}]}, 0xa0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000}) 02:01:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8953, 0x0) 02:01:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x222, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40049409, 0x0) 02:01:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108907, 0x0) 02:01:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8954, 0x0) 02:01:47 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000002280)='cgroup.subtree_control\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x21, 0x80000001, 0x0, 0x2, 0x20, 0x24a, 0x10000}}, 0x50) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0xa4, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x300, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40186366, 0x0) 02:01:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, 0x0) 02:01:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8955, 0x0) 02:01:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x32a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, 0x0) 02:01:47 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0xa45, &(0x7f0000000280)={0x0, 0x820f, 0x1, 0x2, 0x11, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000240)) r1 = accept4$nfc_llcp(r0, &(0x7f0000000180), &(0x7f0000000000)=0x60, 0x80800) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000200)=0x200, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, 0x0) 02:01:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8982, 0x0) 02:01:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80086301, 0x0) 02:01:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x500, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc020660b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8983, 0x0) 02:01:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, 0x0) 02:01:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x600, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}}}, &(0x7f0000000000)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fedbdf2501000000080009000400000008000500ac1e0101080005006401010208000500e00000020800020001000000080008000100000008000100c51ccb1dfa89050fa74dcfb11b0001b4cb4f87bc86df75ea8c45324f5692cebb059a528c54e546", @ANYRES32=r1, @ANYBLOB="3adbb4064dbe8d89ef5364b68c1f7cd3046e4e178935dac887bf751cf7e6bd2850ca7506078b69bf7235266cdbe9b4256eb630146d4a8659fe39c985ef5941b6dd57ac83f4168dce1be385bc042198d57186c0944b9e3a0704065731ac54fb000a9361e9be3a7434bc006980cb95ad1d875d5bde7d2b5f8648cccf0fc753a900"], 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x20008800) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000200)=0x1, 0x4) 02:01:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108906, 0x0) 02:01:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a0, 0x0) 02:01:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x4040) r1 = socket(0x22, 0x80000, 0x2) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108907, 0x0) 02:01:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc020660b, 0x0) 02:01:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xda4, 0x0, 0x6, 0x5}, 0x8) 02:01:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x900, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89a1, 0x0) 02:01:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, 0x0) 02:01:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ptrace$setsig(0x4203, r1, 0x40, &(0x7f0000000280)={0x41, 0x7, 0xec}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x700, 0x7800, 0x80000000, 0xffff, {{0x38, 0x4, 0x2, 0x10, 0xe0, 0x65, 0x0, 0x3, 0x0, 0x0, @remote, @rand_addr=0x64010100, {[@ssrr={0x89, 0x1f, 0x48, [@loopback, @remote, @loopback, @broadcast, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x43}]}, @lsrr={0x83, 0x13, 0x42, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x55, 0x2, [{0x2, 0x10, "e01b05bfde7463086493f6980081"}, {0x7, 0x6, "25955d99"}, {0x6, 0x3, 'd'}, {0x6, 0xd, "0d48157ebaeec9d566acea"}, {0x5, 0xd, "f1ee144da28ba158bb114b"}, {0x7, 0x10, "1570bf6ef4ad2eadad76390b8e85"}, {0x1, 0xc, "4dc55a15a20494bdc10d"}]}, @end, @cipso={0x86, 0x1d, 0x1, [{0x5, 0x5, "ebf13c"}, {0x7, 0x7, '\".\r.n'}, {0x7, 0xb, "fc01b78e3c5626adeb"}]}, @timestamp_prespec={0x44, 0x24, 0x60, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x3}, {@rand_addr=0x64010101, 0x1ff}, {@multicast2, 0x536e}, {@private=0xa010102, 0x3ff}]}]}}}}}) 02:01:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000100)={0x1000, ""/4096}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400448c9, 0x0) 02:01:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x9, &(0x7f0000000300)) r1 = socket(0xa, 0x800, 0x8000) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x7, 0x6, 0x0, 0xffffffffffffffc0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000}, @exit, @ldst={0x2, 0x2, 0x9c165a3b97171926, 0x1, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}]}, &(0x7f0000000080)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0xce2c9f8ed348db64, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xa, 0xffffffff, 0x7fff}, 0x10}, 0x78) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r2, 0xffffffffffffffff, 0x4, r3}, 0x10) r4 = accept4$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000100)=0x99, 0x1000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f00000000c0)=0x5, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1500, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, 0x0) 02:01:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000002140)={0x108, 0x0, r1, [{0x2, 0x7, 0x49, 0x4}, {0x2, 0x4, 0x8, 0x0, 'syztnl1\x00'}, {0x6, 0x0, 0x8, 0x5, 'syztnl1\x00'}, {0x4, 0x2020000000, 0x4, 0x58, 'gtp\x00'}, {0x0, 0x770, 0x2, 0x80000000, '^*'}, {0x1, 0x8, 0x7, 0x1f, '*+)]/,&'}, {0x4, 0xffffffff, 0x3, 0x8}, {0x0, 0x76, 0x1, 0x4, '\\'}]}, 0x108) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400448dd, 0x0) 02:01:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc00c642e, 0x0) 02:01:48 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0x4) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x27, 0x0, 0x1, 0x3, 0x0, 0x0, "3259562c7e1b3298ccb774b5ed2dbb8b405f93944dd99eda78edda395586af242808cfe29c17e41b9b22a8fa6388263ba2928cd43e0644e6c7913b8c9665bb", 0xf}, 0x60, &(0x7f0000000380)=[{&(0x7f0000000100)="861a0ef3ecbb444c058687c411eafe3461abce73bf8b75114cb85ad11d0cd96a17e2d1b0b98d3291fd218f09c7248ea734ebc5a66d8c5d521ca408315c481bb665f2104b21936ef211c1d7f3317a98d53804fd24a3fb37b9f39e9f6af9fdaa007f8c6fa52a67545f8beef177fa4ac28d7b106bad20f90bc2120052289ec581994c31975246", 0x85}, {&(0x7f00000001c0)="7ff9a8b82f183a5613f0dd9afca87cd66db281294f5dad7fc698d81087e3c74fc4908d330ad3b42d6bb554d0f8ff604374bd38107e76a092e8983f9ec44e2504cfe9515fe988ccd2122ac6b65fc4dbc2517cad5eae7bc7027e0aede48e147f7c1251f296c9add91772b4ede3a3c31aecd3fe34f0c2e9", 0x76}, {&(0x7f0000000080)="8b64439cc2fce77fc7f4a47335a91a45075de4143b0c158a063d5b91129c5d828c394abbac5599cfee396d08", 0x2c}, {&(0x7f0000000240)="ce1e48215efbfe8408ded01837ae14a051c967cf3dc4e568060a81341299b9b80a6914f629c1ad3c573b018a1d79ea55905e20fdf95c8cdec8f30949", 0x3c}, {&(0x7f0000000280)="19bcbf858ee30e35c7421e7c09771c048cc3b034478b255055b5a0590686941cdeae028ec7f5fea3b6", 0x29}, {&(0x7f00000002c0)="f7a9195e0247a1edcb66e159f847cb7d0f60c8f569749e4043632fe078ea15ddec78c63c035e32c913178e8590f70157e35f717c459066d3d096dd8bdfcdaf1ff81e352eaab3c153778af45cfad1cd0fc8c7554f969739fc884bcc009e65562e4305e4588436754a72ee6740bfd9e9378628fb63aa154395ded6cf1c5314fde3273d3fed1ecf33", 0x87}], 0x6, &(0x7f0000000400)={0x88, 0x84, 0xff, "96d712e86fe3b5257b6c061d88a4cf673731a76f5d008d8a5847e515ffff3f4f2de82e234438fe13bc12e0d225001f40d3195c00b26d0db3c3df0012751bad4b005fd1e0896f6dd89722c4265639f340fc8e703e1b15a033e8d228442d06c338778957a1d4e8786cf9bed1b64fa14a81d0bf4eaf5a63"}, 0x88, 0x44}, 0x40000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)={0x7, 0xbc640f3, 0x200, 0x1c, 0x18, r2, 0x9945, [], r3, r4, 0x1, 0x5, 0x5}, 0x40) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000500)={0x27, 0x0, 0x1, 0x7, 0x6, 0x5f, "c97728b9193009530ad976674e10598b429a915c4f1f06cbc9ad53f75e2574d4162f7049836c131cc42ff2893917ba12c3398a4543714eabb57c12fab5fcc8"}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000580)=0x8) 02:01:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1600, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x400454ca, 0x0) 02:01:48 executing program 3: ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x9}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) 02:01:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_io_uring_setup(0x63e3, &(0x7f0000000000)={0x0, 0x203131, 0x10, 0x1, 0x2bc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x200) syz_io_uring_setup(0x4003d82, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x676, &(0x7f0000000080)={0x0, 0xad53, 0x2, 0x3, 0x21b, 0x0, r7}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) pipe2(&(0x7f0000000780)={0xffffffffffffffff}, 0x1800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x6, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@func, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000580)='GPL\x00', 0x10001, 0xed, &(0x7f00000005c0)=""/237, 0x41100, 0x4, [], r8, 0x0, r9, 0x8, &(0x7f00000007c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x5, 0x6, 0x6}, 0x10}, 0x78) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x6) syz_io_uring_submit(r4, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2007, @fd=r0, 0xa4b1, 0x0, 0x0, 0xa, 0x0, {0xc9}}, 0x8588) 02:01:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40049409, 0x0) 02:01:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, 0x0) 02:01:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d00, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:48 executing program 1: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf01800000000c000300000000000000e9ff070006000305006401010208000300ea48ba0fc43605322917ba7771e39bb784acfe6ed3da84756900000000000060f6b216bcb3b2d4e204e6826f4f78de91f64d6147a655243410b5484ecd721ab26e5b568496adcef8c64810964fefd8ec47c727a8d61620500238dc239e3bbd74b3e389c32333f0f14fe880348290b54b4279c3854a93a9dc8a25c02aa3b2425a310d8c3e0b5d210ff5b6324fc400"/198, @ANYRES32=0x0, @ANYBLOB="080008000000000008000500ac141432"], 0x50}, 0x1, 0x0, 0x0, 0x2000010}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x44, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4000010) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@remote, @in=@remote}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x34a7e297}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockname(r1, &(0x7f0000000080)=@x25={0x9, @remote}, &(0x7f0000000100)=0x80) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000000)) 02:01:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40186366, 0x0) 02:01:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x1f, 0x0, 0x80, 0xfe, 0x61, 0x8, 0x1b, 0x6, 0xe9, 0x20, 0x1}, 0xe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc020660b, 0x0) 02:01:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)={'erspan0\x00', 0x0}) 02:01:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8919, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 02:01:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2202, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, 0x0) 02:01:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 02:01:48 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000228bd7000fbdbdf250200000008000900040000000c00030002000000000000004b11d8aa", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 02:01:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2500, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000480)=0xe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x20000025) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="6d5d6892931e2bed944ffa4edd4f24096a6d5977956a01b89d4846d6416724e2f6666d8eb350c0c50ba8c1863cb798fa52eb14bfc961b0e548eab946894cc5eda7efb25dbd16597330e82b87af37ef0b379fc513a244fb505d7c1fc52e26fc314261", @ANYRES16=0x0, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x801}, 0xc840) 02:01:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7800, 0x1, 0x400, 0xfff, {{0x14, 0x4, 0x1, 0x9, 0x50, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, {[@rr={0x7, 0xf, 0x7f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x8e, 0x3, 0x1, [{@rand_addr=0x64010101, 0xd761}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}]}]}}}}}) 02:01:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80086301, 0x0) 02:01:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1e, 0x0, 0x401) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7, 0x8, 0x1, 0x28, {{0x13, 0x4, 0x3, 0x22, 0x4c, 0x66, 0x0, 0x4, 0x2f, 0x0, @local, @private=0xa010102, {[@cipso={0x86, 0x15, 0x3, [{0x6, 0xf, "58dc82954dd51e1c8d8410e26d"}]}, @timestamp={0x44, 0xc, 0x15, 0x0, 0x8, [0x1, 0x9]}, @timestamp_addr={0x44, 0x14, 0xa, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@loopback, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2800, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:48 executing program 3: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={r1}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x8902, 0x0) 02:01:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108906, 0x0) 02:01:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket$inet6(0xa, 0x6, 0x3) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000440), &(0x7f0000000480)=0x4) r3 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = io_uring_setup(0x3c74, &(0x7f0000000180)={0x0, 0xa0f9, 0x10, 0x0, 0x3d4, 0x0, r3}) syz_io_uring_setup(0x6574, &(0x7f0000000200)={0x0, 0xddba, 0x8, 0x0, 0x2b4, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000840)={0x1cc, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec89}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa74}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x1cc}}, 0x4000014) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x2, 0x3}}, 0x29) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x3, 0x3, 0x8, 0x0, 'syztnl1\x00'}}, 0x31) 02:01:48 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r1, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000680)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x4adea3e7) syz_io_uring_setup(0x2ef6, &(0x7f0000000200)={0x0, 0x5db5, 0x4, 0x1, 0x17b}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000980)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd=r3, 0x9, &(0x7f00000008c0)=[{&(0x7f0000000300)="3ac065fb52f4c702afe1c591b0dfc7708a7655697728a72de87cd4e966f965ac27da368b2215a4ea1d0cf8f9a94980d4c214a6b5848ff81290d7531183bba53f4904dfe674d22714605e6dc93b93d01bf1786660194b3f279309a93399c8ae5a88b211c63ad18b61f1c2a1c25d5c1af16683de88f1263f430b4bed8a", 0x7c}, {&(0x7f0000000380)="ac8517b18e5e86bfcf154bc974f5eabb710dd6dfe600cf8fb70f3cc1de81ed9256764f6eddb17be130ca1ca8c4d0d0d3e9ee711f76c768e112411d46eae1e733dcf0412af60ff7bb06a55dcb4c7d491016e09fb4512bc9ab9187c5ca41e07c15eee5150d1dff67ed4f53a1551f79d9d3c7fde6e11d9fb651a96bdc4288b07782d9d70afda981e1a6f0ecb6112aecc85ea9d6b170ee8ca0a593aaf4342e610126a0e3edec2c77438d9e30d30d1cb3ca66ca2f34aeb40b4045661210f49e932cd423d0c9f0dc22e2d81c44988cedb28a7ec413352da62a384e8988a5b1158f0da03513856f4fcc2cb710792c8604da0d36823f34f0b1a1d35dffd0a6c8e8fe", 0xfe}, {&(0x7f0000000480)="f50e787df69b3a077de257553f83d1d753cf7bbf4e859f7786b7a48a1cd71dfa367892cacacfd115e574e4fc2311ebddaed40ac813a65fdc6f064da83a122a886b30679034d0860ba7eb44a694f25afcb65dc89e753179afb869981d6b863976490086409531ca13077be370336e4d19189d91336d15edb3b606d91c8b3e3a7ca1c50b3af0cad50fb03a97c3be593d19818c891c341354a8a584dc236702561e4f4c15e99e58874f90812878a88432bca07dfe7963b18e60cba8644c24367dab3cc9404ef74fa356c688561450b6801d91f65e10cd1d724e907101dbce1f06b88479307f9bf13bfd6a4e36", 0xeb}, {&(0x7f0000000580)="7d2bac69eee77874599f8c4e16ecfd40ba5e5c76bf13c746bd7b0cc9a072317f44a8009cc3fd0cefaecaded1f3da11e4c31adb32b6ef92769900d5f481e01decf20f729cd9ac1509f7651e8ea87ec5d26c738fbf9a44", 0x56}, {&(0x7f0000000600)="509e10c9aa0555", 0x7}, {&(0x7f0000000640)="49b859b67313925795764244", 0xc}, {&(0x7f0000000680)="1467eb262435018ffa82de8e0826f8474c28e6870f25e8da4fc859645ec6c5c369867a43af4e46b8cf5fcaa9ed5f2829eec13bd3a3d2dc172cf72479aaf2352d5bab829913f019fa0571d1596d781837bd049d40b349e90f155bc308f4bd7317d2ae9bfee05000e20220c8dd25f8fd7b921ee7df0448f90f320910078cd38f57288ea0e0f1730e5f04a19beea32dc9dd6af567bc1f4084e5f29f7c97631bf661189895652a051289739a6ac9b6630ae9930a2acb530caccf8c0167349e06a31471f079e5e0e50bf2636bbea5658fa8d75009d9e028e0ff22a5870910edbe2205", 0xe0}, {&(0x7f0000000780)="a6d8cd197091a492828bfc54aca87f713b17f79fd8f767f9c71beb40f99f85c7aff4f17b9074afeab5c5156bf2b08f273aacc4ac87479e0cfa6526212ec0dff3b157e03ace4e34c57d7649a37397734e8ee90f2ab5bf1d0805bb18e89459565170a329de8302719eb86b05efec8a234af8ca8c9fd1639e8f3ce0a7ee6137444433727e5df08bf8cbf77742d78bb563e20813ce03b7e8db3c531b60749e409e58d8a9da57a949cacccf60caec11e3b2abd5f3461cb4e4e1c502f0fa4b192980df0614a78f15671a17241c96d797df1612f817b966de32d7e68eff340e47b3d359221af7637357e316b8ea1f", 0xeb}, {&(0x7f0000000880)="d001460352339c6365468d", 0xb}], 0x9, 0xc}, 0xff) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r8, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r9 = syz_mount_image$fuse(&(0x7f00000009c0)='fuse\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x0, 0x0, 0x8, &(0x7f0000000a40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@dont_hash='dont_hash'}, {@dont_measure='dont_measure'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@seclabel='seclabel'}, {@fowner_lt={'fowner<', 0xee00}}, {@euid_lt={'euid<', 0xee01}}]}}) syz_io_uring_submit(r4, r7, &(0x7f0000000bc0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r9, 0x100, 0x0, 0xc75e, 0x7, 0x1}, 0x4) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x890c, 0x0) 02:01:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2a03, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x80108907, 0x0) 02:01:48 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) [ 2468.090148][ T8732] fuse: Bad value for 'user_id' 02:01:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) r2 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x4, 0xa40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x8e, 0x2, @buffer={0x0, 0x1000, &(0x7f00000001c0)=""/4096}, &(0x7f00000011c0)="b607fa3d3eaf938dbae6e38a80ca31a84c3a435d3c6f353574726b6fd60610780b9b4009c6449402507d07fec56826d36d30c7eee896fb278ba296d38c3780bfd29d8726fd22abbf9e7ed58123995fdf8602c0d09b52bfd41600e2012a3359182607824835adafb31ecb22521d4dec5651a26a2650e0cea0c1ecedeff01a9303c62750b43647f3b58270073329d9", &(0x7f0000001280)=""/107, 0x6, 0x10004, 0x0, &(0x7f0000001300)}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = syz_open_dev$dmmidi(&(0x7f0000001400)='/dev/dmmidi#\x00', 0x4, 0x103000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f0000001440)=0x5) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000013c0)={0x2}) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000080)={0x0, r6}) 02:01:48 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) syz_io_uring_setup(0x1724, &(0x7f00000015c0)={0x0, 0x668e, 0x0, 0x0, 0x23b, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001780), &(0x7f00000017c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001800)=@IORING_OP_NOP={0x0, 0x5}, 0x9) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000014c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000200)={0x1260, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x124c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "cd4465f7e3dbab9dcdfb869fc59b9b4f7d0e587eec9905c07c06c5275fd53f93f56ecb8fcdc83921b46422c1226b0699987a36198c32b0bddbef0b10924aa86419da20a017225fa62167abed3202509bc80f1464897f1ae16d65e375dd090fa3143ec1af39dee8855c2b1cbabbbc95de7722b7b0db3f1db5b778317472d2a8fd823f07da680061134ccda4c63f3cc87c94e5776ea08bdfe2a6814d76d3609f3265a1d2ca0f6965e8bf50745a004598644db663653ad261bdf57e28f740c390be30315f513f7650e7c6b211a5f94d2ca02776a3360a07d260cb22062330391658a334e2a0b9d592ca804fbc064327c368fb3e200d30a47b1e4baccfe7cce468ebcdb101cc6f968f6eebb26b7bd22873f6c5985659f71879e8c071ec825a4327012e27d0ba793fb04fd35216da6621742c0bea38b9b4c42a0255b6d04c46ebc92b93067d0451d96843c4e84b2bc8fe1e05a552bb30721d14a8403edcaae1186ca92bd56cba42f42029234863e9936c882af5ce7635c59f5b1507bdbda62efd8b29762384b658d82a9c7a5d6522ad51fa5616f91d3375c33c2c545dd466c49f4f2553de61b228811fc9c9576da71fa049c9be18798074324f2d84149cf70134484cc6f1c7fb61882a1e2065855a8b7d9504bd8d889b040aee4217ddde0e8ad7f7d4f9700b07cd696673213ee59432f31b8aee05f398e8536c8f0dde18fa9794314ad5eac8978f0efadf7ac3214aa6be42efaf04a7cab31be234d5ddde80a4a1a7f07f441562eb9fb056de31876fde70b3e832ec0219be4ab0c521aaf4934be7e0cf2e7d5c570006d5389f0738ed9402275a490059218913c2df5656efc3f6e4a1eb4a0b4a9f0b1dbae2a3c7dda2467c68e9b78353585447b49d2fe96fc3bed2007d99c15e43fdfec110792a7fdf12349623a3ad3c11e80995058c856ef76c56b6133137993456d46a5e94004a0668153b17346742eb3143638d2eaccd4bb02e445e087fc8b35f5db8ac58a0cf57b39712bf6e7ea1a23b7e3ee29751d9f72d337b1843c568f19c661e3b0fbca31e4b52538bb971deab93ac4c0cf46eb5b8f4d226812bc1d003024e3c2be08239193f2ff97e01384f026af1ccf05da3ba620e367c72210e56e7400302a8e7e683d7cdd041cf67237b1f6abe007c79e554b8a9f4c9561c148cbcee51143114ddb137ba0f50db0e4f8a8cfc7b2520e56eee04d1fdeef40b4bccc8b81981ad92c2d2c1ec69da6684a16441b785067b53904938e56d7d9610883ecc98059787ef46c4d6e433fe0b68d17b1307270116c64a76c5cbdb602a2a21b18eeb504c59eed7b136f68a5c5b66ed670c526b7caa9d71aa2c1fd4bf66eca12285df526c86d5929560b738593a2d7eb58d53bb72bf6a1646fd553fc089e3f334fa7a661bb940fc748649278a921161f8ddb5d8927298e42268be9a78a6691b23072db27515646215d4593e9be49aa5414436517bc0407c7a3b4d877cc070c834b08b940fec55e2fe46dfa43a3affaaaa5af22e461985c6f50dafc4a53b40722b4889d13121bb5e7a87acc57fb75c10ad75105be1220f2dd848cceb5a25c5d6e61a9bf65a9fe306b994c313ec9df9b31580e49a4d578b7042766393595aab990450e168dce5acdbff28a99955af8313a1fd1649cab832e3da0fbec4032d89c4297b19dc60a11dfe380bc7f335aa2b83423ba1ad30a3b0dd9ba71b9776a767b18d732a0d4d20717b13f0a887be76ea40fa76cd94ef9c6f44555432b8b6f2fb8bc2b28c14ccece9e9f65832eb6364361f041d04106ca73faef3e1ddff3abcc9ab954fb11f372673e3eb8b7dfab2ad0eac06554b903fa4c232adc6039d9da4646259a1a1eefdd4600fd42dd26047eb3e126b702fca77a63e2eda2b7a5bbc7e00689b47c1106955d528e4406002505ead1f1ebef4d5dd269070176f59d246ab782c13afc44c86c1a449471777c56a5b5e15d8500b67e6b8439e68c7cb40860dab4f9a5684e642353e0e480f47a563c17d26b96e0fe1e455cb0193a91c72f072c410d0904e2b7adf96e31b941e0ea0117c135125f63efd450f0c030909b5e741f5f74cfb54235bc265829f8711f6fdfb48ccf244f83188a0b0bbb3f85e251ecffe290c927c641cdee2331b398831c31ec3769ecada8d2a933760aec13492168d86e8adef6d506a5b7ef0e5e96b395ba1aa31b8e8ba2ec9d4971d0f0a603c619e4e3031e5a7b8161536589265ff5cd8ca2319efac5d14ae67eaa70c296d93ea2ade720de5d74a83b7a3b3b5235205edcddff946501f5383023af890a3dbd8a9ba79d0274b716aeb4288a64570aef5b7e051ba714a013f0cc63e1e84949ff485db2393c664e41b543b9b41e4486b067a86b856aa8c85ca00c7fb331cf7d4ece0a334a86e423f4103a0b44589406e9c2a4d827285e0eb2f4d8a0d6e2ce780783465e8622eec1c51dee04cc9a0c61df653e1f40a783095a27ae732a8f9021b6b50a9954c1dd3add416357bb0e35c92b4d5a2e3a02623dc461d4ec1bc43d9fe8c5e4ce3edf1b8a73a2f48916f6c76b4693c4111c8234f9c9df41a381a980081e2e0c25237a4e2f5074e3b4fab0eb7921eb34bde48a7fe7a975586598cadc51db54fd355e5cc7bc029009851e1003e15d0f8214ae28f11f543f1c266969492228dc2b7797548f86f577af6e625830e9d8d85b8667f2672dcb10fad75366c490e4b9a1b43aa5c1239ff146dd6134c57f5e6dfc4ee8f04f52e5cc1926a756c5fa328847aee539d6b9dee20d6f0e0747cfa254a8dc2536763171d679310ccb4e312b547a3799622492d72f1f2d35486a3adebd4937bc1b339530209227fb5916c06a404ff308f61fd17d7d7b9f67bb840a77e2ccecf4ebb2cb5922ae1370f5900cf82269ab2b331754f5726b332dd5162e89e9dda603412e7f7a4803e549579762c9cab32395ec37872f7605a9dd8a1a9f67fdd288f457c9c137da8fff603a46cddb1eeb275ebdb2362967538ba75c535f6e1d41349f4b0a609ebbc37f9ffa234d12b5d7e09f8d1fd625f9e70b34c8000cb7d2e6ce8315d0226382b1213f52fe34bff2cd3e99765ce2bf2c64506089c6ba5e716bd343256b927e767ff14e33cbaeadf11bd36fb74db3fb21364451f98bf6491f6637334a3bdbf20f15ace80834f55a3dfc45ee99fd8cd0360f039563d62d9c996985eebe023893a39301158e9259732c7f72641259854a73ea46363fdfc72812abc55db1ce6c7179fd3ed12728c2d882160773d91fb6db832df27c14fc79cf9cfa80c38941da59ce133225ec4d2db1c04863d8e202e39d684cc08f55b976c7f7d9f3db18f591beddf920297dbbc1547287275ac1929712ab323afda603620b353d1529b0fb76a7fe437f5fd4ec4c1552eb7003aac57e138334ea76676579e0e6c6f472d476e9b567ad78a4c4c01e2ac4081a48d14520a75737bbd22adc202ff4a0a1c9095df65807920d1b3cdb921f4ba6ca300ae17e2277fb8e01422518ae2005b9fc60c6a1e31757afbdab2bb4c26486fd9bc2c12143a16d780518f21dddb5b4544855c7b89dcb1d526a69f4cae73e5d942bafe19229da710435eafde0c77f6b5862a3654f4163aa91ad0c3a125f7fc180ff346b9d5e8ee8fb3618f6cb17816e4b3dea1a919d54c43abdba4627de49d493e2e81c18f978fb587a80271beafb07f47f0c8743143f803819961623b717eae2f9eaea630f3a6d50dbad8833b4115f8c130d9cebc9b0bea3308da2fb9464d058483115e0e90331614465f37635f308eec1222a4fb617787e320dca2f44940a5cd0ba5b966fbb118af2bf64381c0d5cfc7202a27d0b2746a7e618e8b73f0b1bff6f7b4f875dab8339597e8c49bf608036053a7b7029f5f79b88349f37ce8610a5371c36fcabda128c67bda7e387b9230a037be534b404d2acdb035da2009af44dca953876e4f22b7ddc2114533c531190c997425018a9cbbf380189abe1e342db1fb057606087b80c9b28f27321b5b704db3b106dac643bc1037b1e510913c75ce52b76fac79c58599e83e7e2b137dfb351e510bfbc9c7a10e71ce9aa486a7d6c06d881c1c70e85b677e96d3e3652dd48a4c8476bed0c693e78047050c5da28d36522b4787ee7a32ac82d0772989ef593d19a1b6fbf0c45574d8193b5467e56d1d0c415b7a802e7f7c3fb8482272e97d575d64c0a6458eb3af8be80b8ba9334a7ce04a9b5184d62444de98af3ec6c1035b05af1e785a11ad30e45caa19c9ae083e0daa89f036ed06df2edae701e957a8379adf5fc645942b75137dbd2a79fd37bdb589c8c8bfbc0a4d7b7237d96b14cbd57289b807e770f46aab7c333aed31d41abab0564d80427dd015d1a27dbe79d4f3bd6624a77b82775a7b6edb4d7a8b342c79c6c640f19ec30e9f598fc06cd680fa2ace404c5d4fec2b3935edf210ecc0b6333874a9a3d90bffbe4fdb119b3b2e01f7c17c335619022b2b20bbcae07d3dc8d006595ead5f7af477ecf97e2241566bd7fb441cd432260e51e44d5cc6d32d88bfdb314d8aa64cfe774ad8ea04e72d5ee581739f7284af19dda1f3baa121191b050395b44c1a9b6e880e234ca1a1f47a55af07375d6f092c1f0e51f68ccc46876c64bdafac7126f4901bbf0949589a1b60b2a6eb68bdd027bbd1cf31418e25b3dd54455a775e44576b57fe7d0048c457e8dc5a7b3d2a3b6cdb06e6278b2b0bc3896bff93c01a058c5370172942f19228c272b3f6acf9fa0019094e8adec9cd45b72d31e249a449f334faa656e0ab2c6beacc11078d1c6c74437a799870b1b22a4db23c906e142daf3d7e68b2232af85a2a5939fe465ecd8b17580df945c8ec29076dc885aed7e2b5bb5253d72550caf07ad7e01fa16970b1a65cfd8aba980fa92246a8bee259cb0f4dcf1061dac2084cdacbd6fa152bb5bdcd11ee5e91daa89be7029de387ceec2eafb18558e776ab659f7bc2657ae0021bb58e1a80ef2ed747a69d37f5b2901b8bfd9637dae5e60a5f29235fae7302e6fe0ecb6f26efb775a65dbc2c2619e83a10df04f4411bbfe582179efb8ae82a0ecf3f77e2a8b14ac5a4a2832ede51616e19058b45ace88e861072a8e459a46e4be9e8fd89e1d74a2fa0d34b62e9e3b3d929db010a37e28601682516f37677741a5c70f2251f541769e1f5b395d1c39869e7e67b53e5ad3c8625b306ba2301637fd92b71b855e4f845b30b81a6ba41c32fe25dbad6cc731abcaa902c15430725315e2396a0cd625a7c44b64018d2be65780f0a351d69603b923a776392050ece8505443ac1214d9a783b854e7579d4202b730ca8228a9ac0dc9f5c6435f3fc89fa174e6b7c65d6243e7c6bf9da6fc5f4d57908ae0c3dc1459aaf43ebb90b28d89f6c704af3fdad136eca3a5a70ea55bf005d49e7b6730e1d165b27d05b9faac80117b2d3be956334daeb86ad5248a4849996de63c4834aa5c51b54a9ba8c4e5a8e8d275681d1792e16f374305790cbca62dc05a707d33971658f527936caa7b4db94fbaa334cc6083adebd6a706ad4bccc85b36f6f2568186f51bd502ed3fbfe0545eecca2de10b8ff1090b3997a3e06efd249439bfa4676200725be7752b43cc348ebab45b495415f73d8c10e5ee850186658caed81798ec56611c847a5ee2ad9bc8984ce8d1a1365e0ecb3f4011a3b7dc383acede54b46f5a294be4dbbd8a1ab43cc1aa2685287e9e30d24e9e4cadf3fb569a142a2b5a114b8534c197bd935a67bd60539c6d5d1eebdf5eba99b65f4e7ed3c80abcdbfb65f4895115585160a7cce6e3845484eb6b8"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "b1c9372ca50c0e997a674912cd28a6a04e24f8e3b3b122ed6bb88b9f6d1d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ID={0x96, 0x3, "b1c971a874cef78baf18c24c7f9f4fb3e1c4bb98efec4e0bac8a527cb8f55995e28b0cfc9518206f2dbd12d4ec2e80346a180ad033798a6d97c971b9740d3ee889f0d7d0d22473457617f35287a75a068d669f4af6e3283b97aa8489cb3885d302ad89587dea4199e26fbb1aa7990b3e5711bf37dd6a7cc9a13819e7a6d7f5649914a9353b02d1dd90fa00243b798e7f0784"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "7a0f2268f10afc3e624c096fa4fc31e6cbf96b1ed7e15245b1b1f36f990268"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xfd, 0x3, "6838f2e4970a8b29a6417d897791c2e0082a56156193b9b06c67ad451c459d03ca4a8a057341b9d8c1fd20a8fd3035a5f94cd130567197c745bcd656d6175ddf7a264ec99987be348a930e13585ee7dc14a10a4093a81e4918b4f8778e57854f83e69711ffcf0099dd2e786a6fc11962c6344811bb8f797ddbc2f740615105f3b9848b3ea11105d8094b66f57fd7a65de5aa06696c89524e0fe12161497d42aa30767567effa350c419f8860f9c8a3525a08332d0b497a9509449d008cd9bc7a34c8b2c9cc802016fc546c5eecd0364948fe971fbe9b8d2dcb435070b443577c58e1820a3c1e8150412363962c398be932c298f79341110c01"}]}]}, 0x1260}, 0x1, 0x0, 0x0, 0x40041}, 0x4048000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001540)='TIPCv2\x00', r0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001580)={'batadv0\x00'}) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000016c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf2510000000580004800900010073797a31000000003c000780080003003f0000000800030008000000080004000400000008000200030000000800010015000000080001001400000008000300040000000900010073797a30000000002c0009800800020006000000080002000300000008000200e9060000080001000200000008000100080000009e2c4c5064137a45aca0fc4b2ce681309ef20aeea40891e4b8dae7c17d3a5dfec11c74456c505a"], 0x98}, 0x1, 0x0, 0x0, 0x4044000}, 0x4044040) 02:01:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x7800, 0x786, 0x5, 0x4, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0xff, 0x2f, 0x0, @local, @loopback, {[@timestamp={0x44, 0x24, 0x83, 0x0, 0x9, [0xffffff42, 0x3, 0x40, 0x0, 0x7e9, 0xffffffff, 0xfff, 0x1]}]}}}}}) syz_io_uring_setup(0x1133, &(0x7f0000000240)={0x0, 0xe60b, 0x8, 0x2, 0x170}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 02:01:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, 0x0) 02:01:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2d00, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) [ 2468.174659][ T8751] fuse: Bad value for 'user_id' 02:01:48 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0x61}, @alu={0x4, 0x1, 0xa, 0xa, 0x7, 0x18, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xa, 0x0, 0x2, 0x18}, @generic={0xa7, 0x6, 0x4, 0x8000, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x6, 0x1, 0x0, 0x50, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0x46, &(0x7f00000000c0)=""/70, 0x41100, 0x4, [], r0, 0x0, r1, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xf, 0x9, 0x81}, 0x10, 0x281d6}, 0x78) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x890c, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) 02:01:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, 0x0) 02:01:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:48 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8903, &(0x7f0000000040)={'syztnl2\x00', 0x0}) r2 = socket$inet6(0xa, 0x6, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 02:01:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, 0x0) 02:01:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) 02:01:49 executing program 3: syz_mount_image$ufs(&(0x7f0000000000)='ufs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa, &(0x7f0000001900)=[{&(0x7f00000002c0)="5e48bfae76059a6dbadbf863e8cac63295299d66c013014477f67065733f4e5b5adc3c9b10144cfae3097b269418b26b4c00e5d91297e461e4f89856d17b883a5ad670b39f6045b76ccae9ed4807e8c3c5c7c178e36f470d82932d2e4e4bee2870c8a8f36e4d978ef869e38eb200018290e304706b5727a731d61b8ac4b37b1ce15c466c529f7a511fd00bd625d1206a8babe078d338cfefa7b7d464e3ee195a49c6bcb5f07be90aceb5e3f7082ed07e5ffa37345f1ef3be248346810d8ed3be89f6c355b17ac793e4d525ed50de10e2c39d8c4de0c941f282bf", 0xda, 0x2}, {&(0x7f00000003c0)="f81893c6cfe06823656e90cb59985266eabdafff67243e30c2e9a691757c033f7e86c454a3f346a4d645ca8d682e3bc5bd6e20d4f0d3336528f24e48df3cfb55d77d5a7ee547feb7aada3676d1682010c207d58125809e24c6dd93649514b8c13dba0e253ea9bbe6332d8722993ea8b88bcfd8ebbaa6552b1c12b3161fa07b7a6a39b9db942e8007a043ca6a2ac932da381daed61a616ffd208fa9581174fb389659e103966fd1e9cce0a5f319b9869d", 0xb0, 0x238}, {&(0x7f0000000480)="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", 0xfd, 0xfffffffffffffff8}, {&(0x7f0000000580)="5d0d7af08201af8ffca5e145128e719301ee5b24", 0x14, 0xfff}, {&(0x7f00000005c0)="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", 0xfe, 0x7f}, {&(0x7f00000006c0)="b87f54ee7a10017144c8353448bfb91b927c22fa48d1bbe5386e4edff05daf1385baeeffe1ee872bbf5b2a7173871b30e66967f93141", 0x36, 0x4}, {&(0x7f0000000700)="57222ea30e792af4302279376561c92412af2db65a872f8300ab2a3c968f7544cc4874bd5be0b92c9195c127b3a11e5284b0d8bf2fa5f882364f635c220d43b5c1ee7b954b6736257bc6362de7187be30df48d0302dea491d625efb0cdc6d2cf79dc6966573c521fb9687db68981f1e33b68272103d24cd00c91242ef3cf67f7df6b0fb8d84b90630637dc", 0x8b, 0x7}, {&(0x7f00000007c0)="9dbd6c75f35107808edfa7129f9918acd7072ad7e71c82a8205396710e353a9126b4cfdac8a625b97d90bffc1584d872c4ebd28988fd2b0ad5d4b6e8af05cd3475149225cc6680c60b2acaec434b1ced7c3ea6c19b748ff57defb42f49fd60c928fb7d0db98104a0a8a8136f877eee789d3296f9649e1386fd24c175ca13e67b74028be84661fb4a217c917502d56989cae0b382c9411127a57de4f09343", 0x9e, 0x7f}, {&(0x7f0000000880)="363764fb5fd818c673f70dfd6ce8d873d864f454cb2483588ba5bbb568cba58a818cbe94bb225df5551f3c0488695669eef25e5d720f274fc7541259d6edfab92b504323d469fb000e7a59456c8c57c5d996c5127f9ad6024443c954fda5802b2795b1", 0x63, 0x7}, {&(0x7f0000000900)="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", 0x1000, 0x2}], 0x0, &(0x7f0000000280)={[{'\\*-H[\x00'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) syz_io_uring_setup(0x7aa5, &(0x7f0000000080)={0x0, 0x1faa, 0x8, 0x1, 0x15a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendto$phonet(0xffffffffffffffff, &(0x7f0000000180)="14d76e2826c5c95e73f9b50575dc922b18a9429b09896955060b80e5f4db4fa583b869d52cffce89fc18c256940113061e691a3014dfaf4eb1bf08074210667db4ee232fbf155a1c9a4f493f88bcc00ec54307885da7a5a83d07f37ea5e3653aa3ac4035a71e823d3e5b7c6559f3234fab6ba87e61bd7b683fd817ac5f96312fe7f465bdaa2f0e62ebb5cbe4059b0634f30722e6a16f4c1b4c744287a310a53ce1f09f62a6e0c67360fea7", 0xab, 0x4000, &(0x7f0000000240)={0x23, 0x0, 0x0, 0x2}, 0x10) 02:01:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x80003af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x8902, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000040)={0x18, 0x1, 0x0, {0xa4d0}}, 0x18) 02:01:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3400, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0xc020660b, 0x0) 02:01:49 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x5d5f, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0xab, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) setsockopt$inet_dccp_int(r1, 0x21, 0x10, &(0x7f0000000180)=0x7fffffff, 0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000200)={0x0, 0xffffffdd, 0x1, 0x3, 0xa6, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000000)={'syztnl2\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) 02:01:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x44}}, 0x18) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r3, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) write$FUSE_ATTR(r1, &(0x7f0000000000)={0x78, 0x0, 0x0, {0x5, 0x69, 0x0, {0x5, 0x4, 0x8, 0x8, 0x8000000, 0x100, 0x0, 0x35457736, 0x1f, 0x1000, 0x713, 0x0, r3, 0x9c, 0x7}}}, 0x78) 02:01:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) getsockname(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) 02:01:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) pipe2(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000021c0)='net_prio.ifpriomap\x00', 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002140)={0x18, 0x0, r5, {0x1}}, 0x18) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000002280)={r3}, 0x8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000022c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002300)={r6, r7, 0x2}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000002200)={r2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002240)={&(0x7f0000000040)='module_free\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 02:01:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3500, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x800, 0x6) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x1, 0x10, 0x80, 0x5}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in6=@mcast1}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000180)=0x73, 0x4) 02:01:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d00, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:49 executing program 3: ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x40a3, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x1, 0xa7, 0x0, r1}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x800) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x2000, 0x1}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000001c0)=0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 02:01:49 executing program 4: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x2, 0x9c, 0x101, 0x100}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4500, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x10, 0x20, 0x1, 0x7057, {{0xc, 0x4, 0x1, 0x8, 0x30, 0x64, 0x0, 0x1, 0x2f, 0x0, @remote, @remote, {[@timestamp={0x44, 0x14, 0xb2, 0x0, 0x2, [0x6, 0xfff, 0x4, 0x2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) 02:01:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0xc6}, 0xa) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f0000000040)="b5b862c9249d3debdd772a2e9c61d87c6e1862dcb8386718f94c47dcdce484407d4d437bfecddf82a6af8d174b3ccf91782e5f53b2f97ca995cdf35378ea3a6e5610555d9d3beb09ad6446483e00", 0x4e) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x8, 0x1, {{0xf, 0x4, 0x2, 0x9, 0x3c, 0x67, 0x0, 0xf1, 0x4, 0x0, @local, @loopback, {[@timestamp={0x44, 0xc, 0xe4, 0x0, 0x0, [0x8, 0x9]}, @timestamp={0x44, 0x1c, 0x95, 0x0, 0x7, [0x3ff, 0x80, 0x4, 0xfff, 0x7f, 0x2]}]}}}}}) 02:01:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4d00, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:49 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000180)=0x7fff) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x8902, 0x0) 02:01:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6000, 0x100, &(0x7f0000000040)) r1 = socket(0x0, 0x2, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000300)) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4d214edcd1f97eda", @ANYRES16=0x0, @ANYBLOB="05092dbd7000fddbdf250000000008000400ac1414bb08000400ac14143708000400ac1e0101"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000600)='gtp\x00', r1) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4002) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="34dc00d4", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25050000000c000600020000000000000008000100000000000c0003000800000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004005}, 0x4000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x7, 0x4801) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xaa1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x6) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000240)) 02:01:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x240, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fffc00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9738}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000000}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfba2a5b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x180}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xedf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x6}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:49 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, 0x0) 02:01:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', r2, 0x7, 0x1, 0x1, 0x9, {{0x17, 0x4, 0x2, 0x0, 0x5c, 0x66, 0x0, 0x1, 0x2f, 0x0, @loopback, @remote, {[@end, @timestamp_prespec={0x44, 0x44, 0x23, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010100, 0x4}, {@broadcast, 0x24a5}, {@broadcast, 0x7}, {@private=0xa010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xfffffa9d}, {@rand_addr=0x64010101, 0x3}, {@loopback, 0x1000}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)={0x27, 0x0, 0x2, 0x4, 0x8c, 0x1, "579ff42b26a2703f153d91ce9097b629782362177be9e23c4624b143deab9b22963200418f8aae5342cc4ca4b140b8482ffcffcba27917ffc7423d4ec8dce8", 0x3a}, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000080)="f942c2c7c2913e1af98955953da0400b09f85c559bcacdf9a39bac96c5587c3b975d1b61d7777c1edd1fe36a3a34ed000eeb66d2a85862eb25fcc04134e91709a75e7bba0e4262672efabd5b8512b0b335e42793af125b2052857569652d23e3634891a5ba7d4ed7b725ff00be51597bf94df3e36eec0883eafad6f8ba4cf7d2b7b7", 0x82}, {&(0x7f0000000140)="e3421ea7cdcc9594a323d978811cff70648be0f1b52b4aeb59166dc9eff0dada28ac2ebcb7ab756cb887a8b8c33651c5ce991230cad7e4d09d9da709fadff93880d49a28ea30189f32b3819362949079bca7785eb8f348dbadf5c787f53e6be89da8fa738272e7fc1b0a98b052a2950e1c89c65137049269906b492b1da09f210b1a762a5d420ae664b8d3", 0x8b}, {&(0x7f0000000200)="d8a469ffc351cb5dfab02d1c75eeee352e13e23e85727fc76f1eee59e5676b29ceb87908b4adf7f6207c9ab3b7dba5fd720facd22170707619a861eceffa84cd3b25b4a99f970f2f31016343d91c867e999b15b81d190f6ae2", 0x59}, {&(0x7f0000000280)="8d3ed93f9f040dcf8f4326f6a26efcbeaebb29d43600b0c832d19fb339c1dfea35be942e4b7a27441b9a15e52e714cdb8bf171ce63dc4d4810206f026ec6e926f6f0709f7ef225647cc035e60bc91fb104514d9129a53db9d48186da2c426ed889b0b75e2542778001601db6c23183bfd3b2c2fa", 0x74}, {&(0x7f0000000300)="5d084056b154f5c53a1d64d408a9283607fd8ee1c099b75dd9c1cebaa9209dbe5c11d13a3ce502b6463c71cc7540934c31bce76a727f9cb5f45089fdce7c3bbce4e8a58d1281acf40bc8111085682e5472c833c5c293bbc39f9a9daf9a25cd831c82cbacbe395eca6290a0dcb7c26d421c831ab5815391c1e3e532bc4b8fcd64cfa229eda56dd1426e4dd279db1a64680f5bb9c6a52f3b7d0d0cea593b1717812c", 0xa1}], 0x5, &(0x7f0000000440)={0x110, 0x114, 0x4, "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"}, 0x110, 0x4}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)) 02:01:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002040)={0x28, 0x0, r1, {{0x3, 0x90000000000000, 0x0, 0xffffffffffffffff}}}, 0x28) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)={0xb0, 0x0, r4, [{{}, {0x0, 0x0, 0x1, 0x0, ')'}}]}, 0xb0) getresuid(&(0x7f0000002080), &(0x7f00000020c0)=0x0, &(0x7f0000002100)) r6 = getgid() write$FUSE_CREATE_OPEN(r2, &(0x7f0000002140)={0xa0, 0x0, r4, {{0x6, 0x3, 0xff, 0x401, 0x0, 0x3, {0x2, 0x1, 0x3ff, 0x4, 0x8, 0x2, 0xac4, 0xca8d, 0x9, 0xc000, 0x8000, r5, r6, 0x4, 0xbf}}, {0x0, 0x18}}}, 0xa0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6100, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = syz_io_uring_setup(0x6e7c, &(0x7f0000000000)={0x0, 0x8f7e, 0x0, 0x2, 0x255}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) io_uring_setup(0x7352, &(0x7f0000000140)={0x0, 0xb244, 0x0, 0x0, 0x1d8, 0x0, r1}) 02:01:49 executing program 0: getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x40, 0x0, 0x20}, 0x10) 02:01:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000000)="96e9d8ef9b93ddaf36ae44b1f9a57b3b880a6f82a71d2882eb5abfb5579e4af3dee2544c37ba5366040804c29429f09a1c82fc80a6307ed09d1b7f0a9b2c960d02c16ee64f6080990fde407cac3340e19af2b5bc0a75dd658964d0815f29e6c55179dd5a95eac6599db64aaf4083001e34499f", 0x73) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 02:01:49 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$tcp_congestion(r0, &(0x7f0000000040)='westwood\x00', 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) 02:01:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6400, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 02:01:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x80000082, 0x4) r2 = socket$inet6(0xa, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card3/oss_mixer\x00', 0x101001, 0x0) 02:01:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7400, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfff, 0x4002) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$nfc_llcp(r2, &(0x7f0000005140)=[{&(0x7f0000000200)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "53a4a9def3c4c54c365ec9cc0e970640f99d7d9c157dd042782e57c372f882366d7d21450546aef69865cacf84c1312b56501512051e528831d38cd7f300f3"}, 0x60, &(0x7f0000002a80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}], 0x1, 0x0) r3 = socket(0x26, 0x80000, 0xffffff47) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_dccp_int(r4, 0x21, 0x4, &(0x7f0000000280)=0xffffff46, 0x4) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x7f}}, 0x30) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x92022009}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008054}, 0xc74d97325b9efcb3) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000040)={0x5}) 02:01:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) 02:01:49 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = geteuid() statx(0xffffffffffffff9c, &(0x7f0000002080)='./file0\x00', 0x2100, 0x200, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002200)={0xa0, 0xfffffffffffffffe, r1, {{0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x8, 0xce01, {0x3, 0x0, 0x6, 0x3f, 0x5, 0xfffffffffffffc00, 0xd0, 0x9, 0x3ff, 0xa000, 0xa832, r2, r3, 0x20, 0x2}}, {0x0, 0x5}}}, 0xa0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x8902, 0x0) 02:01:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9400, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) 02:01:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)) recvmsg$can_j1939(r1, &(0x7f0000000880)={&(0x7f0000000180)=@nfc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000280)=""/213, 0xd5}, {&(0x7f0000000680)=""/166, 0xa6}, {&(0x7f0000000740)=""/236, 0xec}], 0x5, &(0x7f0000000840)=""/38, 0x26}, 0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x38e2, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x308, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x3, &(0x7f0000000000)=0x40, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x21, 0x3, 0x0, {0x5}}, 0x21) 02:01:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) syz_io_uring_setup(0x67f1, &(0x7f0000000000)={0x0, 0x800c, 0x0, 0x1, 0x228}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000140)={0x7d, ""/125}) 02:01:49 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb100, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) getsockname(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000180)=0x80) recvmsg$can_j1939(r1, &(0x7f0000001340)={&(0x7f00000001c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/136, 0x88}, 0x1020) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004811}, 0x20004000) 02:01:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) socket$inet6(0xa, 0xa, 0x3) 02:01:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd500, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:50 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) socket$inet(0x2, 0x1, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x6000, @fd=r2, 0x7, 0x2, 0x6, 0x14, 0x0, {0x1}}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x890c, 0x0) 02:01:50 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmmsg$nfc_llcp(r2, &(0x7f0000000400)=[{&(0x7f0000000180)={0x27, 0x0, 0x0, 0x4, 0x6, 0x3, "eb63abe54430a5acc15422b2d92c7c3c0b900b2212be8c1ba185be906c8e79ee28a11b0584f882283235af4afd90b2d51b0adfe733c6151cd2a4bfa7875f8e", 0x21}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000000)="2002b4f85f0655b5ede38f6ab67650f956a109e70e74cb7d82592a52", 0x1c}, {&(0x7f0000000200)="bc2fe1532adefcddad035cc14b20457498339d108d7d99522fabd3c575de328e241ee8f44ef685d6ef90a54e338b288f1cee42e1a693f2fbddfb520b89f44ec4f892b9cf89c672c9c9d7e90f6a9fc1bdd149c8384641a528968da6b00f665d49878163ce94f44b4970021bdd776752a84e18406808657a2a113de4b5889dcf952c04d17f565c026f79da40acb4023a5ca24453e94f955f8b7c9197e231e78aa0a8ba5cf4323c25b1f57b1db22b09263485cbda042574759f6e38c7e185f1be7521e81cc837f835f77003564ec2740920005a8f7f76833d451bcbbf8ae0aeab339a92044d063050e6d9a359e3c0627785", 0xf0}], 0x2, &(0x7f0000000340)={0xa8, 0x109, 0x8588, "b846b33e6f311dbe3f2e95f6a5cc30e096c4b4b1a88e59ad659e45a96dfd4cf7ae9e3fae8eaaedfd17b4c35e63155969b9427cb3566928afdfb4a5a2af51654a2925637d2e4eaada85d2be6b264dad599438c52e44b1428af77c859de731bc523aef912394785411b6ab3cf61fe848b147f447e8a366d94b0475571bfdced9a647c0372723de83037d962624d89b3c6ac8052c24013b"}, 0xa8}], 0x1, 0x4040) 02:01:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x200000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000080)=0x80) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r4 = getegid() syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@subj_type={'subj_type', 0x3d, '%-'}}, {@smackfsroot={'smackfsroot', 0x3d, '$'}}, {@smackfshat={'smackfshat', 0x3d, '\x96**!['}}, {@audit='audit'}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role'}}, {@dont_measure='dont_measure'}]}}) setsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f00000000c0)="60efda71322582b3a887be1b943bbb38b12f9273d2b1d2ddfecab61e31e9c3829ade2a1dcd6a4c17b0733814db9fc9aee45c6df79801ed81b643f8f42c16346b49677d6f2a995f53d52371936863e5185e2ab0126d2a7fd730bf9624ccd43c000a0d2cd4c997592f9a7b8c3e024468e158796ac91f925c11f9c591708fedc7e337b03790fa833154765e7522d08969b695", 0x91) 02:01:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x20000, 0xc9, &(0x7f00000000c0)=""/201, 0x41000, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x4, 0x80000000, 0x5}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_error\x00', r0}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 02:01:50 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x20, 0xf80f, 0x0, 0x40e, {{0x2c, 0x4, 0x2, 0x9, 0xb0, 0x65, 0x0, 0x40, 0x2f, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x13, 0xc3, [@loopback, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @local]}, @generic={0x40, 0x10, "fe511c71245f4c6a4ca5f23cf433"}, @rr={0x7, 0x13, 0x5a, [@multicast1, @loopback, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x44, 0xe8, 0x1, 0x9, [{@broadcast, 0x4}, {@local, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010101, 0x1}, {@empty, 0x2}, {@multicast1, 0x1f}, {@empty, 0x8}, {@local, 0x1f000}]}, @timestamp_addr={0x44, 0x14, 0xda, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x7}, {@local, 0x80000001}]}, @lsrr={0x83, 0xb, 0xb7, [@rand_addr=0x64010102, @empty]}]}}}}}) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bind$phonet(r1, &(0x7f0000000000)={0x23, 0xad, 0x45, 0x81}, 0x10) 02:01:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000140)={'gre0\x00', r2, 0x7800, 0x20, 0x8, 0x0, {{0x32, 0x4, 0x2, 0x5, 0xc8, 0x68, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x80000000, @local, {[@generic={0x94, 0x11, "37e5114f920242a6ae87d6d96e813f"}, @generic={0x88, 0xe, "00f7796fa61dd690cb6bb567"}, @generic={0x83, 0xd, "0f14fedc4d8292d5fe66f3"}, @timestamp={0x44, 0x4, 0x4c, 0x0, 0xa}, @end, @timestamp_prespec={0x44, 0x4c, 0xa3, 0x3, 0x7, [{@multicast1, 0x8792}, {@local}, {@loopback, 0x7fff}, {@rand_addr=0x64010100, 0x2e0225c2}, {@multicast1, 0xffffffff}, {@empty, 0x3}, {@remote, 0x20}, {@multicast2, 0x10000}, {@remote, 0xffffffff}]}, @timestamp_addr={0x44, 0x34, 0x7c, 0x1, 0x8, [{@broadcast, 0x400}, {@empty}, {@broadcast, 0xffff0000}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}]}}}}}) 02:01:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x40, 0x5, 0x3}, {0x400, 0x0, 0xff, 0x4e}, {0x4, 0x0, 0x80, 0xa0000}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2469.528248][ T9021] fuse: Unknown parameter 'appraise_type' [ 2469.557532][ T9027] fuse: Unknown parameter 'appraise_type' 02:01:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:50 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5411, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000500)) io_uring_setup(0x38b1, &(0x7f0000000480)={0x0, 0x7aa5, 0x1, 0x2, 0x5f, 0x0, r3}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x706, 0x700, 0x9, 0x0, {{0x38, 0x4, 0x2, 0x3, 0xe0, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast1, @local, {[@timestamp_prespec={0x44, 0x4c, 0x61, 0x3, 0x3, [{@private=0xa010101, 0x4}, {@local, 0x5b}, {@private=0xa010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x4b4}, {@remote, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x200}, {@loopback, 0x8}, {@private=0xa010101, 0x860}]}, @ssrr={0x89, 0x13, 0x67, [@rand_addr=0x64010101, @remote, @broadcast, @multicast2]}, @lsrr={0x83, 0xb, 0x90, [@rand_addr=0x64010100, @broadcast]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0x5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x37}]}, @timestamp_prespec={0x44, 0x3c, 0x2b, 0x3, 0xe, [{@rand_addr=0x64010100, 0x3}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x335}, {@rand_addr=0x64010101, 0x55a}, {@rand_addr=0x64010100, 0x2}, {@multicast2}, {@rand_addr=0x64010101, 0x3}, {@remote}]}]}}}}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00', r1) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000007}, 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r1) 02:01:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000040)={'gre0\x00', 0x0}) 02:01:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:50 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4400) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="3f523854712635a752ce6bd67b4c1cd066e532e4dd859cf6cbfae580fb9df2e958ff987b5dc464c17bbc5580129b8afccaeb9bcce12397167474bf52db724d9ce15fc5570b95cd5b5e3dca58695d4e29db26", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf25050000000c00060001000000000000000c00078008000100", @ANYRES32=r4, @ANYBLOB="af0eb734b0397191c4c67a682384bb9f5db904e35512eeb708d555d2db35633d23d7a62b93a2440abcdede4edd88a86a3e87f0911a1ac07f5b46e7d7aeffdd3ab5d6938e1a189d9301cffebee2d614291bed5ec4e70daf11543d89790fe9fb820d932eaa85c814e21df48374e8c239de33b1cac6438793c9f759d221741b59ac258be877bed75b614b38f0b2f5b4645a60abcaa5044fbd8ea3721c5aa8e6e862c54ce61d636e161cb8c35204a9adfbe7781855185cb5d4da8c4978cf33a790bcfa89f434e18cff87fed1043a2f590a1b64cd74f3b66e70abae04f560004855840a6dec"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4044050) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000340)={0x5, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000380)={0x9, r6}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) 02:01:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 02:01:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:50 executing program 0: ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000000)={0x0, 0x1}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:50 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) 02:01:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in=@private, @in=@private}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) 02:01:50 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x1869, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa4, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) 02:01:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/122, &(0x7f0000000080)=0x7a) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8942, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1000, 0x100, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000680)='net_prio.ifpriomap\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f00000006c0)={'rose0', 0x32, 0x32}, 0x8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x800, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}], [{@uid_lt={'uid<', r5}}, {@obj_type={'obj_type', 0x3d, '\xc6-)'}}, {@smackfstransmute={'smackfstransmute'}}, {@euid_lt={'euid<'}}, {@obj_user={'obj_user', 0x3d, '%]'}}, {@pcr={'pcr', 0x3d, 0x30}}, {@fowner_lt={'fowner<'}}, {@pcr={'pcr', 0x3d, 0x18}}]}}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(r7, &(0x7f0000000700)='./file1\x00', 0x0, 0x4, &(0x7f0000000740)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x890c, 0x0) syz_mount_image$ufs(&(0x7f0000000440)='ufs\x00', &(0x7f0000000480)='./file0/file0\x00', 0x7, 0x1, &(0x7f00000005c0)=[{&(0x7f00000004c0)="502aa11ed2815b0a5301d0f47f69afacc4e17b391617e530fe8f5b5045cda5dee0e36a675c083eb235ab8295401ba1e12f109856c82032ce14ece59afccf6f871e36baaabefef65a2a3c9adad19a5c788eca2b2053e3b20270d1f87ff97f35cfc7d7ff47bd01946491757746600820ae004405699dd5fb9e0e146043f9ff5eafd34993527d03e4b75075b0cfa7a36f0a12292fd6f8a145e6350f258f560b494e1c0ae8242d854e46681521c539f0f3a144c0957cc4a5c9a021f2b003d9045333d9166ee45c16faeefcf3d135b77ff708664f6394530f76606d6dcac1493eb0284ab35d9439", 0xe5, 0x8000}], 0x2800820, &(0x7f0000000600)={[{'fd'}], [{@seclabel='seclabel'}, {@hash='hash'}, {@uid_eq={'uid', 0x3d, r3}}, {@context={'context', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, 'obj_type'}}]}) 02:01:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', r1) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r1, 0x4) 02:01:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={r1, 0x73660d59, 0x3}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r2, 0x0, 0x700, 0xfffffffb, 0x7fffffff, {{0x34, 0x4, 0x3, 0x3, 0xd0, 0x65, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x2, 0x3, "d0"}, {0x5, 0x9, "7a2c0bea853c53"}, {0x6, 0x3, "16"}, {0x6, 0x10, "8f58716a7deb227af03fd3286f9f"}, {0x6, 0x9, "ba9b8febd35871"}, {0x0, 0xf, "494ea950f0193ea06b2be805ad"}]}, @timestamp_prespec={0x44, 0x2c, 0xa, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x34}, {@multicast1, 0x401}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@broadcast, 0x6}]}, @timestamp_addr={0x44, 0x24, 0xaa, 0x1, 0x1, [{@multicast1, 0xf57}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @noop, @noop, @timestamp_addr={0x44, 0x2c, 0x45, 0x1, 0x0, [{@broadcast, 0xe2}, {@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x2}, {@multicast2, 0x1}, {@remote, 0x1}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x20, 0x3, {{0x10, 0x4, 0x2, 0x1d, 0x40, 0x65, 0x0, 0x5, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@lsrr={0x83, 0x17, 0x72, [@empty, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast, @local, @multicast1, @local, @remote]}, @timestamp_addr={0x44, 0xc, 0x9, 0x1, 0xf, [{@rand_addr=0x64010102, 0x3}]}, @end]}}}}}) 02:01:50 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x7fffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00', r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x25c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe120}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NODE={0x1d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdc, 0x3, "5d30e2dde4dd5bff5de702990958c5af7ace088fe0bb9009e3d3dd93905c129766c6770556545a7e5034c3e89fdfa9373edd523c5b6cf5abc3574c5af3acbfb8c350fe3090ffef4dba9c91e0e807589fcf226f873501471ccad6c2936acde2581b384c7aeef5a27178daf255884559c653958da24a06a9385b391f14c41c7c2b21489b9b43a8849a74b3cb3453da5041f7a13608229112fc8cbccfc65e35f11d5a29d6361243029ff1177a05af82a93c281d0ffefee11b94a7585934c9a275ce3660353f9310ec067350141d5cc4ece44310c1d76c296f08"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "897c34cf1ac043dac229f74627b806140ee73e2ab7413f3e14a11972062ae4402f665d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "3bfd6f1423c246a615a6b00d133be8af05d985d66332f4f120b297d253eaa9df6cb7483b"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "8b01dc99c7f6585f2c586f0483a6a5adf89f16883073c174d263933c23"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4008}, 0x411) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x44) syz_io_uring_setup(0x1984, &(0x7f0000000000)={0x0, 0x1a4, 0x1, 0x2, 0x37c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x6) 02:01:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000100)={0xc2, ""/194}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:50 executing program 2: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x32, 0x4, 0x0, {0x5, 0x74, 0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x32) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f0000000040)={'erspan0\x00', 0x0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x3f) 02:01:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x1, 0x7, 0x1, 0x210, 0xffffffffffffffff, 0x17, [], 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0xffffffffffffff63) 02:01:50 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, 0x0) 02:01:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r1}) 02:01:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x4, 0x0, {0x1, 0x7ff, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) 02:01:50 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@raw=[@alu={0x4, 0x1, 0x1, 0x1, 0x1, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x0, 0x1, 0x1, 0x8, 0xfffffffffffffff0}, @func, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f0000000040)='GPL\x00', 0x7, 0xef, &(0x7f0000000100)=""/239, 0x41000, 0x10, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xa, 0x5, 0x200}, 0x10}, 0x78) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x9}, [@exit, @map={0x18, 0x9, 0x1, 0x0, r1}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map={0x18, 0x8, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffc01}, @jmp={0x5, 0x1, 0x7, 0x1, 0x6, 0x1, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x6d, 0x17, &(0x7f00000003c0)=""/23, 0x41100, 0x0, [], r3, 0x1b, r4, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x1, 0x8f0b, 0x2}, 0x10, 0xffffffffffffffff}, 0x78) 02:01:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bind$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, @fixed={[], 0x12}, 0x5}, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000000)=0x9) 02:01:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7, 0xf8df, 0x1f, 0x0, {{0x28, 0x4, 0x0, 0x38, 0xa0, 0x64, 0x0, 0x3, 0x4, 0x0, @local, @loopback, {[@cipso={0x86, 0x59, 0x1, [{0x0, 0x4, "accc"}, {0x2, 0x4, "de3f"}, {0x6, 0xf, "84df89a4551e1c63625fa90c39"}, {0x1, 0xb, "7814ce132462b67e6d"}, {0x0, 0x8, "f3282a79b0b8"}, {0x0, 0xe, "8ba394b9715776915da6b4f4"}, {0x7, 0x5, "10f813"}, {0x1, 0x5, "8fd5a5"}, {0x1, 0x11, "f756b39b8b87b3ea5facf0a2fc5f0d"}]}, @rr={0x7, 0x13, 0xeb, [@multicast1, @remote, @remote, @multicast1]}, @lsrr={0x83, 0x7, 0x55, [@dev={0xac, 0x14, 0x14, 0x16}]}, @timestamp={0x44, 0x18, 0x91, 0x0, 0x8, [0xfffe0000, 0x2, 0x8, 0x4, 0x2]}]}}}}}) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x8}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r2, 0x4) 02:01:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x8, 0x30b6, {{0x27, 0x4, 0x2, 0x17, 0x9c, 0x68, 0x0, 0x20, 0x2d, 0x0, @private=0xa010102, @loopback, {[@lsrr={0x83, 0x13, 0xc5, [@multicast1, @remote, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xff}]}, @cipso={0x86, 0x6, 0x3}, @cipso={0x86, 0x33, 0x0, [{0x2, 0x10, "21329b3f00b61cb2095cf5f39b65"}, {0x0, 0xc, "342f8602c364a4b22ae1"}, {0x7, 0x11, "7a58654769be689d3d0b99ca1f3b0a"}]}, @timestamp={0x44, 0x20, 0xd0, 0x0, 0x5, [0x4, 0x7, 0xd44, 0x7ff, 0xfffffffc, 0x40, 0x10000]}, @noop, @lsrr={0x83, 0x1b, 0xf3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @loopback, @broadcast]}]}}}}}) 02:01:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in=@remote}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r1 = socket$inet(0x2, 0x1, 0x7fffffff) r2 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x110b}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, &(0x7f0000000000)={'gretap0\x00', 0x0}) 02:01:50 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) 02:01:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) socket(0x1, 0x1, 0x4) 02:01:50 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) pipe2(&(0x7f0000002880)={0xffffffffffffffff}, 0x84800) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000028c0), &(0x7f0000002900)=0x4) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000002840)=0x5, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002140)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) r4 = getgid() stat(0xfffffffffffffffc, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x800, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r8, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) write$FUSE_DIRENTPLUS(r0, &(0x7f00000023c0)={0x460, 0x0, r1, [{{0x5, 0x3, 0x2, 0xfffffffffffffffa, 0x680, 0x40, {0x5, 0xa8, 0x7c91, 0x4, 0xffffffffffffffe9, 0x0, 0x218, 0x101, 0x3f, 0x6000, 0x81, r3, 0xee00, 0x1, 0x101}}, {0x2, 0x4, 0x8, 0x200, 'syztnl1\x00'}}, {{0x0, 0x0, 0x0, 0x581, 0xfffffffa, 0x4, {0x4, 0x4, 0x2, 0x4, 0x34a, 0x0, 0x4, 0x288, 0xfffffff8, 0xc000, 0x8, 0xee00, r4, 0x1, 0x45b2}}, {0x0, 0x4, 0x2, 0x2, ':^'}}, {{0x6, 0x2, 0x0, 0x10000, 0x0, 0x7, {0x1, 0x3, 0x3, 0xfff, 0x5, 0x49be, 0x6, 0x8, 0x20, 0x2000, 0xffff877c, r5, r6, 0x8, 0x3}}, {0x1, 0x101, 0x0, 0x1}}, {{0x4, 0x2, 0x3, 0x9, 0xfff, 0x7fff, {0x1, 0x1, 0x1a, 0x8000, 0x42247f1d, 0x3, 0x5e2, 0x4, 0xffff, 0x1000, 0x20, 0xee00, 0xffffffffffffffff, 0x100, 0x20}}, {0x3, 0x3, 0x5, 0x20, '^\'.%^'}}, {{0x1, 0x3, 0x5, 0x4, 0x8, 0x821a, {0x6, 0x100000000, 0x82, 0x401, 0x9, 0xff, 0x4, 0x8, 0x806, 0x8000, 0x6, 0xffffffffffffffff, r7, 0x3, 0x80000001}}, {0x5, 0xff, 0x8, 0x7fff, 'syztnl1\x00'}}, {{0x4, 0x3, 0x7f, 0x3f, 0x0, 0x6, {0x4, 0x1, 0x401, 0x5, 0x7028b830, 0x1ff, 0x8f, 0x401, 0x0, 0xa000, 0x3, 0x0, r8, 0x0, 0x20}}, {0x4, 0x2, 0x0, 0xd4c4}}, {{0x0, 0x0, 0x0, 0xfac8, 0x4, 0x0, {0x4, 0x0, 0x9000000000000, 0x800, 0x2, 0x31e1, 0x3, 0x2, 0x6, 0x0, 0x6, 0xffffffffffffffff, 0xee00, 0x7, 0x1}}, {0x5, 0x0, 0x4, 0xed, '\\*$\xbf'}}]}, 0x460) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 02:01:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) socket(0x2b, 0x4, 0x6) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000080)=0x80b) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x800, 0x0]}, &(0x7f0000000040)=0x8) 02:01:51 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x1, 0xffffffffffffffff, 0x1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x5411, 0x0) 02:01:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x15000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000106a000000000000000100"/24], &(0x7f0000000040)='GPL\x00', 0x3, 0xde, &(0x7f0000000080)=""/222, 0x41100, 0x10, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000180)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xf, 0x6, 0x1}, 0x10}, 0x78) 02:01:51 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000180)=0x3, 0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000000)=""/15, &(0x7f0000000040)=0xf) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x8902, 0x0) 02:01:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0x400000a7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_dccp_int(r1, 0x21, 0x1, &(0x7f0000000000)=0x9, 0xfffffe1a) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x5, 0xe5, 0x40, "dc5611271f9f02fa6f6cd3cfe86489f07c7cbe6e1a2fbee375c54d9af927ae077ada56023619499cb6d5e79f3ae38c323b5a212ef411d10319ee47c91da82c", 0x2c}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x16000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@local, @in6=@remote}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) 02:01:51 executing program 1: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:51 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x40003af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r0}, 0x8) getsockname(r1, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000004c0)=0x80) r2 = syz_open_dev$sg(&(0x7f0000000500)='/dev/sg#\x00', 0x18c860000000000, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000540)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = syz_io_uring_setup(0x7cf5, &(0x7f00000002c0)={0x0, 0x2dc7, 0x20, 0x1, 0x39e, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r5 = syz_io_uring_setup(0x2e40, &(0x7f0000000180)={0x0, 0x1722, 0x10, 0x0, 0x372}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) io_uring_setup(0x7270, &(0x7f0000000240)={0x0, 0xc4c7, 0x10, 0x1, 0x3d5, 0x0, r5}) 02:01:51 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x890c, 0x0) 02:01:51 executing program 4: prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000180)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$proc_mixer(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="4449474954414c330a414c5450434d0a4d494320274344204361707475726520537769746368272030303030303030303030303030303030303030300a494741494e0a4d49430a4c494e45310a43440a53594e5448202753796e7468272030303030303030303030303030303030303030300a72a7f406e6ba3587224217080c38463abc473abebea045cfe3dc39df1b67a45bce5d9314de6730c428082f7a0a9b93df4166a76308291a96ccd796031425c8c6940ce834733d059369ba35e2f9f623494cece851f970697f9b86e6"], 0x73) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0008000800000002000000044cc4007000670000002990786401010164010101832b22ac14141bffffffffffffffffac1414300a010101e000000164010102ac1e0101640101010a01010201440c3071ac1e000100000006830c6fd10ba2629e9aab7b19070f88e0000001000004007f0000018307850a0101040000"]}) 02:01:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00', r1) getsockname(r0, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000001c0)=0x80) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="04f64744a682fb1410dbb5d2000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x15291eb06bbe41aa) syz_io_uring_setup(0x2cad, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x200000a7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) io_uring_setup(0x7a24, &(0x7f00000002c0)={0x0, 0xbb55, 0x8, 0x3, 0x30f}) 02:01:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x100000001, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000100)={0xffffffffffffffff, r2}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0x7) 02:01:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x20000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x5, &(0x7f0000001240)=[{&(0x7f0000000080)="c95fed76c71af39e38771b0002c785b0b463c10e968d958547197a39af2faf9b4befca5cedd26cb25cfa4308ffe0bc3831aa9691d51fa05dce6ae033ea677d38794e98dbd72ab119beed25e4446c051490e37497", 0x54, 0x100000001}, {&(0x7f0000000100)="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", 0x1000, 0x6}, {&(0x7f0000001100)="bdbee9891bfdb5617dfb537afaf98b0561570ecea6f891643274da88766a381f00ad3146aac3c5fb9fcb370e0f0d", 0x2e, 0x100000000}, {&(0x7f0000001140)="40f173524c10c249aff6263ec0f0804f97a8660b1f36dbb6c109eb8879821cf5d36ecd5769a615ac8ded3f77adebedd41202246d7bc9b550c659240f7ce93a44e8c4", 0x42, 0x1f}, {&(0x7f00000011c0)="3794c49c6938a5582ca2ba9fa176183bca791abaaf115840ce10e63a65b3b976b9c821dc567000c606b1dd14586714bae83959e7123b5083abc17c2442b4b25647a0ff8ee7d72e34e0167be8ba4318", 0x4f, 0x85c}], 0x80, &(0x7f0000001380)={[{@acl='acl'}, {@noacl='noacl'}, {@user_xattr='user_xattr'}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@obj_role={'obj_role', 0x3d, '[('}}, {@euid_lt={'euid<', r1}}]}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000002600), 0x8) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000002640)=0x1, 0x4) 02:01:51 executing program 2: r0 = fork() syz_open_procfs$namespace(r0, 0x0) ptrace$setsig(0x4203, r0, 0xc28, &(0x7f0000000000)={0x7, 0x8001, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x22020000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000000)={'gretap0\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x5, 0x4, 0x81}, 0x10) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 02:01:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) 02:01:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000080)=0x80) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) 02:01:51 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x890c, 0x0) 02:01:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x25000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ptrace$setsig(0x4203, 0x0, 0x6, &(0x7f0000000000)={0x2a, 0x0, 0x10000}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@local, @in6=@empty}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000004c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0xefa, 0x9}}, 0x30) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x200, 0x1, 0x3, 0xa3, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000140)={0x0, 0x200, 0x20, 0x0, 0x3, 0x747a, 0x1, 0x4c23, 0x8001, 0x5, 0x4, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) sched_rr_get_interval(r5, &(0x7f0000000100)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x8, 0x4, 0x9, 0x400}, {0x1, 0x81, 0x7, 0x8}, {0x2, 0x84, 0xba, 0x5}, {0x0, 0x8, 0x3, 0x3}, {0x1, 0x1, 0xed, 0x80000000}, {0x3, 0x1, 0x8, 0x6}]}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000280)={r8, 0x1, r4, 0x81, 0x80000}) prctl$PR_SET_PTRACER(0x59616d61, r1) 02:01:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) socket$nl_generic(0x10, 0x3, 0x10) 02:01:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xac, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0x3, 0x3, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40000000000009}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) socket$inet_dccp(0x2, 0x6, 0x0) 02:01:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x1}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r1, 0x80000000, 0x80000}) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x1d05, &(0x7f0000000540)={0x0, 0x7036, 0x2, 0x2, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) r5 = openat$cgroup_subtree(r1, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) r6 = accept$nfc_llcp(r3, 0x0, &(0x7f00000001c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0xc8, 0x0, &(0x7f0000000380)=[@exit_looper, @decrefs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x400}, @request_death={0x400c630e, 0x2}, @acquire_done={0x40106309, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x1100, 0x3}, @fd, @fda={0x66646185, 0x2, 0x1, 0x38}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}, 0x40}], 0x7c, 0x0, &(0x7f0000000480)="c5bae6e5b4769ff06fd672bfc6e552ec2b33a4382f4c33a631c8f02591c56bbdc88e2dd4de81e0e47e5049cf7a4550d294deac490b37f563bbcdf5ce8d9f7a9b75242ea6de5a805326edb150c864d677d999d7205d70819eb4cd0f3edfbb256d3c2ead8e12450ef9d0daea020c8f76ceb01b16ae21f7cdad0c96d4c3"}) 02:01:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x28000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="001000207fffffff000000004621005800650000ff299078e000000267c5432f4680dddbe8ac1e000101862a0000000207106d0b4b451a909971d8be1ca0c11b050653027409010e3465193d971a55ff244cb42b83040000000000ac141411e0000002ac141cbbe00000020000"]}) 02:01:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x2, 0x80, 0x0, "9a743393cbdb60bc0a2f938f3f563555219573074d39c3133a947ae378119e49fbe258bb4c70cc527ac4215345113ba7948c43222c7a51ef9146dfa552ed37", 0x3f}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x41e1, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000001940)) sendmsg$nfc_llcp(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x27, 0x0, 0x1, 0x7, 0xd7, 0x38, "7c632a053405952cba6a853d37588f30be883183e53ad7779da2e1a02cb8189cba99fea875eff026d655eb35804458f528d19f5084336f2b90d669ccaaec8b", 0x2}, 0x60, &(0x7f0000001880)=[{&(0x7f0000000200)="1fa793f48844e5135f4b0cdc69f0a9d4852683e2dd27376a815e31a822e4dd53bf7bec82a1e611652faccb9699cbc438eb7ae0d2ec33b1f45fdcd0d758324a7f443d9ad95292a169c57c29d4233c9176dd02eb3300d269f446959b0ca23ccba1bdacfe56f11aa2117c2883ebbf5862d4152cbd5e6a608a7436e02075596de027d87905dc", 0x84}, {&(0x7f00000002c0)="fa88f3435bad92765c472478d4e852a8e8e55efa4d6f5f06204c80c07ec9b3c69c6ef9a121d282d354e5cdeb930144ec32c66796e9d2fd3663e65a377d53a0748bf41bb6aa9812569015a9e0009e0826e1e40ef5198a9dfbed1dcafe3d4024cce2bbdabb81fd968d752450980e9ad9ad9f232ce657943159ddcab7ef4503a4841d7fb74079a2a739c065db61510627ff1b3ed52c25b3caa88059826f186d4d351866e4302e10b04e303cda97c69e4d6cf191d3e5b7bc2b7a58a090621cec7d930d", 0xc1}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="7892d0067b31fd7992aba8396c0749af68b6dd10835a3997899f0ccb7648ff81bd853dc7f61012cc8c69fb582b3cccae3d8bccfce5fcb249c5392ec778803e47406b2e727f534d2ef431f1fbcdaf1bd48f77b01891775a9eb5e60b003da743697007e77c139220ac78707cf1f34d5451087f5063425d756d24a66e84ca5e4c3149df163777041332a9f4124ac878f65b529f2de525b8a93726cf7125ae8ed3e39c401d3e684de729925d8964a57b3a48fd57c1f5af77b22eabd43088ef872c6a34588f4688cfe3ece2985a8e9a36483fd4dd28", 0xd3}, {&(0x7f00000014c0)="0123a893678b57ef4c92997dd7781ac9aff47b3ca24654433e9a301120910c6e967e02d00bd94b", 0x27}, {&(0x7f0000001500)="faf4cae169e3e5fd058e7ad25b603cb0388489661ed225d58ff0adf9237a1bee0c32550453d61498b623d884a198ab1e042e84eeab5c3ac27fe855b3c6e5af6923b75b398114bc2f63ad4af94869df0cc56f934e3b5e62a97f78ebeb1db30a52a7644f99d31cd9abea36e3", 0x6b}, {&(0x7f0000001580)="d355c91783526421b8348372346155a16badc37ea33f32a2133836266652ee0cc9540e5f7a1b72fb6461ec82ee23436e834ba2078c6f60448be7fb41d8a4ef92c919360282e2a0bad552cfc0ed53c49fb61d538a035fba643f241729ce2eb5b43bed7cfd1ca486680c9a60801b", 0x6d}, {&(0x7f0000001600)="d34ede06fbcf57f24f33185bef5b4cbb5485a018b6ebf7c7bc80753abee9189c515779f2ad1ff1c1fe8c45fa14dba1d0bb50a07ec865444419e4e9eab34197ef2822730fa6", 0x45}, {&(0x7f0000001680)="65d9d20eb9d00073b25a659655af32fac68f9e11ec047d4956c0ffeb38cb0672eb72f571b42a45a8df8a8945e637bf2f18da1e80e0e4beae3d579e96760f8039d7f45528b157f3676273098574d2f40cb3624bf60259d6ecef90db06df7a6376ee459e7ecb5f9d224fa8398f7a893be4ecd87264eddfd32d5409bf3cd1fa6fc02a5992de7dbcd25f4212c252201de7bbe341ce0742154b32fc39201e7e9675c0674ec24cb2e1a119f0bf9da3ee45bd30d163ca86ad998c02e585cc933594a99a9ab68f", 0xc3}, {&(0x7f0000001780)="4a79a025ed0ceb2188002a750389809de9209ef1c5be571e38dff04edeff9f636452e44fae3ae75d96a4efa96175820462cd3aefa830c550342830fc7d43784d78df2ffd009ca82cfb10e70e6c399a11c04c064bd83d0e7079e2ee42cb41584048bbe487d11f7d45399df0ee43014aff6f9213da7f5426501aa52c1d6998533c45fa5f75dc27fc94e1a50e66e40221d4d20f556fa65e8ac8a909a56a85237ba3f2810af3be60f58bd69e386e2ef33191454d8b736095c9fc9df7144f86bc5d3648b2391979538b0d58d169aad17eca9b6fddb2ea7612ecf33ac067cd77b1942e831f88", 0xe3}], 0xa, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], 0x1010, 0x4000080}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x4368, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockname(r2, &(0x7f0000000000)=@sco={0x1f, @none}, &(0x7f0000000080)=0x80) 02:01:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2a030000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='vegas\x00', 0x6) 02:01:51 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x31, 0x3, 0x7da}) syz_io_uring_setup(0x1a73, &(0x7f0000000080)={0x0, 0x167f, 0x4, 0x0, 0x302}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd=r0, 0x8, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xfffffffe) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0xffffffffffffff04, 0x4200) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r3, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x2020000, &(0x7f00000002c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize'}}], [{@subj_user={'subj_user', 0x3d, '/dev/dmmidi#\x00'}}, {@smackfshat={'smackfshat', 0x3d, '[&()'}}, {@uid_gt={'uid>', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x18}}]}}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000200)) 02:01:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = socket(0x9, 0xa, 0x1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040880) sendto$phonet(r1, &(0x7f00000000c0)="8af2c1b64025d1243a53303107dc573cb8ead5a83d24eb6941e3ce261fe6ce3aa11fe98ce20ea0e2041c886bb348c6cfd1fddd5b0921c14701dec0ea7e1a7d072bf76f6b04248b1b8ef0fe2ceb666b274522cee4bc475dff921c56701ec79e4b4538b157722ea78085aabc8151bd43848fc7370aa3ec02cb5c8ec35e9fac9a2996955a084c696a4d3448916f125cdb2f55a50e09e55ee2c456", 0x99, 0x50, 0x0, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) 02:01:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2d000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xfff}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0xe, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd185, 0x0, 0x0, 0x0, 0x1ff}, [@jmp={0x5, 0x0, 0x7, 0x9, 0x4, 0x80, 0xfffffffffffffff0}, @map={0x18, 0x4, 0x1, 0x0, 0x1}, @map={0x18, 0x3}, @map={0x18, 0x2, 0x1, 0x0, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x2b, &(0x7f0000000280)=""/43, 0x40f00, 0x13, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x80000000, 0x4, 0x2, 0xef0b}, 0x10}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x5, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @ldst={0x2, 0x1, 0x1, 0xb, 0x0, 0x6}], &(0x7f0000000040)='GPL\x00', 0x2, 0x2d, &(0x7f0000000080)=""/45, 0x60780, 0x8, [], r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x5, 0x3ff, 0x401}, 0x10, 0x21040, r2}, 0x78) 02:01:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x40, 0x8000, 0x401, 0x1, {{0x27, 0x4, 0x3, 0x16, 0x9c, 0x64, 0x0, 0x3, 0x39, 0x0, @empty, @private=0xa010102, {[@timestamp_prespec={0x44, 0x1c, 0xa9, 0x3, 0x4, [{@empty, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x400}]}, @end, @generic={0x83, 0xb, "b0947c6c5e6cac89e6"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x2b, [@empty]}, @ssrr={0x89, 0x1f, 0xef, [@loopback, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0x31, 0x0, 0x0, [0x4]}, @lsrr={0x83, 0x27, 0x27, [@empty, @empty, @private=0xa010102, @broadcast, @private=0xa010101, @local, @local, @multicast1, @local]}]}}}}}) 02:01:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000140)=0x80) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x178, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7fff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @loopback, 0x2}}}}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x411}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffaf4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x4}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x48004}, 0x80c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000400)={0x0, 0x0, r1, 0x0, 0x80000}) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000440)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r2}, 0x8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}]}, 0x80}, 0x1, 0x0, 0x0, 0x400}, 0x41) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4800) 02:01:51 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x30000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:51 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = geteuid() syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2210020, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x401}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@context={'context', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x890c, 0x0) 02:01:52 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x8902, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000000)) 02:01:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000440)={'ip_vti0\x00', r3, 0x7, 0x8, 0x76, 0x6, {{0x6, 0x4, 0x2, 0x32, 0x18, 0x68, 0x0, 0x6, 0x2f, 0x0, @broadcast, @multicast1, {[@noop, @noop, @noop, @end]}}}}}) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x924404}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 02:01:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4014) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x34000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00', r2) r3 = socket(0x2a, 0xa, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x20, 0x7880, 0x9, 0x2, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0xad, 0x3, 0x3, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7}, {@private=0xa010100, 0x1}, {@multicast1, 0x90a2}]}, @timestamp_prespec={0x44, 0x14, 0x7a, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010101}]}]}}}}}) 02:01:52 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)={0xb0, 0x0, r1, [{{}, {0x0, 0x0, 0x1, 0x0, ')'}}]}, 0xb0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0xfffffffffffffff5, r1, {0x800}}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000000), 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x5411, 0x0) 02:01:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x10003af7, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x3, 0x39e, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000180)={0x2}) 02:01:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0)='net_prio.ifpriomap\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)={'netpci0', 0x32, 0x39}, 0xa) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x35000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000180)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x2, 0x0, 0x0, 0x1, 0x3, 0x1, {0x0, 0x0, r0}}, 0x94) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:52 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet(0x2, 0x6, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x800, 0xe0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000000)) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000180)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x890c, 0x0) 02:01:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) 02:01:52 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000), 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x45000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xcc, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7ed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x76bf9279, @ipv4={[], [], @remote}, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x40, @remote, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4104}, 0x4040000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4d000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0xffff, 0x4) 02:01:52 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000001640), 0x80800) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x40800) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af7, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="00931737ecf6ddfd968a1f577dcb41eaa99e00ed8e7042db1d0eb384a215d3ca3682d4de31a8366d8a25364a0826341a753df31beeeac57f5d1f13e1356b054b2f1539cbf3a25e7be4d23cd09e0fd3ec2e2044f338719aa44bcea89024e94edc9024c7cdbd", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf250b00000008000b0001000000080034000000010005002900010000000800310000040000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f0000000340)=0x9) syz_io_uring_setup(0x1bca, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x3, 0xa6, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000000), &(0x7f00000001c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) 02:01:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) 02:01:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x60000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x61000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xa, 0x80000, 0x9) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x4adea3e7) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r0, 0x0, &(0x7f0000000000)="1a186daa27000b5a071b861c60ef1834ecefa8d1b31a3095995f7e22392a8b0890de958c035ea98f0642b1aebf9ac0cc14d43c3c9b2d10d726dc28fec311f0c5adf5ed5a9b68e1cc21269ccfc4b3fe6c7cbc830e8fb983c947335a77137a8d65bf6e04c0aaaf2d01917de199bf7e5a294408f68e0ce1c227dac63dc8b0a4849f8d51a88f0a8caafbdbc4cb1a921471a948de3a94e6fa21fc6f6e73454397e8c476b94bc5068c8610cbca1e24d9f3c08b94aba7d5eec3b99f52", 0xb9, 0x80, 0x1}, 0xe35) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000140)={'tunl0\x00', 0x0}) 02:01:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x81, 0x0, {{0x16, 0x4, 0x1, 0x9, 0x58, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast1, {[@noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x24, 0xbb, 0x0, 0x2, [0x3ff, 0x8, 0x3, 0x7f, 0x4, 0x7fff, 0x6, 0x0]}, @cipso={0x86, 0x1b, 0x3, [{0x5, 0x2}, {0x1, 0x10, "47824ac0105e67b301a54cf84a1d"}, {0x6, 0x3, "ad"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x20, 0x80, 0x6, 0x2, {{0x1a, 0x4, 0x1, 0x0, 0x68, 0x66, 0x0, 0x8, 0x29, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x1f, 0x2, [{0x5, 0x8, "7736dd5404a2"}, {0x7, 0x11, "71d1c522982dd6d3e6059945e3e89e"}]}, @cipso={0x86, 0x35, 0x3, [{0x0, 0x11, "d08384f7fff0130d20c58b1fa607fc"}, {0x1, 0x6, "8fe2ef0b"}, {0x0, 0x2}, {0x0, 0xa, "73a12b5185ae43f3"}, {0x2, 0xc, "c41f2d0c610078aa629c"}]}]}}}}}) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) getsockname(r1, &(0x7f0000000340)=@can={0x1d, 0x0}, &(0x7f00000003c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x80, 0x40, 0x101, 0x3f, {{0x7, 0x4, 0x2, 0x25, 0x1c, 0x67, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0x7, 0xc1, [@dev={0xac, 0x14, 0x14, 0x32}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x890c, 0x0) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x64000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0xa, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:52 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x74000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="719ded046a9a1406", @ANYRES64=r1, @ANYBLOB='\x00'/108, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000000000002900000000000000"], 0xb0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x5411, 0x0) 02:01:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$nfc_llcp(r1, &(0x7f0000001200)={&(0x7f0000000000)={0x27, 0x0, 0x0, 0x5, 0x8f, 0xc5, "b0b0ed4ad3a849e72e52c4fd3cebce139db6778786246c16ca251fe920e9041bf50b768813f2c5f9b41859712885e585a25b749ef2f941683d2cc340a3bf43", 0x29}, 0x60, &(0x7f0000000180)=[{&(0x7f0000000080)="744cf5d246e1d4", 0x7}, {&(0x7f00000000c0)="e92155567f7534ccc5e7f5a791ede6d3fae9a3788853f7e7123fdba81937c7cdd62e096bcfb690ab9df0616d868d3efbb9cf1db6bcc497a314ce38eed921e76edf", 0x41}, {&(0x7f0000000140)="15bedb480b848e5568b0668d052613a843c286e6ddc501349a0e41ebefc9f663b56796acca8c6b6e9bef17713e", 0x2d}], 0x3, &(0x7f00000001c0)={0x1010, 0x10e, 0x7d, "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"}, 0x1010, 0x4040000}, 0x81) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:52 executing program 2: waitid(0x0, 0x0, &(0x7f0000000000), 0x2, &(0x7f0000000100)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x94000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f0000000000)={'gre0\x00', 0x0}) 02:01:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="00450200ae0a0000cd88200008000000850000001d00000085100000fcffffff95100000f8ffffff1832000001000000000000000000000018140000e90e44eef112a1f21ed401efa749b0d799ea95920709440333e8eb6cc51bdc648db42a1fab52805584a4b4ce7d60f5e119b21de42512a48f3a0829027045d21be1f2a46f1bf980", @ANYRES32=r1, @ANYBLOB="0000000000000000183300000400000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x8, 0xa6, &(0x7f0000000240)=""/166, 0x40f00, 0x9, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x4, 0x4, 0x2}, 0x10, 0xe258, r2}, 0x78) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r2, r3, 0x4, r4}, 0x10) r5 = socket$inet(0x2, 0x1, 0x800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x8902, 0x0) 02:01:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb1000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f00000002c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "15f94bdd", {0x3, 0x100, 0x0, 0xff, 0x20, 0x5, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r2, 0x4) accept4$nfc_llcp(r2, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x80800) 02:01:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000}, [@alu={0x7, 0x0, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x44}, @generic={0x4, 0x9, 0x8, 0x6, 0xfff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000200)='GPL\x00', 0xfffffff7, 0x58, &(0x7f0000000240)=""/88, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xc, 0x0, 0x6}, 0x10, 0x1f35a}, 0x78) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x800, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000000)) 02:01:52 executing program 2: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000040)={0x1}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000100)="bd3d9379b02cf74e17efbc7529f6c7b85e8c3ce335a08a8226fcda6198154582da2c3368b3ea7d", 0x27) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x2, 0x1, 0x4, 0x64, "111057584fff7dea4214561192f28d39cbe9f08dfd256863835ecbc0e68499ce3be9276118d880b722b0acf24257f5c789a5b95741f30faaf09b781cc85c28", 0x3b}, 0x60) 02:01:52 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd5000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:52 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r1, 0x8}) 02:01:53 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8911, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x85040, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x10000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@context={'context', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '\n](#'}}, {@smackfshat={'smackfshat', 0x3d, '&}:\\+'}}]}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:53 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xe) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x35}, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast2, @in=@broadcast}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000000300)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x0) 02:01:53 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x9) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000001340)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000001280)={r3, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0]}) sendto$phonet(r1, &(0x7f0000000240)="6d214ebbb84cdf71d155a314bd55a7de1ef882c144b56beb560d8557e83f622885dd5e5b3fc627eb0c57c2e4f50932fa634520ad770b7f37b663e51faf2d5cab8af16785524ca82a291514a66f0e2c6b4bf9ea7e9b70fdf94368254a8f3d7b1ce9a1018a794932ea57eeb26c72fb144fe76f904dec278deb109abb2cbd46670d099d75430eb341ba9da0521ebd241f690bec1085b88681f11ae5c5f3aca69dd5b5a8fd7505c4ff692bd81d69372327efad56c916114dc31315d344e0d7901cb8564973f7856b1011d34443e35182769930eaa9d2940fa64ad4f66ff6383bf7bc3086f166e791c15a86460bf8c4012846a0bdc5cb78f5510df8277cb332f03757ac3d7833f66b349bf52e2898dfe4e6009e67ac20ffe958fcb94b10bb1bdd4f306ea8c1ebeba7ee5fe855300480462de30335503935edbbae575602b1fe24db0b47bdef30f8d6fc3bf1867643c41194b03f3cdf6b909f28f447bd05b69c459f3442467d7126cd9e9acadd7e159bef06157fad95beb3772e54b0f963109585d5329bfb8c76a89cc320ad8fadc613772074bf8d397e84b91d31811c140700aff047da951893b847409c9f6721e1a707ccd9e1b2cf725064b1f5c058d1cf829c800d0eba9a713a97c87740a65638a94117b5d8090699e08c2a39f6b11c6f30a69054de7f878643462e957c518b9cedbd3a501cc310cd2b1dd6ff1651288ed4dc607d965b017350fc371aad765affba44e26afe469a7dee7cec1227b0249c733514d2d1b002a88264e989ab53ab434ae8d0799a5fb578e1c96b0bbd03e4eb1146dbc75c5f6e925566f89df1c5bb2c7c72706e9238dd0d825ccfe53c30324310824501d18ef797b87011fa4aebd1c30b4323bd2cc407c12692b9f4a74f356755fd188cf2de08d585db623aac73dd5819c77f3977bca8048228d3798493ae5df36f22aa6627138cca2ce3474796c384162c1b3c41c414b303b6408304c4b2b11e2323b67be33c49bc824e08e472c543ca96eb687d9e088698c782d812fbd2137f104e20534d4c144d2146c7da48d0d9934f0f9c40ef053f0dc538487b424537428b93eff8193915912b8702d834ba60b1fbcb0ed45f7213c013104cedf2563190d7fd39b4713d20e9ff8ec0576a93761feace44bc7a8396b829afbd7f1b49e37e42a401008cc59d0aa324f252c9fca9ec3a8c7b85212be787a674f0c46d78ed1cb4c91dab0a6cd379b7f8c51464c91127f682e4687eaef780116dcb455aa7eca05b749265eeaff36815f2a149d854b5ad82e11cc143173ec24089b991af24dc7cf5d3c7f667eca0db7f64c400fbd7726e871f62e74592a42bf2212b044d4c5fcab5605d82be353b80a1500b6182da4da02538a36310a2f0c0ead7ff0147825ac9a0c986640a15b1235ce82f67bfc1e58a9f850eae8dccd0cd6a53c8e4ef50d0898397ea325982bd864d62d7b09d23ed3e0f6575a1c88c89794321475aaa033dfc3209dac96ed1adaa898b50f3432bff72a78cd542ba0b1eac1339847173dac31caf3fadc44301c7dce6bf2c0f0bb737a1b992c1c41059f1bbe0a33a437a57d0854db723d786957be4bec022661e6d3332ff1fc86446885a5065c91f7539003d463cc854956b26305c6a9a181ef09df2d471d40ef11b6691bdd420afa52ec366fc88493d7c30d56da5badd7a7f4cdba04eed6365ffd4756efdaa64a0f5323ee7f5b489f1f0dfdd4b153cec6b17d61058a3ed728d218a805ccd3a96f75b96ea2f4bb9b12b826ce627cb23248472dfa09c2249da41420c0e97d9f6d66dc3161cb555ad4aec35c21996fdb1b29a5ea77366fca4c0d8ae460d8573c7d1669b624e421062c5e058dd12480bc84b05ba1fedced4e79b8779d1f56a742d619d4cc657aa10c1c8e0238ecf583ff3db13cd424d6d132c4c7f9cca830f8c152f3a6f5442fac234a88bdbfd25eb1c42e37b6efeda09cc515b8b834999568ff50bae15bd50fd0b2f38d339a2667159df26218a08af1f27158185cf1801df5a0c281a3367d41c347972d59bb7b87134e1c67278a1d7afa08904ce5fa7175c131aaaa2e8f839f855180b0f6f6ba8ee25f5707904bf4465dd7899f26f9fd65d5c820832c6bfc2b0b31780d77bd17de871bfdbdfd0af4c97b12cd5726e9aaaa86754dcb63397bb1d91f510d1a92fade9163dbbd6689a898b3c74103131c86745891eddb6e7ab073d1b5d014297e4828e27c4d233e976b0ef67490629f1fbced333e3c74d4d3d7ab76e9e6eff918e8318c65d5cc95d0eace24a96cf766def5f9dc393bbbf031d12d6f1ab167ed91e87095ceeecdfd89341810928aa495367869f2e3d8a3d25723cd73bd52b24fa54f644df1b46fff141bdc3a597057b8e45c012849364989564cccccf66c345c8d0dfdec519383725eb9e75d5c63a37e5f4a87452d71c0aedd0725cfc57acdb55f423fc1bd43c11c0562b6cf774e06f55f7c6f954ef15e5b205fc8aa1a6cc2e5d96cf32c8f69b262263b19721882672f2e1633bbc926f800d93154820fb6a51a244074f6245cf5b020f380a0af45a0fa51e9daa947bdeb109a6817e40c66601100e137c81768af58df804aa2b8dea23cd17414fc8bdbc2dcad3a5fca819748895d72299f658673a2dedd99c0049dfb10ca0265c0f9cca20e079c301909482053986865c4f752d1a6777830f7bb184c5c5e6a4fbd02e55884226d552e3cf09032766b092677a43445d134010bed75ca5f6efbe6b7140b893c549ecce846d77280a5e9e00055fa631dae2d2e0f81ce65f0f4bdf6cf3f554a78c68e561aa7d5215340be0c5b635538b08c8d93ead58e32f24ef4ab3f2278252ce1154379b2f471a11bb6820d87b109fee622524a0222b9b475e752a3ef111ce8df780e610945dc12aab52971d8305e722e543b6d124cac9f9baa11b690de8b7533c078d231604c97b4d0dc3a004f5e3714d0c5ef6d9b8d5a0e66c6fff89a850b450a8b7c2ac6565f44b00b30fa49d8cdd166b57287d8ce3223f808aedd30e9ad1e90a6b91101a89e0b98a3d9acb7332ba69050076a0c5b4cda1cb107b2c2c15c66eb59e6c7cf41baa4774cbbfa2613ffef3163d9ceaf8fbfef53ae3752fc89082d7cbafae2dd6ee33790885c9ce0a16a1712b366454e4e51869fb6193c11eaa4eedb9c38c0f9bc07e97553c5ae0d42c3acee9ef8954c7a67cbbaa0e02407279fd449f1513d97cdd841b3329ce382674938cd4f9cea0abd660d2ceecb33c13a604bb2ef58b6368f46c273d3b43772937ba2b6d55ad4bcb42b6d31fa56f398df2b89441400e7eff1fbe1cb7bcefa61fa90e7fa8fe01048659c1424662b2b5eaa8e86dd8ae05c208156b701935669ab0cbb466e7ca40e81f57475786bd457e24ab1ff25e8b5293cf2f272a8fe3d0bc2e10aa09f41560ec20bfa87d631fb9797d7cd93be845c6dca1d5c2e01d4d860522b90dca18e02c579fc133eb973c887bd02b13a3efbf5611728ed3208e313cdc69f57e5c73cbf88edee28f5ad6182194eeea8f6573bbcbe7591d6b9fc64bd7c1dc8521d2fd357510d560a62293266ab06817531021ccbe9357ee0c2d4e11894585cf8d3d555eec707e73cd4287a56a87cbebbd805a596646c9b534fed2d44c5a6eee88d69b261272c378404b933030971fb59fa08d17d3ff60004e9798d6dac2c496ba91d2ef98f1ad240f08cfa9e472f9eeba62b6432e491f971529621fdec355d80a0e9279d1305e4f74e09a572677693dc2344cf85e9daa49039aefa3404a66479062a930b01c5cc8e9c845f9f0b874824db197172b64b69c0db5410323af5cefcae69ade1e7eb141bc2f4f1dd72f56d60ab682da8d91bc940c339fa7e02607ad417efa183ce3f495ce53aa7c044a773bdf89c705dc1217be9c199871e494c7a8549466e95b909b26be37af417803d6a3f4d6716ab16a2b80a81bee52c9ccef670a694ebdb6b78e55e44710c34151d607a758ed038bc35fb2ecd6c75074759d6d5de8b6beae4a2be11e305f65966b04bddc429a2736ad3241109588ee1004c35a84888f176c9aa5ddbbf8a59a164c3cc2db5aa7e6c815cf324043329ee20ae68d7a8f5b85e3d91f7f6ae316165cf269599338041ddc3a25ca76b11bddcf4fae2369308afa432ae0611c233f5eddce3d1edbd1a2b7aeb03c1be4a18534a010618302f5b0981bb1bd77de5318f3b90d57455ca3949fa126941db1d564b6b787fa0a3df181c2c3ade904eb93f0e42605d127a0a00a4dab0c121cbf5e367a39335b2245d39f28f1fdd2bf3cff3851ea6111a0e43cd92dc5fd665e07dc8535479abde46e0cb79dc1512b5e6b405876ce99f7020bf928a5ce2946627672784ca0ab4755631a24e59269a6ee0dc2eee9e5625f2dd2d1a481a607689780e57b362672f12590d9770f370b0ed964a3bcf39e791c166aa5544eaac489b20a0a0a2fe09c1cc9ff30b8945747889d74c8e89c25adf6a40dd4e8c2ccac8e547d3cb76370cae0f22f2f5f168f9fb265160ae24c74ee054dc4f6485df9a42a2ef8b4f91921a264f8b0aec13ba95cd54b23b44b69a69afe1be5b939dee23b49d2a14173f7b70ee66153ef1c66d0ff7608fe4c2d8b2d20c5bd3f8aeae0606df6ec9edb37302f8d4d618a49d1bb6908d4fce505572732aeb6a8d3dcebcb8ca799df757d035c014650dc867e1bf8ac773e238e57f95c649d70c79bf0e7442f7ee638910ae8399cd647398005116588c3bf14b521ef7d9718e627de2b1f00f8a9284308a533d27eac0bb4c139baff12412e27ce2f26f33afd15e5fb01442979638bb6f452f585bf8ee02680b8620b05391a6df91bce4b81b7a3c322ec344358b6f975733c195c11c21a538dc493960df78ead84dda14ece7588bd35ca5695c4c1e1c2fb9ef9f250384989d5530db4f89f81e6279e4f0f665e643f5257948951798e158e55522d748d2778aa413e1cb702bab4b6b857cfe920687a99580cf9a0f5caedb91a29fcdadc442fedc9842e0a41cf1310de3914fe6cac28332c017f6ba623b99d6b39f8389431b89e8475067d4a1f77338e71bc6a588bad7f1b1ebc1f4094f0f8f20db1e45fa8aeb91cb3abf11882d2cb82ef0e3f6efde7da8b53bc719ae07f72ec9b28b0f23a2cfa7d5311fdcb68654241f71d348f4cf0f19b6680fc799f350353656d8df8e283f2b29f057ba5c2f7f74dc8c41eb790eb20a95e31354b9b90df71686ef6c90c06de46d2c6adfea506376226febf71efed253146399e758f0f920014c8c0bf9b1897acda8ea0d29b4565b792986c6c4fb32e2aa1b87981518cf031cd30ab8327646f0aecebd1da1603de77f278da6a32344d93040ac9465738f06e1bc899c91398a9f86f9c99535be0f89c669eebdf2a092536277dd23570c7c809f85bb763655cd6f468aadb40f1466ee8d4e09236af1771d7625842c71dc0b9a68529cb51b9df9d9c81eebc9548923c267e3bd2aa1de738a4fc1419e80521ad03b21e9c8ccf8731ab46bdc54696c584ca14ced7669b0e09e548dfb997aadee3469df863856bd36f0c9412f73b9c2d8dfdb0c90afec07d74daf7ce8461de5402df86659b65f111f1310ee6f4f46051b1cfeeff87ddf0eb32fe46ca6fd641adac6b35a4aacb26b127df31587bcd9d5d3eb9f44fc6d6a49619dbd654f22c898f975b3d51264c93cf6c9036a7f193ee4aa8be7d4ee84f474950a34e44a2ca4f8a40f7d3043af5bebff9e02a110258f3dc1692bce93e21874862008e335e7a15577ef18eb7d73469005c33ea1f1d541c976618185fb91ba2b7b46b7eb9236a567f", 0x1000, 0x4040080, &(0x7f0000001240)={0x23, 0x7f, 0x8, 0x69}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000012c0), &(0x7f0000001300)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x890c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2472.504443][ T3700] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2473.024505][ T3700] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2473.033640][ T3700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2473.042359][ T3700] usb 2-1: Product: syz [ 2473.046899][ T3700] usb 2-1: Manufacturer: syz [ 2473.051530][ T3700] usb 2-1: SerialNumber: syz [ 2473.094875][ T3700] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2473.664498][ T3700] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2473.867283][ T9511] udc-core: couldn't find an available UDC or it's busy [ 2473.874283][ T9511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2473.883455][ T9511] udc-core: couldn't find an available UDC or it's busy [ 2473.890779][ T9511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2473.900911][ T8169] usb 2-1: USB disconnect, device number 13 [ 2474.684456][ T3700] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2474.691360][ T3700] ath9k_htc: Failed to initialize the device [ 2474.697613][ T8169] usb 2-1: ath9k_htc: USB layer deinitialized [ 2475.084461][ T8169] usb 2-1: new high-speed USB device number 14 using dummy_hcd 02:01:55 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x20000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x8, 0x60, {{0x2a, 0x4, 0x3, 0x37, 0xa8, 0x68, 0x0, 0x80, 0x4, 0x0, @remote, @empty, {[@end, @timestamp_prespec={0x44, 0xc, 0x74, 0x3, 0x0, [{@local, 0x7}]}, @generic={0x93, 0xe, "88dbe1dab6c5961d514d5c54"}, @noop, @end, @timestamp_prespec={0x44, 0x34, 0xbd, 0x3, 0x8, [{@private=0xa010102, 0x3}, {@private=0xa010101, 0x200}, {@empty, 0x8}, {@multicast2, 0xa3}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x7}]}, @timestamp_addr={0x44, 0x1c, 0xdb, 0x1, 0xc, [{@empty, 0x4}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x9}]}, @generic={0x7, 0x6, "3f245404"}, @rr={0x7, 0x1f, 0x24, [@empty, @rand_addr=0x64010100, @multicast2, @empty, @multicast1, @multicast1, @private=0xa010102]}, @noop]}}}}}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x8902, 0x0) 02:01:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x40) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, 0x0, 0x110, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1f, @ipv4={[], [], @multicast2}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xf19, @mcast1, 0x4be184b2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4040084}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:55 executing program 4: setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x1a0000, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsroot={'smackfsroot', 0x3d, '+].'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$y'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_eq={'euid', 0x3d, r0}}, {@subj_user={'subj_user', 0x3d, '([}'}}, {@dont_hash='dont_hash'}, {@fowner_eq={'fowner'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000200)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xe) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) 02:01:55 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r0, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x80000}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x890c, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='qrtr_ns_server_add\x00'}, 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x200, 0x3, 0xfffb, 0x9}, 0x8) io_uring_setup(0x7407, &(0x7f0000000440)={0x0, 0xabdd, 0x4, 0x3, 0x24a, 0x0, r3}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000000300)={0x0, 0x8001}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf250100000008000100000000000c0005000a010000000000000c00080006000000000000002400078008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100000000004c0005000300"/37, @ANYRES32=r7, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x4004001) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) 02:01:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x20, 0x8}}, 0x30) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'gre0\x00', 0x0}) getsockname(r2, &(0x7f0000000180)=@ethernet={0x0, @multicast}, &(0x7f0000000200)=0x80) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5, 0xb9a98f9, 0xff, 0x843}, 0x2}, 0x20, 0x1, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0x1}) 02:01:56 executing program 2: getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x1000041, &(0x7f0000000100)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x9}}], [{@subj_user={'subj_user'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fsname={'fsname', 0x3d, 'syztnl1\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@obj_type={'obj_type'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '}-'}}]}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000240)) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x800) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r2, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x4, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@smackfsdef={'smackfsdef', 0x3d, '+#$\xbf{\',\\('}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, '.-#,['}}, {@dont_hash='dont_hash'}, {@audit='audit'}, {@subj_user={'subj_user', 0x3d, 'blksize'}}, {@obj_role={'obj_role', 0x3d, 'euid>'}}]}}) 02:01:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x100000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:01:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) 02:01:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000680)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x4adea3e7) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000005c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x2010}, 0x1}, 0x3) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x69b7, &(0x7f0000000000)={0x0, 0x6dbe, 0x0, 0x3, 0x260, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000580)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000600)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000780)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) accept4$phonet_pipe(r6, &(0x7f0000000640), &(0x7f0000000740)=0x10, 0x80800) syz_io_uring_submit(r2, r5, &(0x7f0000000540)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@isdn={0x22, 0xc, 0x2, 0x9e, 0x36}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)="16a9bf5af67f27e5c018a142d0825e88d7789193ae495562c2f240440f440dd83c9b3c8fc0a8167e1756580cd0c0ce20ff45da97fe6647218d5322b401e4dee7facae5552401935827b74d03d37c6444149ac688300d18c9f36ed980ec24b4d7936f9694ba8e9c21ca28fd1f9a6e5c9a9ca2e36a43804a8814ce78c2d1bb49a2cbee17c04fa22915dbde758cc3cb0bc5d284a67ef26b11166f35f6d60b69efe7afb9a6795845e0dd24812faf60f69dad964a2e1071ace21a3dcab08a4899f94b0dfbc3bda83c343252ddd08940cc3f7d7b688c72bf74dfe8c112b5712e9052b4a9f804f978084fdc85", 0xe9}, {&(0x7f0000000280)="08f2bdeb92cb6c6549a42def52eaf1aa41aa11942fc3dc6b9e373b72212f19b64f80d52b80c16b61af92e29d7280330d6105fe257f96509c52e08e3515f1221d7c80782b224b458324463f5bd4711ad6e5a791dd74e819e253285878def7f9b6f768cbd2fa8e34", 0x67}, {&(0x7f0000000300)="14a64ab5ba9647c6ab27e4f3d226", 0xe}, {&(0x7f0000000340)="cc6f8503413ca0a6c7722defc95076db2e82bd6a0de4e19fc7c9fdab479d72e26ea50c911f06e6db3a6c05f38562f743", 0x30}, {&(0x7f0000000380)="afd4b6f5706af6848bd40f14e27404ebd43f6491ac22e3d0907dd1065d55a5adb7e14d220197ba23a712729fe0ef76aa", 0x30}, {&(0x7f00000003c0)="62a639ece67a34492bd77acd3f1f83ddcba497092c0c6ec32fa50445b897dc0f2e86e7ab0296a78301f4126ed70d3e21c71703d3046c168ca271833857f1fc311eb64c67a2746e9d1eb3d91bf8223692aeb51db7c45e4679413bd06e8f98765ef923eaa765ba9f0b201ca8350c344e03b7299dd083f92a888c596b4ae62a744ca38da2e48d2a7547cdff5e831e3014d24452e27cb9e82b65a5f4d5beebf88a18a54f82a0768781707b2df2bfb0ca13854a78e363aebcaf", 0xb7}], 0x6}, 0x0, 0x4000000}, 0x7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, r0, 0x0, r2}, 0x10) 02:01:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x200000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_TID={0xc}]}, 0x5c}}, 0x24040044) 02:01:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44815}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x11cd, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x87, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x2}) 02:01:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', r1) [ 2475.534787][ T8169] usb 2-1: device not accepting address 14, error -71 02:01:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x300000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:56 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000000)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000180)=0x7) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x400000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="677265300000008ae4f50864675368000c9dfc1f5a70f1ef0344f6a3db6f6313d31cf80571a5eacf2d18b255af63744139", @ANYRES32=0x0, @ANYBLOB="8929001000000c92000000014b0c002c00640000042f907800000000e0000002070ba9ac1414bb0a010100440cee81640101000000000800"]}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x400, 0x8, 0x8e64}, 0x8) 02:01:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000040)=""/241, &(0x7f0000000140)=0xf1) 02:01:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x2a, 0x6, 0x0, {0x5, 0x5, 0x1, 0x0, '#'}}, 0x2a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x20a2, 0x1000, 0x200, 0x0, 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000000}, 0x800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)={r1}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0]}) 02:01:56 executing program 0: write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x10000, 0x0, 0xfffffffe, 0x4}}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x9f}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) ptrace(0x4208, 0x0) 02:01:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x27, 0x80000, 0x9) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)=[0x0], 0x1}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0xa02) 02:01:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x500000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:56 executing program 4: pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) 02:01:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000000)) 02:01:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r1) 02:01:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x701}, 0x14}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8903, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) accept$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60) io_uring_setup(0xb1f, &(0x7f0000000180)={0x0, 0x3f28, 0x4, 0x2, 0x345}) socket$inet_udplite(0x2, 0x2, 0x88) 02:01:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x2, 0x800, 0x79) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000080)={'gre0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) r1 = socket$inet6(0xa, 0x2, 0x1000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x2a6, 0x4) 02:01:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x600000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:56 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000000)) 02:01:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1d, 0x7, 0x7, 0x4, 0x100, 0xffffffffffffffff, 0xfff, [], 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) 02:01:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0xf, 0x6, 0x1000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x800000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:56 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0}, 0xd85) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040), 0x4) 02:01:56 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0xf, 0x0, 0x4590) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 02:01:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@dev, @in=@multicast2}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) 02:01:56 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1fcb8a650fb52833, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = syz_io_uring_setup(0x7ae2, &(0x7f0000000180)={0x0, 0x8615, 0x20, 0x0, 0x1f0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000280)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd_index=0x4, 0x81, 0x527d, 0xffffffff, 0x5, 0x1, {0x2}}, 0xd2a) syz_io_uring_setup(0x661d, &(0x7f00000002c0)={0x0, 0x8c4e, 0x2, 0x1, 0x341, 0x0, r3}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r7, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index, 0x81, 0x0, 0xdd7f6be, 0xcfea9704de7d24e9}, 0xba3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x6, &(0x7f0000000400)=@raw=[@alu={0x4, 0x0, 0x7, 0x6, 0x4, 0x4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x2, 0x0, 0x7, 0x9, 0x100, 0xfffffffffffffff1}, @call={0x85, 0x0, 0x0, 0x76}, @map={0x18, 0x3, 0x1, 0x0, r0}], &(0x7f0000000440)='syzkaller\x00', 0x20, 0xca, &(0x7f0000000580)=""/202, 0x41000, 0x4, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000480)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x0, 0x8, 0x9}, 0x10}, 0x78) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x8902, 0x0) 02:01:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x900000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:56 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x5, 0x2, 0x6, "9fb30d2293cfa752a332255b6bd5819fc57cf2011731728e6efb82029008cc1d3900b0370c0f4b41aa3ab6269abed9999fd00c485b402aac29cccd754be86e", 0x6}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x4adea3e7) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0, 0x28ec, 0x0, 0x4, 0x4, 0x1}, 0x401) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) socket(0x11, 0x0, 0x10001) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x0, 0x2}) r3 = socket(0xb, 0x2, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000300)=0x18, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2009000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x78, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040014}, 0x24040010) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r6, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd}, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1500000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:56 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0x6, 0x4) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x3}) 02:01:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=""/218, 0xda) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd2d, 0x7fffffff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}}, 0x840) 02:01:56 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000), 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000040)={0x78, 0xffffffffffffffda, 0x0, {0x7, 0x6, 0x0, {0x6, 0x9, 0x4, 0x3, 0xa3bc, 0x81, 0x800, 0x4, 0x56, 0x8000, 0x5d4, 0xee00, 0xee01, 0x4, 0x100000}}}, 0x78) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1600000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0x3, 0xffff0001, {{0x1c, 0x4, 0x3, 0x2, 0x70, 0x68, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@end, @cipso={0x86, 0x34, 0x3, [{0x7, 0x4, '/_'}, {0x0, 0x10, "92a841fa86d6984da5ae44663c3b"}, {0x1, 0x9, "dc1287bf4ac8eb"}, {0x7, 0x11, "af98c2a0a54fa78065404b582411da"}]}, @timestamp_prespec={0x44, 0x24, 0x1b, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9a}, {@rand_addr=0x64010102, 0xba}, {@multicast2, 0x169}, {@private=0xa010100, 0xc4}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x700, 0x8, 0x3, 0x1000, {{0x14, 0x4, 0x3, 0x8, 0x50, 0x66, 0x0, 0x3, 0x4, 0x0, @empty, @loopback, {[@timestamp_addr={0x44, 0x14, 0x75, 0x1, 0x0, [{@multicast1, 0x4}, {@rand_addr=0x64010100, 0x1}]}, @generic={0x7, 0x12, "fc0736598a9da11874f19bc6020f51c8"}, @generic={0xc, 0xe, "0d3f8fdc32b73123dc189923"}, @generic={0x86, 0x7, "ffdbc6ae10"}]}}}}}) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x81, 0x7f, 0x40, 0xbf, 0x3, 0x6, 0x80, 0x1, 0x5, 0xff, 0x5, 0x1f, 0x5, 0x4}, 0xe) 02:01:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="001000100000010057a8b06d4f61007c006500007f0490787f000001ac1414bb0713a00a010102ac1414bbac1414aae0000001004408a700000001ff0000116c685beefe197dcc76d3b38bca878444fb00b000000fff00000008000000010000000000000000090000020002000100018313617f0000016401010000000000ac1414440100000000"]}) 02:01:57 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:01:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={0x0, 0xffffffff}) 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d00000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x801, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x10, 0x700, 0x8, 0x80000001, {{0x21, 0x4, 0x1, 0x20, 0x84, 0x71d, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @local, {[@timestamp={0x44, 0x1c, 0x1d, 0x0, 0x3, [0x8, 0x0, 0x9, 0x101, 0x731, 0xfff]}, @timestamp_prespec={0x44, 0x54, 0xec, 0x3, 0xe, [{@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8}, {@multicast2, 0x4}, {@broadcast, 0x81}, {@private=0xa010102, 0x5}, {@broadcast, 0x77}, {@loopback, 0x3f}, {@multicast2, 0xffff}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x2}, {@private=0xa010102, 0x800}]}]}}}}}) 02:01:57 executing program 3: r0 = geteuid() syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0xa, &(0x7f0000002580)=[{&(0x7f0000000080)="6aceffe7149509e31d26323aefa6e787308de1985e8e79c8da8f71ef9eb83f87ca96ed463c2cb80524c52b556cc72e17dc83733ac8f2722d670a37be5047f6188fb85151aa28777bf29729a7580f4029ab15a8fe9d0fc0745c0a606b1c4a23b6be71512e367b2ce8a41f92b057a933242b06436b64615ff153d872d9fc071de654f2974dd5114943c35becc19bc7555f828c", 0x92, 0xfffffffffffffffb}, {&(0x7f0000000140)="6e0d7c7d3be8d6d29de755cc4d0311eab053ab9e7202660a245c9f994341040a17ea7fa448aeecdaccfaca6783d0b042341194376201fd1bdaceae92e1cf5be9b500e612c29411fdb97ce13abeefa340f932b1c4f5c55c438be2c7dd30183caf3991323296c109115491cff59dd9730fd818a79e1e2d1beb1a2e8a1584ecd14025e6ea8b0f", 0x85, 0x4f}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000002700)="641439e897d46ea1541c9776132f3e8221768e9fb72cb8a3deb490f61cd683ecc983ccbdea14c018dc09ace0f01ed74d2de22ffdd80b85477456a510e59e08c8cd55956e41a61492c9c3925121674c264af0488c745f460b4addef1168512f369f2945cdc7cd1d18157b441b162552ae0e23ee82f4084ac76737be2e30e5df53211c3f4bf724fd9d49c94bb27ff4cbd3f228ca2cf9ecbb02c7ffd7fdd48f6e05458c4e95ed8a416fd527327f17f41a5b523eb397358d78c48f681097a2c594d909ac16512922b9c4c7b10d4d3118587284a22275ae8af996dcb650bab6761099da5d317910af452f8c8bbf41ee25c5bafe", 0xf1, 0x80}, {&(0x7f0000001300)="7c4265ce257aab11920ee5e3329f17d3dfb9b62bf473f03375a26801a8fd04f7601873c1aa00c3f35b502be55c9418abd116ca49c6e69bf2607ecc76d0db47f71b3d6ea8f5c0d4cdab959d5ea1b910981c0d94bd577643a3a57df0ec33c0f926291b91b47ebc84d130d7dcc92871da6d2ae56c5c7cbaf628d7ba230188a48ebfe13288ec64d9742427020a2ec6d6f8c23c1d690baa", 0x95, 0x4}, {&(0x7f00000013c0)="f62bb3968cd06492720096c8610269ebb69e4ebee1a9e798aeff8bb341d1111e3658e25e81ab4ce5", 0x28, 0x6}, {&(0x7f0000001400)="09db079477bb9fad935109a25c7fab4b922d179f13d1e6afb6e2d06bae910df690241f4dcaf4db6f750d01f4add42e3f4a0f0f2b7cb015eb8013109067b39610555931047ff15d06c79276b651c542dcf0644024980814734e2b5faadd8259f33a8dc1763b31d190ad9a9da25e2b58fff7b8f280ab2963d59e6b0dc20014bd1fb854b38adeefbf09aae8803af833f3878073ac4b9c4b7c1d7aaebc8b7c8c3c515f8d87dd919d3c4bd036a0331370e703946d07", 0xb3, 0xffffffffffff0000}, {&(0x7f00000014c0)="e6c1cee31a64ad3aa0d151603992bba422ff0d8f753b2d9dd222bc71d477810dff4d0753bac0ee46e8ae38b1b8bdf0de55d662b0f6007c3dd049fb16ce4e28d180099f2f374cd4277a98d09f94fa4deb6e5299fdd0433f52a5ec848de67326e1a877d0482f77e1eac551da7b89d4f936da8bf9b192ec1f25c7c86bde7a538e4342c2b880b9e4365dfcc80a05dc664e43fee8248819e999141793229ba09b22cda3ef6496b42cf231e63a2cccc1af01cd5331e3edd06a77c6f5e848a04675fbd4d73b084526447e3fed18891b5969ccaba589c2c9dc1c480621548d2e259491cd0718d6b91f8a7f2b5501a711ee9fef001ff43efa5d927f3da910fef6d0f9938e639ccd5f2985b2f7812f9082d6e5379e40b3389ebf615cc8770e7946200e60663abf5daf4886d449aa67df14e7181b278af0393a14b4e718617a62b76e3d8e21b631a08b21d16ea6233da678d0c476008ba40a27d3c50bb55a03843579091f75ee788060d4c9057b6f0ef82fb95f053242e7a0c673e30e6dbb2ae44c7b209d5b394476b050e1ab00cfaf611add0606d01454e0efd99c43b80849adf730d851acd4b2f2ff90ad6055b3c52774a442f8a178ee8292ae543fc41795f00e9d2c5d93da4ac1070d1e346ca2655e55a13b22cf031786185551c12e55d9989c2be9d18041b6de1cfae19c3a64271c1fa4dbe6570fe4093bfa4423883fc950d270987d7259132fccbbd3cdb10e39bd99947358bee763938652a931dc5bd7cdfc8f99e54c5c606b8c5149404b8881b962c65b07935ac140d05b94221fc6c7e18dd07294a863dc50c7c2f1468455ad4a9857a251ff09b9c60d92483cd3eddf2df0bd0e865cc15a87248c8000ac87ab63bec834ad4174fb07f69c0167d79d2c7fcda73b6d04804a3a5b876229f61cf4dc9d0a6cfef2319bf46db1cc1f7b4acbc52f6806d787d9b383173badc3be50d8e942f27dc4bfff6eb0c342cf00054238530ee8ca24a0194937b20a903e0515f2107ae39663371ed4fb54f42c43fc350d43d9a9307e6491bb9740fd8baebef75fde75037a2dd069663ef80594f6b4cd86c2bdbbc6a98946747abe68ec7609c26c9611827266d0a33c00ff37339ac29956da040e8f472ffaf0a9bacbd0e91ff4e4f227665c448ad51f2948a99a5061a016afdef757290eac307b605bdbc078216ed9cf2dbf72b49ca2d6ae59412eef9554a31a92ea30b49cd619ef934540be027e6103d5f5adc70ffaf84786e84978ba01f184cd289be701d2aa507d704b113e7d4066e5c262f8f5ba844f0f6e7a8b707eab4adb988db424d227163e207342b9f14396f4de06632be3db56dd47621ec1d50e624b11f2b23880cf848c474b70133a680c6eedfc6788b90faa9518fef930f93f8c9a80f29c7b95854c359f2d13ac962721dfaf0092b972aa70dc4144b708a4570e4e552701825b65cea565e9aa7af5fb6700b3682278c8062912a8b08e9fb37a333ee006411a64440e1e6c9f3c27f8ac7c3f305e4a478008fe0c8dff3ef88d811e1037dc8540b43b232945d4b489bc3654baddaf38f2b66c75a47e64004271404a68aa31ccc7cb6f928126f33d2952ed378eeaa91818305d6c98c4219b96d07af19cba4209277b864a91c634d1f97363b8dfd4bcf5a941a206e59f8f11d91f0b10d97a6ac6d44581464056f2d039bb1602ec2c98966eeadfba5e7bf36121e6e101a57b3bc8bdb30867d7ddf3e9c92593d697f95367ae3f776b86f31ee89c92070f47dbf27cb1c314960dbf0e1aed0c9749f89973243870023719541b77de71c68f27b736d9463c89e61da0ff9590f1e7498c12152670331fa89ea56b2ce3cd03e4312454816baf7b10b950adc680b02d5dcaa118241516b9393b6269d44a6ad155acbd95f006dec0058abb4cf69ed70285983d0846eb7fac41b720f9a23b4b79f11a6366f5ad6d74d4621b88276cd883c3bccf7ad508c8cba7c51ce98d940357fbc6d51aa308c1eb293c81e4158088f8e04de045172950c32fe5e128d4e8a8525a1008e2682624a1fee2a518b07fb3ef38d04b2e0769abf3db886f458724dcd6a9ec1de0356d88d973ff9f39f6e083eab7f752424bc2b6fa8e502055aeeabba960ff32e15539598ff4dcd1055d65dcf9ecd1aad4e73635122405884a7f98995772e2854e97f65f8741578d97d4682108ba6e2e1b62bd2193672d80bec16a9e53325a7fc54da63fb8abf0e9167f664bd972d12e8bdc3a7b5a1028b74addc0bf3cc8debc3e94ba9b63eed86875156a728bb105ac504f62b14f9c47ce72549bf5e650dac03f8aa1514e52a7a1ca739737b279a58286dfbeb396867c12a927dae60cc2a3c210953a4dd6ea1365591085407f962c2520612410bff7b63cc0dca302a708182a6686cc6474ed75b996b1901efc0c38bf41d51f929a467c46a55a22c0fd58e20117f5d3d83d75027bac6fda111464949636f965cbf47238203acfc75a748772395c69c649018b5584f24e224e738934bb288a97dc6075936be3df7d70ecd2673c70a92db8332bdb9bc464da5182b92835f7a3abb77c537af758833aaf9b439e7a1cbd81d519e6bd4beeb8bb4a23ad35a9f7d815c5896b44216a87e6fd75ea2baee6748d1daa3e9f0ed2b2126e5a214dc4ab3ca04f1267cf37d238ea5709346251e07604bdd27c42f4df54873001b3683c85968bec986d3d46630245823e7263efe6afbec0f9ecf812cdad419b1be49efa04f18e39c450d72ad92ad70844d663bbe725acf386114c7c39a37b56962c53c2152740e4164ab202325fb3a58740462070520679a62c0d6f5bd2fd0a0f17709fb4ee429366fc61056e1133a684b9275dd720bd9f7f0392eb094072310ddb3aae393eba50f430f41c35bb58bf3bc168b75085ba8a79e66d7d58daf774a9849217244eaf39da421aac1c62926ca9bc1e9543d954209404c2bf7f7c60115988617faf89455b491885f642ce3ba5021a0077f4ba8f1054d98c9acf55438f5e741d0c0320ce1d12860fa56c378e0b5b2ccb22abe272b27317ef1ab76bd141c9ebbab0e9d7d68cff2a09dac848768feb6fe2849e43b81f53c5edfb08cea199b499f2293d8def766cead60e9134f91a0dec1329d73f6de84aed08210799e914d12393a24fa1c10fe25f79c291a41507089bd8a41178d98f815e182557ce559af6610086ab12a454cb4dcdd8e3f309b083b59af67e73a2d91ae30f0b2c48f83f68277c38f3126e94899368ebfc8e80f2c83a015b105d4f7a48ab6db5f8d8bd00c854eccf3e1dea2e78ef9f042ee9f9f480e143d3ec43e1497f5789c0063f238fc58cbe368a17b2929696806e2f5a8e7575ed1e9778155439ce8139c0c60929b02d74535de1bb04909ca95e7ee9f1a3b718933045979afc2e92a6f2f385e9a87bdec2683bcbd89bee05ed0e479ef21a6c856866d66e6bacf072bc75f8928493993d2019da5db408428a98e75883eecc1684e048d99dcaab99b50cf8a8c0a3a2533c5bb0be66778e7f4f1a24da5af1f1f34833757419545f938c2453591618d517bb71d75e3b9d6571fcbea47c279c50940d5951e63669d39e41c4609b86248f249421af9ee80cad662af10de83504513d15cce3635d9f05f5a6d50fa28f77e5161f1cfd1782504266c4fbaea014ac7e44400f745c214496905a865efbd62cf3080bf081f8c22fd64846e15cf7d139e5a749ede9965748b63295288289aea28c9b51af9c57d63366496ac39d6f7b1fc96471952ca4e39c467e760a26b659e0654d3baaaa549446d4d771ac520f5517565138fd57ac151ff92ff3c7ad8ec4fe0373f4e6e71560b3c6f609f8b2b7c7ce2a95b33d980d95ecc45c1b1633b7adc67e2a8ba1ed4bf96be8bd20c5b265e04faffd7f077d5ca0d82a01963e35dc452b33bbde03e45e4bf0e05ebd96ff1ca28da8c0879ef575a1f3bdb837eabaad4ac936052eff828e7425e0408817d2f1cf7f3f9c11a74b86de55f5f853321315821f182260a96e33051fafe7541f98a146a47fedb2f7c00f8f5be0c3c4dd20056e6a4774a64095206fc69862de285e41eedfdc77bea6e7ff6b6509f12b56ec8940ca794dcfc525dda8c6dd3fc5fd137e182f9454d6520aacb526adaef4d7789648391f92b85e646ac1cdcabe6d160e55a052d5e62f7e7e97987590542efa6d584e79a71bddf633e2c4c8b290c67436dce952747861127e602bb5ec957742b879c1f07f570a079b7ac9997d61067a951ca8517d97bebbe784e6f69a7a6313b8374e89cb8ebfe84349353bc730efa586d3ce6098b82344d952c9f8e0531a338e91a03626e5e1a078522aaa3648511e433d9b16dfbae676d91f591fbf954c81c0939572d27bf8c265b1fe6cd54413780d6d0774126156d61d888764b23c0ca879aeba1cbc3a5f8956fbadf4cddd82695948a2bffe54cef726cc894364da263ec4e4667e0370996e45d00c19cc33e2383f228d91088e19b229837dadbb8315d59fa3f6fe46b370d3698dfdf78c72a9a3778d43c67d60a12dbb85ae585e2544cc12e481935be1d7b07641c66fbdd7358bf13f923421f109c78c8b2b7afa47b848fee57e75eec528fd6a559391fe565814b134998b55f0ec36ab7e160f17f36b2c30effd0e9fb942690f7bcbbacd0b27b5230e4fa4db038b179559692f6bbaf79c344ad2d2d48d9e0b5a3a0590eee94bcdeb5560caccda237aae0d3fee07525f84d5f0041a416a5cd3c1d38b41dde05affe6a0e3456f5282761f068a286e6b83485452993a2ff0653a34697867c370d20bc41c3b62dd43d854fef8ef6aad04c83d16a411d8c42c5450869bf16a83ecf2f9309363a51b1518e4f4232501121f65f54dc141a6b4683888e52fa22c9510a3ad76e64775ecf8ab31e3f8e9deba514fc9a8e6f78a3b24a0374d2a4c47ba3c4ea20d00c45d0b1a87beafe2a6cf60e82d221432090b82f0b62fa5355108babf44ccc6161413c9c41733aa1f7b413ff32ed1aaf96eb91d0e4f50a16d4ce1cd850a7a82d141d2f5ce37c100a7f05c0ffc05940e7287f7c0b9f9bff959211bbf312e2e781d9c474b35a01d6b85eff226652c0446ad46df21d6e1bff577a7bc500dccf5a07e4282b1ff254358a8c925bc41f412373429aed32f3ac6bf544251585d100a1c23b332f252343f8dfe6158bbdda4619d64526248bfe351a728a325b3ff220b7ab2baf093aaa22d70e0bbb100d06eb28dc506362113d77e95f38ffb4525987263553653080a3f55106d945568a2b81d5c300204af4b81022c90edb6bc3dbba9124ba5f5de091bc703d76db021e17b1287747fc8cea488cc8ebbfc730342216c45a2c3119a9ca3e0b322e20c8ccf95e46fbc155bc73a9880c0a81608b3e996a65eeec0ec19be3b0ad64fc6ab0712511c5f04659db3cc7eae02c716ae334487f7d3a1a6a8e8c980864a24d31b6278792c13f7928a0c73330b73fe17ed497f79de38e0389bd00d0c8d3d0c87bfb0bc3afde49e8de13bf36835bf23639730e3f6172187d804b15e46cf1f2983ae0b50f94454eff587bf915d8f79928f4f4206aa8fb7fe2e1e3d6c39925fe617aa781283f8fc7fccfc5bf07e6400fc2298915acf5453700b7688a38af684201bfd66c96eedc5fc8f65446e4573be89d557c63aad7c399893e047889f80fa1cfb9bba847ad14d23246a22335aa162f441f19d14daaba6eb1a9adde6887defb4bc0e9368376f2e8649787ad224890f564e781c2f7d0bcbb7320154736b7b79a986d15a02b23f8c5578fc10b9f68935229780e855b55f1d236270b73b8b2e90a99776", 0x1000, 0x8}, {&(0x7f00000024c0)="5c4f24a6dd2aee3f56e177", 0xb, 0x42}, {&(0x7f0000002500)="adfb8aee5444ba36bdce267082b073b469ddb080729336780589a87e98beab1d4029404443df3a7e7262f13640bd60aec9156885b5b56f0af13cfdde50f51e2b2f0906a268b7440824763e027dfb8134d70dca21ded9856d07887d1fde", 0x5d, 0xffffffff}], 0x804b0, &(0x7f0000001200)={[{@fault_injection={'fault_injection', 0x3d, 0x7fff}}, {@noacl='noacl'}], [{@hash='hash'}, {@fowner_eq={'fowner', 0x3d, r0}}, {@appraise_type='appraise_type=imasig'}, {@permit_directio='permit_directio'}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) 02:01:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="79705f353792c6da0600000000008000ab22ecde79b4dda6be66656de5f76b76f24b0df43daa27bb649c4589d09f8e212f72e4ee2833b3a721b11c387cfe4b0c52d447", @ANYRES32=0x0, @ANYBLOB="8a640700000000090000009c412400840066000000049078ac1414aae0000001010723fcac141444000000006401010064010100e0000001ac141411e0000001ac141427863e0000000302051800eb000a082317e8db1b57fe000e5f11b8265822b0e1e3b916d0000a88101e0cb4e1d7cb0711d5ea185986b54d5bdfd12f0df2cccd00880bf2a31349d245820a1f0100"]}) 02:01:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x6, 0x6, 0x1, "98554b9bae063d245448393d81e826cdf72c9137b2a91e43ace020b42aeabf9ed9de82c9ce2bbcdc1c301799b3ef590fbe49ba04abb1a41a09494cf550b1b0", 0x2f}, 0x60) 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2000000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:57 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x7e, 0x3, 0x0, 0x1, 0xed, 0x5, 0x40, 0x2, 0xec, 0x40, 0x9, 0x7, 0x8}, 0xe) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 02:01:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bind$phonet(r1, &(0x7f0000000000)={0x23, 0xde, 0x6, 0x9e}, 0x10) 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2202000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xa, 0x4, 0x7fffffff) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}, 0x1f}, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_io_uring_setup(0x7e6e, &(0x7f0000000000)={0x0, 0xd085, 0x0, 0x0, 0x1bd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000680)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x4adea3e7) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r4, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @empty}}}, 0x3f) io_uring_setup(0x1596, &(0x7f0000000100)={0x0, 0xb04c, 0x30, 0x1, 0x25a, 0x0, r1}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2500000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:57 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) sched_rr_get_interval(r0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) 02:01:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0xa00, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x114}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x49010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', 0xffffffffffffffff) 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2800000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x5e77, &(0x7f0000000000)={0x0, 0x568d, 0x0, 0x1, 0x27a, 0x0, r1}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000180)={0x2}) 02:01:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x7fff, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="000050e6", @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdf2507000000580005800800010075647000070001000000000800010007000000080003000104000008000100000000000800030007000000080004007f000000080002000500000008000400000000005800058054000280080002000700000008000100160000000800020001800000080001000d000000080001001600000008000200ff010000d9fd01000b00000008000100020000000800040001000000080003009100"/190], 0xc4}}, 0x4001) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffb, 0xde, 0x1f, @buffer={0x0, 0xf9, &(0x7f00000001c0)=""/249}, &(0x7f00000002c0)="08398f399380bb955278ba0a87ea5ce5f8ced796b33974afc34254237759cca13ce38461dd265e319901d420edabf5a4c03e00b0a28be17bcf0e1fbcfa377d4d80a4655bd36169cbf1804a5ade2624dfd5bf64df26f5c73ed0ff73e8fae46042dec469afddab39aed3edb311adde545ee0550652e925f7887cf188665592954c7b284bcde293f14cb69cebb62046a925b416b67bc5d0b6427248ce0aeee8fd6160346a0d7651e7c76d1816001d5e990e296c5d7f1ceccf1494e438693f2b8745d0dcdeb159a0cc4494f91151cbcb761e8ef1fed6557b5932524752e76998", &(0x7f00000003c0)=""/38, 0xfffff800, 0x4, 0x1, &(0x7f0000000400)}) 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2a03000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2d00000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getgid() ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) read$midi(r1, &(0x7f0000000100)=""/37, 0x25) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 02:01:57 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0xffffffffffffff08) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) 02:01:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0xff, 0x20, 0x7}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:57 executing program 2: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x37f13cc2ca17bf13, 0x2, &(0x7f0000000100)) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3000000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:57 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000100)=@raw=[@map={0x18, 0x6, 0x1, 0x0, r0}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0xfa, 0x4, 0x7, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000180)='syzkaller\x00', 0x1f, 0x0, 0x0, 0x41000, 0x1, [], r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x7, 0x5, 0x3ff}, 0x10}, 0x78) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r5 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000040)=0x400, 0x4) 02:01:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14}, 0x14}}, 0x40) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x2, 0x70bd2b, 0x9, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@loopback, @in6=@local}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@initdev, @in=@multicast1}}, {{@in6=@private0}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000080)=0xe8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000700)={r2}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f4010000", @ANYRES16=0x0, @ANYBLOB="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"/502], 0x1f4}, 0x1, 0x0, 0x0, 0xc014}, 0x1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) 02:01:57 executing program 3: syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x100000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="ecef77ef665a70924fc71ec25c6a4deaa20e20a1a4c3bb2716a62686bb53c66bcc9d01c09027746f29058982decdcdee4d126519d226fdaa8fcf63a60ec44c2b58559e68ff14f98d8bb013991395a192aabb3a4230c4770f27917b04b4d65ba69fd7f1b67173c10ea72a02db267c764a7688be8d1f080aa247f03a7a82ba1c5b5fff0146750ec5523a4aeefa036a9b21c86b07ba143c0214bba8e326a50e5d3cee5a5e2297e83ed77cf96ddf4452b4a0fc46679a4a93aa43da6dd4b06a608c3b2b4a483e2ac690f4a8e251531d74a20a676c4ea514e088", 0xd7, 0x315}], 0x1004040, &(0x7f00000001c0)={[{@user_xattr='user_xattr'}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x3ff}}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x1}}, {@noacl='noacl'}, {@acl='acl'}, {@fault_injection={'fault_injection', 0x3d, 0x2}}, {@nouser_xattr='nouser_xattr'}], [{@smackfsdef={'smackfsdef', 0x3d, '@'}}, {@fsmagic={'fsmagic', 0x3d, 0x7e869919}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '#$^#-'}}, {@subj_role={'subj_role'}}, {@seclabel='seclabel'}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x38, 0x65, 0x64, 0x30, 0x34, 0x65, 0x38], 0x2d, [0x30, 0x61, 0x66, 0x64], 0x2d, [0x64, 0x61, 0x33, 0x31], 0x2d, [0x39, 0x66, 0x38, 0x33], 0x2d, [0x63, 0x30, 0x65, 0x38, 0x2, 0x65, 0x62, 0x31]}}}, {@appraise='appraise'}, {@subj_role={'subj_role', 0x3d, '+!'}}, {@dont_hash='dont_hash'}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000006c0)={0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000340)={r0, 0x0, r1, 0xa7, 0x80000}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$fuse(&(0x7f0000000380)='fuse\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@smackfshat={'smackfshat', 0x3d, 'fault_injection'}}, {@subj_role={'subj_role', 0x3d, 'acl'}}]}}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x58}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x8902, 0x0) 02:01:57 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x15, 0x6, 0x5) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x7, &(0x7f0000000540)=[{&(0x7f0000000080)="3a407feec3a00a1bcb236eecdf0c901179e6e727d7069401debe4d6906031502a0130093f845aa03e6bd87b88f2596320ccfd789f2a6d4a19ae4", 0x3a, 0xb8a}, {&(0x7f00000000c0)="ee4568cac020abb170e30ae79fdcd5df55de951115220c7e9d4e0a93c62619916a3a48a8498b265abd8aba11694dfe8ce8071342c5edbef17f68742aeadb5e555187e2f2115acf716ccd6ef995e0547fff3dc801cc1cfae717aea9d53266faf48aa2fd69670bdd21e7192f28dbe9f798e8143e078c3a1567542a2d73c8fb0bafa9a052fa0ea900145ac494350089bd86b6492bbfe7ee8069e55b0398149fbc0cbf13542c9aa529d2f9533c30a3f8f09ef6445136aabc1660acbb1135e0e95a2540203964a3a360d1fb81a26b79dbf4355cc7db5f982229ec8f175f4136bdb55207ca06fb9f37c63b82539e2bcc01dad13c22c406d7b5", 0xf6}, {&(0x7f00000001c0)="e21579772a358cbbf8517def68dafe89db7bc66a", 0x14, 0x9}, {&(0x7f0000000200)="73682120fb7baf0c403d2c7a6406b7d4b0317bc7c2b1d64d92cd3135f39a9839eafbbd62f3c61920a0ed034d73a2e11a51e6916104e613b17baa729590d0541a425c45c6be93bef039023b24747dfa1d807292f87faf6518d09e45bc7db02f", 0x5f, 0x2}, {&(0x7f0000000280)="29646dff9f84b1b2c90e528bcafa97f946c3421597ec41a96b9bd1d823be02087fed99995148983ca53727dbf7255be005e57dd2c069ac01d064eb4b4aa431c92f18360cb54b31b8e1b262ca005df2981dc3773e7175d8367ed2d8256dffe18c4e44c1d42647c33024f9f1b0ecbe78cff7093011cb8f535427cf42596239d5e1c308", 0x82, 0x6}, {&(0x7f0000000340)="1c9e102f2148ae6d18e3027e6e14aff44acf95a3153f09c93f667572d4b4e99a206c047a9b07e2a28613d43f0a39b26fbed7c5331cdac245cf923dd017f37a53275f802dc931ca500cc7758e9d3119a092b16e2cfbe89bdd02f6e37432b63b81c5fe4c44e5a3947213cfce13514681fb976c8a06581f9941d05318468e48a30becd0895c1aa0970e116c8042657170a44877c7b5b4d5f54f974a2507a847111bd7683fd1b89f56887e2b629a1e659323bde5d1b1298b55d590877b3c28758923b87e1b74258d2962172c75134286472035dc903e", 0xd4, 0x1}, {&(0x7f0000000440)="38801fd84ad9966c5b6d889e12048eed930d36449a0955f549005e35dcb61c843e66357d2621237e890531c580b94c1a115a8093dc80d7b046100aa3d3ae391d6622117581f0cb72011cf0343e260641d40af7ddd52a37cb46b159bc34a95019cfde42ffeef21276f1ff1db49381f25744a7cd57eb8723b10042ac4744c736fc014a9683978ffb8b6db6d6646148590074efe0f79bf52d1f6d3f6052a1b250fb497857fe55abc9e851c80af5e6d49d844e3a29e1ddf5e88deb4fe0b9b8affe6fceb608538bf62e0928ba", 0xca, 0x4}], 0x0, &(0x7f0000000600)={[{@user_xattr='user_xattr'}, {@nouser_xattr='nouser_xattr'}, {@noacl='noacl'}, {@user_xattr='user_xattr'}, {@user_xattr='user_xattr'}, {@acl='acl'}, {@nouser_xattr='nouser_xattr'}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@seclabel='seclabel'}, {@subj_type={'subj_type', 0x3d, ']}\xba\xcf'}}, {@audit='audit'}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3400000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:57 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020}, 0x2020) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000040c0)='/dev/fuse\x00', 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000006140), 0x8) read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r2, &(0x7f0000004080)={0x18, 0x0, r3, {0xf598}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000000)={'gre0\x00', 0x0}) [ 2477.177170][ T9911] fuse: Bad value for 'fd' 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3500000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x3, 0x2) 02:01:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) [ 2477.228421][ T9911] fuse: Bad value for 'fd' 02:01:57 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x3af9, &(0x7f0000000180)={0x0, 0x3, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x8902, 0x0) 02:01:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d00000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200480a}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x2, 0x7, 0xbb, "e6e86fe2c51e94e0b052d20efcc48106d1fb4dd02dcef472887ea2890571edb6fd4e1720e26a3542e2b8f697c5385ca3150ca383870476c4ac293031b34d81", 0x1b}, 0x60) 02:01:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40800) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) 02:01:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100)={'bond_slave_0', 0x32, 0x39}, 0xf) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85c0a4e208214eef}, 0x40) 02:01:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_uring_setup(0x2dfa, &(0x7f0000000000)={0x0, 0x5fc, 0x20, 0x1, 0x145}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80800) io_uring_setup(0x6285, &(0x7f0000000080)={0x0, 0x63f, 0x0, 0x3, 0x3f, 0x0, r1}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1d4, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @empty, 0x2c50000}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc98}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa109}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x77f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ad}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe28}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) 02:01:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4500000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x480c5}, 0x8000) 02:01:58 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0xf, 0x4, 0x100) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00', r8) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:58 executing program 0: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000100)=0xe8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x13, 0xfff, 0x4, 0x80000000, 0x1cc8, r1, 0x9, [], r2, r3, 0x2, 0x5, 0x5}, 0x40) 02:01:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000002300)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) 02:01:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4d00000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x81, 0x7, 0x8}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:01:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x38, 0x0, &(0x7f0000000040)=[@dead_binder_done, @request_death={0x400c630e, 0x3}, @increfs={0x40046304, 0x1}, @increfs={0x40046304, 0x1}, @enter_looper, @increfs={0x40046304, 0x3}], 0x20, 0x0, &(0x7f0000000080)="105bb0860e827b7e5f08c49a8fd97478ebd9779c874b38e19c233c413c1ec83d"}) 02:01:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6000000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e490, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:01:58 executing program 2: getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000ea0008000f2305dcee3cb0d4e3fa"], &(0x7f0000000040)=0x12) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080)=0x9, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x8c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fda={0x66646185, 0x8, 0x2, 0x24}, @flat=@weak_binder={0x77622a85, 0x1100, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}, 0x1000}, @decrefs={0x40046307, 0x1}, @acquire={0x40046305, 0x1}, @increfs={0x40046304, 0x3}, @acquire_done={0x40106309, 0x2}, @decrefs, @dead_binder_done], 0xeb, 0x0, &(0x7f0000000300)="359522d8a7d1bfec7f15cadb2f8f48cc409445fe44d0518b2350f3285a5dfc3873ca0d2c393e37c4d9de95da1c87de78d9134afe45ffc87c72d0beaedd5be03017c8b71bc9794b2ba0b2074ad80697c18cbee640e1c136e3d04a59cff46109238c5ab8e065d9242038012d74eabb838082fc479a56d3ad520333fe43dcc01376fa48a80aa0c3af8093f39b74b445cb52bc079d04717a76dd8b3c0b0dcfffd7941b6d354bb61ef972d478019e3f6c8e10038ff17814f1335dc64dc96cae3d6a2172e30597e71f5aa3c19a2b06aa1ae8a77e439e586639ef5cdc881035542c23f7720c5f9c0c163c9bcb5dd8"}) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xbb, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)=0x2, 0x4) 02:01:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:01:58 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, &(0x7f0000000000)={'gre0\x00', 0x0}) 02:01:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6100000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:58 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) 02:01:58 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000240)={0x1f, @any, 0x1}, 0xa) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@local, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) socket$inet(0x2, 0x2, 0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) accept$nfc_llcp(r1, &(0x7f0000000180), &(0x7f0000000200)=0x60) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@private2, @in6=@remote}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) 02:01:58 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket(0x21, 0x5, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x8, 0x8000, 0xffffffff, 0x214a, {{0x17, 0x4, 0x3, 0x0, 0x5c, 0x68, 0x0, 0x8, 0x4, 0x0, @local, @remote, {[@ssrr={0x89, 0xb, 0xb2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1b}]}, @generic={0x44, 0x2}, @timestamp_addr={0x44, 0x34, 0xcc, 0x1, 0x1, [{@broadcast, 0x5}, {@multicast2, 0xfffff68c}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x7, 0x0}, 0x1f}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1ef}]}, @ra={0x94, 0x4}]}}}}}) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_io_uring_setup(0x673f, &(0x7f0000000180)={0x0, 0x5447, 0x4, 0x2, 0x1d6, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r5, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1, 0x2451, 0x0, 0x8, 0x0, 0x1}, 0x7) 02:01:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x6, 0x8}) getsockname(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x80) 02:01:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6400000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:01:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000), 0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:01:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x3ff) [ 2477.994442][T10189] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2478.284749][T10189] usb 5-1: too many configurations: 144, using maximum allowed: 8 [ 2479.224467][T10189] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2479.233616][T10189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2479.242357][T10189] usb 5-1: Product: syz [ 2479.247012][T10189] usb 5-1: Manufacturer: syz [ 2479.251685][T10189] usb 5-1: SerialNumber: syz [ 2479.306137][T10189] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2479.904474][T10189] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2480.107476][T10190] usb 5-1: USB disconnect, device number 23 02:02:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x8}, 0xa) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x80, 0x400) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000140)={0x1}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000100)) 02:02:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7400000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x81800) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8903, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, [@generic={0x4, 0xf, 0x9, 0x1, 0x80000001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x400000}, @jmp={0x5, 0x1, 0x2, 0x9, 0x0, 0x1, 0x10}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000140)=""/64, 0x41100, 0x1c, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xc, 0x1ff}, 0x10}, 0x78) 02:02:01 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000080)=0x60) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:01 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) connect$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x1, 0x0, 0x3, 0x17, 0x1, "bb6a2c473056fed7b9ae5ad74bf6aaf1cb9e1e672bc80b689320ecbcacfbcffd2c5ebc02a106246e8df128834dadcee213b43949923ea5af5dcf18e334bb7d", 0x33}, 0x60) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) 02:02:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa3, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x2, 0x8001, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:01 executing program 0: io_uring_setup(0xffffffff, &(0x7f0000000000)={0x0, 0x2b02, 0x20, 0x0, 0x157}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000080)=0x81) 02:02:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9400000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:01 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x80002, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x40a7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000012c0)={0x60, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="8561646619000000020000000000000002000000000000003c00000000000000852a68770501000003000000000000000000000400000005852a646600000000", @ANYRES32=r1, @ANYBLOB='\x00'/12], &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x40}, @dead_binder_done], 0x1000, 0x0, &(0x7f00000002c0)="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"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001300)={0x0, r2}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000001380)={0x8, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000013c0)={r5, 0xcd3}) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000001340)) 02:02:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @none, 0x8}, 0xa) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00', 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r4, 0xebe2e154fd129f71, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x3522, &(0x7f0000000240)={0x0, 0x94fb, 0xd605e167706e21b7, 0x2, 0xb, 0x0, r3}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x0, r2}, 0x10) 02:02:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockname(r1, &(0x7f0000000000)=@ethernet, &(0x7f0000000080)=0x80) 02:02:01 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0xa, &(0x7f0000000280)=[{0x5371, 0x1, 0x1, 0x4001}, {0x0, 0xae, 0x5, 0x1}, {0xfff9, 0x1, 0x36, 0x7}, {0x97b, 0xfb, 0x5, 0xd3}, {0x0, 0x5, 0x40, 0xfffffbff}, {0x0, 0xd, 0xfc, 0x1e}, {0x2, 0x5, 0x16, 0x40}, {0x2, 0x7f, 0x4, 0xc03c}, {0x7, 0x1, 0x3, 0x5}, {0x4, 0x9, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffc, 0x70, 0x5, @scatter={0x1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/140, 0x8c}]}, &(0x7f00000003c0)="51196785719cfd14c1be72a2eccf3790a2ae15c77d28be3197952f328687f5dfb1dd3a8255ae80e5a721814d0f26ccb1e87d9309c8cae138efa47afea6c696c82ca89f2c4b49804cbb8c79b9e2e581c3301b81dcb959e57faf012300b120ba8d6abca67852205f2f780647e2518cc4be", &(0x7f0000000440)=""/157, 0x50, 0x5, 0x1, &(0x7f0000000500)}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x59e}, 0x8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f00000005c0)) write$proc_mixer(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="564944454f20274361707475726520537769746368272030303030303030303030303030303030303030300a5245434c455620274d6963272030303030303030303030303030303030301030300a535045414b455220274d617374657220506c61796261636b20537769746368272030303030303030303030303030303030303030300a524144494f0a434420274d6173746572204361707475726520537769746368272030303030303030303030303030303030303030300a4449474954414c310a"], 0xc3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0x1, r1}) 02:02:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb100000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:01 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f0000000040)={'erspan0\x00', 0x0}) 02:02:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) connect$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x6, 0x0, 0x7, "7e210221d4b4e1e65f10285145ddfd23177d5c13881948d0deca4d454107ef66f602b75934899e4835df5259a5e4700d9f380d44282cd687f7b8185c169e6d", 0xc}, 0x60) 02:02:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd500000000000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048890}, 0x1) [ 2480.924448][T10189] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2480.939509][T10189] ath9k_htc: Failed to initialize the device 02:02:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) getsockname(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000080)=0x80) 02:02:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2) 02:02:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000000)=0x9) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 02:02:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xffffffff00000000, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) [ 2480.996836][T10190] usb 5-1: ath9k_htc: USB layer deinitialized 02:02:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:01 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)={0xb0, 0x0, r2, [{{}, {0x0, 0x0, 0x1, 0x0, ')'}}]}, 0xb0) write$FUSE_INIT(r0, &(0x7f00000011c0)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x21, 0xfffffffb, 0x12021e4, 0x401, 0x4, 0xac3, 0x6}}, 0x50) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x2f44, &(0x7f0000000000)={0x0, 0xffb3, 0x2, 0x3, 0x115}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000001180)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x1, 0x2, &(0x7f0000000140)="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", 0x3, 0x0, 0x0, {0x3}}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x4d, &(0x7f0000000100)=""/224, &(0x7f0000000080)=0xe0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='f2fs_sync_fs\x00', r1}, 0x10) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000200)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000900000000000000ffffff7f85100000faffffff18200000", @ANYRES32, @ANYBLOB="000000c5030000005d0478a8466e8d3cbd003af223d51d24d90f71105ecb3ccd9da8989e01c53befc78ff46e188067ad67677536a551281d8187d56b34dd68d87f425cf3dedab65c9f1416439845a2777ebbeec8dcd7881c680a49f51fc84069ef28e611be80"], &(0x7f0000000300)='GPL\x00', 0xf7f5, 0x84, &(0x7f0000000340)=""/132, 0x40f00, 0x9, [], 0x0, 0x1b, r2, 0x8, &(0x7f0000000400)={0x49, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x9, 0x5, 0x575032df}, 0x10}, 0x78) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x4000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000540)={0x2a, 0x4, 0x0, {0x0, 0x68e, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 02:02:01 executing program 3: setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0xffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0x10, 0xe9, 0x4, {{0xa, 0x4, 0x0, 0x3e, 0x28, 0x65, 0x0, 0x81, 0x29, 0x0, @multicast2, @remote, {[@rr={0x7, 0x13, 0xd4, [@remote, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x400}}, 0x18) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x3}, 0xa) 02:02:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r1, &(0x7f00000020c0)={0x20, 0xfffffffffffffff5, r2, {0x370, 0x4, 0x1, 0x9}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='io_uring_queue_async_work\x00'}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000580)=0x80) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x379, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x7407, &(0x7f0000000180)={0x0, 0x3c91, 0x20, 0x0, 0xa5, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000200)) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=0xffffffffffffffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x890c, 0x0) 02:02:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x1, 0x7, 0x8}}, 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) 02:02:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) bind$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x4, 0x20, 0x2, "d4332fe52ce5e4bb4a0f93b38e4bce70eb838f92648c41dde59daa153916f2fada488fbf1c011ff3d4d5438dfc5bd2606595de2cbf4267a5c3279970c46269", 0x3c}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f0000000000)={'tunl0\x00', 0x0}) 02:02:01 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) socket(0x2c, 0x4, 0x7f) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af6, &(0x7f0000000080)={0x0, 0xb75b, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) 02:02:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'gretap0\x00', r1, 0x80, 0x80, 0xfb, 0x0, {{0x1f, 0x4, 0x0, 0x9, 0x7c, 0x64, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@rr={0x7, 0x1b, 0x40, [@private=0xa010100, @multicast1, @loopback, @remote, @loopback, @loopback]}, @timestamp={0x44, 0x28, 0xdc, 0x0, 0x1, [0x401, 0xc4, 0x37a, 0x0, 0x7039, 0x2, 0xc34c, 0x2, 0x0]}, @noop, @generic={0x82, 0x5, "548194"}, @rr={0x7, 0xf, 0x5a, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @lsrr={0x83, 0x3, 0x28}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xba, [@loopback]}]}}}}}) 02:02:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x15, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:02 executing program 2: r0 = userfaultfd(0x80000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x11, 0x7fff, 0x101, 0x8000, 0x210, 0x1, 0x7, [], 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001680)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)={0x6, 0x8f, 0x5, 0x0, 0x194, r2, 0x8000, [], r3, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x40) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in=@private}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) 02:02:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8001, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x6) 02:02:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$nfc_llcp(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x27, 0x0, 0x2, 0x4, 0xe0, 0x87, "d11bc62c6176b2e11e96ba9c4e76d5add7cd98f42b4821bf21555c66821a3a6248f771c2ed12ddba0c315371bf7386e28a635998d336560053bc6a9884daef", 0x8}, 0x60, &(0x7f0000000280)=[{&(0x7f0000000180)="76c7872339d70814f871d89a58e3f6489bd1453c6b6b2bf409c999c1748d22ebda671849b9165d1d7af5a53248d0563348a5d2d718d673c47733f0d744a7a552d2073ff9ccbe975f3757cee636510e30d232f4b8c88e07680818d53a7b112df31ae2e2dbb54e91a95390846124c38f7e7f425a199ed965eb0a855eae5333374b29fc061a2d6079276efea8dcf00e701cd4f8e3b7510c87d938ea0f9cc5ba2f9a250693c70bfd65cb7a158f9c7ec214534a32d1540a7a9345f98878d80cb99bf4a150986eda038ca3a4a6927b9152f38ddac39b165cecc4208c20556730ef58b2247735e1633e9370b7e04cf08cc07b8d8044a398e30219b7", 0xf8}], 0x1, &(0x7f00000002c0)={0x90, 0x11, 0x1, "e30e74f193f3d7ce7fde23d3f48e759da9210e04dc1d0d0ed4d415f50a2d64966cf21d2600ccac1b62e939a430cba22a46949275865be6e3ff866af9143e6381f30bac8c4945a794edace8c2b55dac1a392a8cd2077752e82b42260364bed1ce78126d8743745f66b00588d5d1bf3e62168e28e6f9b215149f8dae10"}, 0x90, 0x2000c000}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x20, 0x8000, 0x3f, 0x6, {{0xc, 0x4, 0x0, 0x3a, 0x30, 0x64, 0x0, 0xd4, 0x4, 0x0, @broadcast, @multicast2, {[@end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x5b, [@rand_addr=0x64010101, @empty, @broadcast, @multicast2, @private=0xa010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) accept$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x60) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x28}}, 0x10041) 02:02:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1d, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) getsockname(r0, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0xfffffffffffffd55) 02:02:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000000)='cubic\x00', 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 02:02:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x101) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x25, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:02 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000180)=0xfffffff8) r2 = socket(0x4c, 0x4, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x890c, 0x0) 02:02:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x3f82, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_int(r2, 0x21, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r5, 0x11, 0x80000}) 02:02:02 executing program 4: write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x4, 0xfffffff8, 0x9}}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@broadcast, @in6=@empty}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)=0xf4000000, 0x4) 02:02:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x28, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002280)={0x50, 0xffffffffffffffda, r4, {0x7, 0x21, 0x95, 0x22002a8, 0x200, 0xf7, 0xffffffdc, 0xb6}}, 0x50) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x10001, 0x4, 0x200040, 0x7}}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006a40)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000006b40)=0xe8) r8 = geteuid() statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r9, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000047c0)={0x2c0, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x31, 0x7f, '\x05g!Gg`\xae\xe3\x93\xc0\xdbV\b\xca\xc4\x95\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x9b\x8d[\xb8\xb4\xd4\xe0E|\x85+\x11\xea\xe3\x12\x19}\xbe2\x06E\x14'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r10, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x2c0) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x7fffffff, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '\x1b'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x4, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0x5, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r11, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) syz_fuse_handle_req(r3, &(0x7f0000002300)="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", 0x2000, &(0x7f0000007080)={&(0x7f0000004300)={0x50, 0x0, 0x2de, {0x7, 0x21, 0x4, 0x212001, 0x800, 0x8, 0x1f3, 0x6}}, &(0x7f0000004380)={0x18, 0x0, 0x6, {0x1000}}, &(0x7f00000043c0)={0x18, 0x0, 0x3f, {0x22}}, &(0x7f0000004400)={0x18, 0xffffffffffffffda, 0x7}, &(0x7f0000004440)={0x18, 0x0, 0x100, {0x5}}, &(0x7f0000004480)={0x28, 0xffffffffffffffda, 0xcd, {{0xfe0000000, 0xffffffffffffffc0}}}, &(0x7f00000044c0)={0x60, 0x0, 0x1, {{0xffffffffffffff01, 0x5, 0x6, 0xaca, 0x10, 0x5, 0x10001, 0x1}}}, &(0x7f0000004540)={0x18, 0x0, 0x6, {0x40}}, &(0x7f0000004580)=ANY=[@ANYBLOB="1500000072653000"], &(0x7f00000045c0)={0x20, 0xffffffffffffffda, 0x2335, {0x0, 0xc}}, &(0x7f0000004740)={0x78, 0x0, 0x101, {0x5, 0x81, 0x0, {0x2, 0x2, 0xfffffffffffffffa, 0x8000, 0x9d, 0x7fff, 0x0, 0x800, 0x2, 0x2000, 0xf420, 0x0, 0x0, 0x5, 0x1}}}, &(0x7f0000006800)={0x90, 0x0, 0x6, {0x2, 0x2, 0x8, 0x4, 0x0, 0x1, {0x1, 0x7, 0x2, 0x5, 0x2, 0xffffffffffffff80, 0x7ff, 0x0, 0x7, 0x1000, 0x3, 0x0, 0x0, 0x3, 0x200}}}, &(0x7f00000068c0)=ANY=[@ANYBLOB="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"], &(0x7f0000006b80)={0x3d8, 0xfffffffffffffffe, 0x9, [{{0x6, 0x0, 0xffffffffffff8001, 0x2, 0x9, 0x5, {0x101, 0x50, 0x0, 0x3, 0x7, 0x8, 0x80000000, 0x7ff, 0x200, 0xc000, 0x5, r5, 0x0, 0x3, 0xff}}, {0x6, 0x2ad8, 0x5, 0x0, 'gre0\x00'}}, {{0x3, 0x3, 0x0, 0x401, 0x10000, 0x7fffffff, {0x0, 0x2, 0xc66, 0xfa8, 0x2, 0x8, 0x3, 0x5d, 0x7, 0xa000, 0x7fff, r7, r6, 0xf35, 0x5cd}}, {0x4, 0x5, 0x5, 0x2a, 'gre0\x00'}}, {{0x1, 0x0, 0x9, 0x2, 0x6, 0x10001, {0x4, 0x1433800000000, 0xfffffffffffffff9, 0x1f, 0x4d, 0x400, 0x8e, 0x811, 0x2, 0x6000, 0x5, r8, r9, 0x400, 0xe756}}, {0x3, 0x2, 0xa, 0x2, '/dev/cuse\x00'}}, {{0x3, 0x1, 0x3, 0x0, 0x4, 0x9, {0x4, 0x8000, 0xe7, 0xffffffffffffff57, 0x2, 0x23e, 0xfe7, 0x5, 0x3f, 0x1000, 0xffffffff, r5, r6, 0x0, 0x6}}, {0x1, 0x4, 0x2, 0x5, '/#'}}, {{0x3, 0x0, 0x3, 0x10000, 0x6, 0x3, {0x4, 0x7fffffff, 0x100000001, 0x7, 0xfffffffffffffffa, 0xffffffff00000000, 0x2, 0xfffffffe, 0xe9cf, 0xa000, 0x1ff, r5, 0x0, 0x4094d7e, 0x3}}, {0x3, 0x0, 0xa, 0x800, '/dev/cuse\x00'}}, {{0x2, 0x1, 0x4ec7, 0x4a0, 0x8e0, 0x7, {0x2, 0x9, 0x4, 0xf5, 0x100, 0x5, 0x9, 0x800, 0x0, 0x0, 0x0, r5, r10, 0x8}}, {0x1, 0x6ca, 0x0, 0x7ff}}]}, &(0x7f0000006f80)={0xa0, 0x0, 0x7, {{0x0, 0x1, 0xfffffffffffffffa, 0x7, 0x8c44, 0x20, {0x3, 0xffff, 0x8e0000000, 0x4, 0xfd, 0x5, 0x6, 0x7, 0x9, 0xc000, 0x9, r5, r11, 0x1, 0x1}}, {0x0, 0x1}}}, &(0x7f0000007040)={0x20, 0xffffffffffffffda, 0xffffffff, {0x3f, 0x4, 0x8, 0x3}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'gre0\x00', 0x0}) 02:02:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ptrace$setsig(0x4203, 0x0, 0x83d, &(0x7f0000000000)={0x3a, 0xfbfffffa, 0x83}) getegid() ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xbc49b54cdcbfdf7d}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="070a28bd7000fbdbdf25050000000c000400050000000000000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB="0c00030080000000000000003400078008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="b6ea0cf8b9010000338b74a7352e9c47a42046237c99782f3be4c043cd9003158ab70c16028f56f7c8b8b3b9dc6555e50400ee52852461e6387ca85b0f5792e3987a83b8f4e0293f113ace374e73fa4d20cf190b335261f99fac6429901aad2deab76dec5149315a102e46e02c8e23b95c7c6a35fe586af1b407c54ace064cf43d32318b6c6da99ee20b62b8dad9d2df0c3409ee6d02fe5b586a37fb281a8b8b306275bc8c4f604f5c6e241fd56c28a370e4c4b231185498b612", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0c0006000100000000000000"], 0x80}, 0x1, 0x0, 0x0, 0xc000090}, 0x4000880) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000400)={0x2a4000000000000, 0x0, 0x1}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000004c0)=0x2, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) 02:02:02 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0)='gtp\x00', r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00800480000000070001009078ac1414aaac141417fe820fedac1414bbe000000116adde16a238ac1e0101440c954164010100000000060717c464010100ac1414300000000000000000e000000188029431e0ab1354942269da532f2dc260753691921eeb2a4ad363a1996777a691a0d0f62f2be7f38b443dac18e7d4d223f3f1c456909d73fc7f257c61a37a768a43b605e787c0c6b3deaa7efbeff86d6a369ad7a5575a6a13cc6daf3c477fe96dcf54e175dd796b51abff1c3e05c3a5cb29fa079944752331311fafe8f3a64e011f0eb235edce61669cc584514433db75"]}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r6 = syz_io_uring_setup(0x5b98, &(0x7f00000005c0)={0x0, 0xa573, 0x0, 0x3, 0x1d4, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000640)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000680)={0x0, 0x0, r6, 0x4}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fbdbdf250200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2080}, 0x20) accept$nfc_llcp(r0, 0x0, &(0x7f0000000200)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x5411, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1b646705}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000080) 02:02:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2d, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r1, 0x7}, 0x10) syz_io_uring_setup(0x3af9, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000140)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000080)=0x123) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x839, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0xfff, 0xe1, &(0x7f00000004c0)=""/225, 0x41000, 0x4, [], r3, 0x0, r5, 0x8, &(0x7f0000000600)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x2, 0x700000, 0x7}, 0x10}, 0x78) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380)=0x2, 0x4) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x44008011) 02:02:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x82000) connect$nfc_llcp(r1, &(0x7f0000000200)={0x27, 0x1, 0x0, 0x2, 0x55, 0x6, "686bbb095d28b399d85021a5e5a0052b67fa0dc903694db8ca6a92042853ffa0e9fc8276f83f8857f14b3d97b008c85531973c3d0bc4c5f6e839fc85b3f830", 0x37}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket(0x29, 0x6, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in=@private, @in6=@mcast2}}, {{}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) 02:02:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x6}, 0xa) read$FUSE(0xffffffffffffffff, &(0x7f00000025c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007380)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000007480)=0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000075c0)={'erspan0\x00', &(0x7f00000074c0)={'syztnl2\x00', r3, 0x8010, 0x8000, 0x5, 0xfb7, {{0x36, 0x4, 0x3, 0x13, 0xd8, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @local, {[@noop, @timestamp_addr={0x44, 0x2c, 0x5, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x1}, {@multicast2, 0x1}, {@loopback, 0x3f}, {@rand_addr=0x64010101, 0x3ff}, {@rand_addr=0x64010101, 0x1}]}, @rr={0x7, 0xb, 0x6d, [@multicast2, @remote]}, @noop, @ssrr={0x89, 0xb, 0x92, [@remote, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x16, 0x1, 0x6, [{@multicast1, 0x7b67}, {@private=0xa010101, 0x3d5}, {@multicast1, 0x7ff}, {@empty, 0x64ab}, {@local, 0x6}, {@loopback, 0x5}]}, @generic={0x86, 0x11, "32e6aae89142fa015439d8c6a73dd1"}, @cipso={0x86, 0x12, 0x0, [{0x2, 0xc, "98a6a2eeaf272657eed3"}]}, @cipso={0x86, 0x26, 0x3, [{0x7, 0xb, "130d3f59437b44ce99"}, {0x7, 0xc, "70a9d22294907a8025f2"}, {0x0, 0x7, "23e0cea61e"}, {0x7, 0x2}]}]}}}}}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r2, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) statx(0xffffffffffffffff, &(0x7f0000004600)='./file0\x00', 0x2000, 0x0, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004740)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000004840)=0xe8) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r6, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) read$FUSE(0xffffffffffffffff, &(0x7f0000004880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006a00)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000068c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000069c0)='./file0\x00', 0x4, 0x4000, 0x1}, 0x0) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r9, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) syz_io_uring_submit(0x0, 0x0, &(0x7f0000007080)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000006f40)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000007040)='./file0\x00', 0x10, 0x6000, 0x1}, 0x7fffffff) statx(0xffffffffffffffff, &(0x7f00000070c0)='./file0\x00', 0x2000, 0x20, &(0x7f0000007100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000100)="fbab6af2749db4fe46a6e6e3c0aa1521588c9acbd4cba82c415ba00097a3a379e26a9878618395d4aea3bf3eacfbfe8dbec5f6aed7e48190b5ed7bd7220e3fadc984bcc8e7c52e9d3af1dac5bc9d9a6a52faabd3e976c157a44e2e7d6dc7075a16876a939be74e9ea3f5aba20e58583360188ad819ef06916ab28eb3685ce839313e23564bfbdadac12354958df35528633b1ccf8a752a17343d599f22caca27c680a0026ee114bf3850f5767ffa8a00db111839584d70833109c51cba29981f7c4ced2c787baaa34305b6a96c0936c20aba3ed5665af76b4856b2f38d70267996697252a519bf549fa827cb454c9304919a7d100df9e1d2fb33bea8f4eaca0dc24f7ef95dc0a967f2e0c72a6d7b33c43612fd515948f49fc356272cd5a41b4e49b6d9457285d0abd647380f6880aa34afdce96376ea4840bfad11c3510ad1f32475e293f4d29ec9e9f2db45b319866221c0a2b59d920b09d03923dddcf55009911865131aa5003a626c272ba1c0e1ae17d707ee3e452b6693bfea3dbc28e1e68b787894019ac098cd58cfb6fa9272a172b581f1808c6b3fcc7f9eaa7bbd50fc449bee2f7f506483e6a8268e07d9d56a990ca3bed1588338d8a21d61366e04ab0f8cae0476879d6dd00c1ed4f9c17a1d762683cb99e09c8507e0779a3d2de488bf372c2f920fc5839e7b66bb6e567f3b8ef8c25687a2eae2ef2c03df801a2dd98116c58ffbe60cfb4cb965c5ed09217adb585655d6ea8bb30127c857b062423c53fb56c2f2d79c691abace45dbd9cf0ec0a0c10cf25cbc4e644331eb9791a206dae4da3aa6ef898f148c0fa8a44f476db253e0004322ea059ec1daaec2897c810e8cb21652519051b0b61de487f216a8952be339dfc2d14295026cbecf4539c419b04f6871d419da0953fe9639bab6a0ac82265079822a7585492ff2c43a403c262f7d68b7af29a630a7455a471628a2f7ef6ed7a640a709d2152594560e33ebf103a03fa620f7272d84452bb98ea264c49a64c7f47d1907205ec08730e2faac5b997dcec673ba5da95b75048e935548c4db06b6a4bc27fac0f81b8985397e45bb2ffb30379c612333e4a382da0a1a08ea994f1edd6c693d0412d620ee85299ec6c984ced0808eceb8b8d13460e7244cf692d0bd1de943e5c0ccad5cb50253657732f36625b1b05cf78c0e77372a9534a158f5e83487c184c2d23404926f5c09bc314c3ec1ed8adce565eb472af54db2940bdd0b5f47f154a7d7e3f388a2415f5f6f7156bfaf6ea889cd12d53f797ae9a00213c653ba14d9871b1650a00aaddb168f151b23174b1467608ee20b4a9d61fcc8e41bfbc2b9fadf5484224f981fb9ba5c02887ca67b0a76f940c75438bd4ac2f9f1de84d1868ae617c202549b752edc3c2f6662b415e75fef14bb1aa2846d61dc8bfe5b32b387dd4705f1c2de8f99e4b20b860709400da2e78722625aa317525fedcc89bbd53ac55046d9f1deb52a95989ec6a67ad93a4a23e6d0e169a29fc549941daf6c0695af2f530e624570e38323c162cde26ce26027871cb2353de25d39887b090f94a088fa6c8e916403164a67e7f0ce40820e3e2897220eb4e93862128622294ca08c03aebd9caa6c32a1aeebcecfe3fbb10b0e761dbfcc57b10100207c63b27cfed3ecbab9a966e28055cd7a3dbab5dc49286697c3bb9fe877602ef790593e0d1ce9d5420f516c88ccabedafdf376d8c1369b1fd380c146640b5e59e96e24b4de8100ce3b70f0c8efcd7fb126263b39eac90dee4aefbbc0a3c22b0038ca8e88d2a9a308fe1d9f55adfaa9ddf4543ae85d8e32e22a24d07ea8187895289b1c6af121222c87bde319546941af29e94ed80e203bf0b7b0068934379c5f9609243bf81f9980aab16b2dc15fd3943175b9169caaff02534e1a1b78e34bf8ada661ff4dc2dda7bb00d55317af911586ac0176a33c7852c7d4699ac6deeb09a85c45c387e8720154885a73753b002e6e156a3b71b5844d4e31e83cfb829337ea8ebb927e071d8bbd2d3c120bd2933f487a11563d8f55ffa31f0d4fc1621adc262724176610cfb9b9c562bfcf234927a355147c8ea024fc0893947ba3b60b7cbbb3e7e5ee0bb4194f0c1af55c6a02457f45691b9f671de1fb8f78987779cd90fd8b51dc87833acf4354f056ae652b1c61eb0bf34a191fbbf71ed2392bcdb7382fa4105677fb838b345f2e527a43be48cda055742b9880b638fd016eee0098e0cd12365740bc81b810dcf9cdec220b6f460c24758a7e1e9adc6c5b9364a76dac541738d44f1a7f7f616f6c0315172e7ca10e16f60017f15629e1268f848cc58ff25f37ceda5f818cc066e254fd602864e602c3f3673c9ab06e52aee4ad618f9970490c3a94cca8898e34563f3b23c4cf4e075ce260941995fd88508ff021a62bc6f90b1aa0360efcb89c354d713608895b331b3c485a03492bdaa0b15355447189d5e9de754edb00d5d34a5795be94b859a9f3a2f6aef315e53bd196157c6c1a1baa6d28f8de22c97c81fd909dc451717c98d9267f0decb70afd5387ccb1449411f5cbddc1d76d40a10dd75ef3eaa8b52b968cd19d130b570c0595826dc8ada7a6e26534053c66cc3739c5e12c5db1bf07084c21105e9adc97ccadad8007223439c484f71f3d770cb86bb1f98e1e7561f08f0f8662820ca9a431ee141b8dac4707bd691827224479040cfa8af8d63bef79312745ef0650493cc6e0268c99bfce6e0a4ecc1300bd3561c97060448105b11f296fa8d593defbc7a84fdf22872c6265a006aaa53e4bd496d2db682f81473cd7d87fbe571898c6c11236fc2c5c3fb0e5a106a314ca5b57d1865e15ec5373b296f4015b84099c2942be0035ea38e67f47154c61ba142ab043115ddd68a8bbb4843cf09aa84ecdd5e889c1cf02a89087a890b04f473ec7968c7dbd12ab15d8e7e926725a7df6d375d445798b050f575469137c6aed413c4a63170af1fc601e1ced1ffe04ab231e524bbfc23d6ae9febf4a58e4c3a45b1dde3198234c02ab23942f35c7cf103ee97e2b9aa4ddc74546951600e57771f60d40f8c2945867d9d669f76d3194b0b7e87d66156bd89b81b708f1af9877f270be61163684dc4887f905ca928fd93a219b9991bd6cd507b22d69d8480dbeb35503406b23ab64e640f3cd608ca606b2a69465b5cd626ff4f511499c0f974a0dd8a5592db377346c44c115c3a9946ddfaf7ab9aa707afb876bfce40b933e96282c931a6d98fd4b69bef83486a3f7acf5c3aa283893915e0f1ed472ad9f5790d0b74b76721dd742f51b31fbcab3cd08994a87e3613d2f0067ff8762cdd304f7a95907a9591ead1f3999b7b10e5cb67309e067118634ad107e588a29b75a38f6d2cdec9ad449505ff1cc5b6b48138f53d1811228db851fe00d574f3599eb0399a68d7f9a7c02e9a8c86ffa722b92e2829a7d5d19469e54f22105818d4c6ca146c117742fb72c0688365d40ce014dd0b8c69d5d563dc3e414e37acc32ca4f89af06b13e53f553b6eaf38d141de8d7de7030cffeb7724947c6f29297fb8ad9a4cd39071fa862a0585b3630d48a8ac34576506e21d2201dda03ce1c032f200275a76e9ce4ec832ad0bf7c9d2d0c1d6b4c0439f7285ab2bd781fc286216de48d4eaceb31a8310b140bc0df465bac4b2d4daeb9698e0c98a919f3af34cc179cc166e1c2e4a25979bf430b53eba21e56cf3e88f135824a675954974820190ec64abe70873490ba32e40215b92a1d1e56b7f4e1459093d524a61853089253f40bf862c69299179e9698a7cb05d64f386c0c45818089f353efe58dfea82fc46395a80ddfc3c6c7b030419041624f126e9d4a614c69ef69cfdf79697172250c8b26f6017513d47b8eee510ff6b0070eeb68921ea9edf02f59eeaa318e303a123a2ede5f40664e00f78a16a1afa0c90c9f68cc6e5585118485bdde88e3ecfd39d63a233b47f70edf4818b4fa229bc711cdc1afdbafd90a268699efffe861a9f6f5541b2a0f694d37838e6e126e60b64391fa8a9401437fa75e0e6d7400b5f09fe7abe2675b776ec2bbc00fdd7648605a8fc1212f36914dae4cc9f4bada6750cfbdb1856556b5945fefe35494be4640549fa2cdf7b434215cc95dc43201248d9cbaadae58d5a8811705f2fbf90d6e3a8e1eb7d8f0fc111a8c88dbb5990fba8d390d0b60f3eeea88334c728cf4b7986fd0c2c05c1b17b03ae85de4ed620ea9fc68d9c8d641340a568a4e092fd95b3ddd9044aea659d2f635fd4703fe411d4e0f3c98d67c2bc5276d9a9b5cd842f9ee3abc4dcd0150e9cdb3575785df18d2b5224658fc0a033f6cf9313bb1b456cf412dbb4b140aebf1d544550d0bfcc9ddad57f9ec1d5b4ee251075e2bea50daf36585b7efcd228b5acf67f4b9dcc63504f108b1de6b9f57cd0853180a0e56c8ba319a8b1aaaf168c7c9a930e2d9aa13ab924b9f7a8236d89dc3862a3167aaa43777945cdd28fd999f5dedef129d5b64673467ae492ce16ae2f5dc6257ed599511577029e7d7fb4d124f269dafbf0cff98423a422ad01ecac3e0b37406481eb0fcfb6cab9fcc39f9f5247cd29aa5c7244ce7a16ea71d7ecc924c40e51b41e6f31b28b70acf91cdb786c4ae2baef41182e1fd91d19c4d017cec7c1dd483efabb956e38d37a8a52c0dac4f2ab17a80dac6fb19a2ae41e5cad124b0956397a916207b11d790d3936d567d1ed6b910a51b35c8e44db8d231258fffd640d3436e1bf389d4bc43527e3bf52ce280514cc61bdf1b2d87bfe6be1c72f1a8c05f7ed08e75e5de0d981a9ad9e4dcee9cd8d5d8974aa5b77b70b54de6395fc698e159a7c3ccaf62b419511a6dd6a197ea0cb411678315d16e89a0f8430cf2dc95616d80bfb9d51d87f9a8d3b0f2ae529d3a60c5516a4b01e767d5ca4f56c47101e25dbf9c7337f89cba034c0f555c019f004dfaf2f9284dbb1a6d252190af89745cb5ef4a856a8d3c410175153300b3991a32ef73f827a8c571b87dfa936017ebb41eaaed2ef11c8bb089754e0d8e06f8a6a04978bb73d42c8a3309990ae8347277340785926f5afa756eae00d2915fa8f348750b24da778ab169b9e49160c39924c2408e767396749257888b088635d397e741bf293189115529dea9f11c9a7d1bae151915cd45e9c58cf81f0630a50017e55de9513b18245694249e1951d62fc89a9a3f568bd362b684c029d81ea42ba5ed56619179f76c9036ac695037a8e615f714fc5af8ab995e56d3839dcc5ac15f4e33b5c4badddf5665482b8e0b017a9748c78e1b9be59d0202d73317106db1f4bbf7c348158388074c4a249d18d22bc077e8af2a60bcaa98336abec0ee8d6896fa1153a1b9d23b857df2dff828ed25f0f79c74954f97d2ad59b3cb1cd286a58b732baa75712b6ea680a83001ee418afefecefa75b6e08fbc467cf38e2f55170d1d0b2bc27a10c9a192ed6a932ed244b4353f78264d91725a4327616b660eff3818e3c36064056810df58f57774940a6777930b060cbec0b9fa45dc5630374be7ac88ec042f7fe43bbb47d933c6d61897c10b7e646302a8f7f9f17b1b28288f307da5c0084ad98c44f7ba4029be5f877f13f949fb76264acf1e62919632b80a32dc02e40788706b701c734675469cba302fccb99b92b875f9e14f3d086c97ea407fe00233c31756424fe91082eda95f1bac7fc472bac9acd921ba20c62502eedfe1df7bc50bdf465b908667b19d83fed617b9db28cf41dbd4592ee57e5ab62786b65906cfa736ffb877a90a9f8de479034b0faed27e0de571f29ffd9c038d41c8f9f1b822b371faecd1781da307a3b1dcfc5780865fb651cb16a8106b56c7ec87a3b9279fcf03033ac84dcac17341b31de30612b48cefb5f1962d56838e7d4aaaa0e05e7eea293903c38350c49aa2ae8fef322b4b6f29e542d9bc2a6a936fc9511ccc2058dbfdb412a1de92dbdeb14d51710c1c339ecf6bd3cd82b2c65f81f76eb0c3127b74977b749db853ae20afd3a847f518a15d7245e8682b79772a46b49f8e091de4a3b71f1a1e8f588ede8c6074daaf369e1735cdeb1269c12f37095f3c620e113e6a1769d3858b0a587f1b18d5f4ee3a6460953d9d2f2414341c6ed34d19cd7e86069e98311c84bce07fc55d605e346492a53449028faab02b0d4fe9250b1e57b466061521bc173d066e2f5db9a1992c28ef5e0a3e478048fc20703abbee40094a688b3bcfcdf6a039587cb8e424284e773791b06cee935a9d5828dd26398d8b83dfeb864699c62f44d5097c3969ab66055f79e58f70b7117029a1bfbb8b0af4956c28db7830445f593ce8240e8084e27dea5e48074a1339f8eacdf96635446c803906d04b3cc2fa276a59e96ef1bbd92f3a455175ba7a1e93d57c97803133f9481141adf130316f405d42ee75ab0c7d80e75cbf091b999a70b76dccde1a9ab78167937ac59552837f8ebe886325bc099764b4e6784617214d10795df4e8d8e5c2e4cc054a0065996ac0c6aef309c369114e8c888980499d19885a15dd50607837a9fb7698fb903d9dd45c5b85a4cf81027e02df36ebeced62195d0f4f991d5e280825a9aab4bf41d6702f464265b978c88c346f94fea364faff70036f3d2ae7e5be274a3815f922d881c12c1835d86ff991b56d78d6876232d216c2662b21ce19775a66b7078e5a1913db7eac131b91545bbdf3f22040afb611296fc7b7b814a180fd89104504e4bd3aadebec6c57f8e97fef087668835678a4b5048a5f502ac348734915090b3ea94673fc86b25c8f6872069477bd6a9c02a01693fb31cb55498eab7f60e7ae75793204bf3dea36ce4640d37748484828e2f1762d392648278e3ed029743099b541fcf421a5e9f18a43352aa47d7589ecc3a185663d0c27b80cd86d96a718d8d86ba5e8cee08c96fe8f6d77d69902bccf64a72388cd93b60dfb29d7d664c1f6456c8d2233042dd381bebd45b2d8ced8e35e45537c500fe44f7f5724758c19bb93e4b05cd061a3a1cd9d29f739d9e2c62420287af637368d8cc5ffa6e72990139dc0622fd063ff475aad778198be47408a8a894e975cfc2c65f9df878db1e8c08a0832ca0d93f0062f4c43315a77a39fa24ce607d41569f7dbd8d50635a24c97d82b7210fe7e25b5558a3d3e02c9dc1a8b584af63f8781b6f1eb914d8ec4cc1cb3d8ead415247024393f97d6a2b98421a760473b6af47246b7075d211eb41b427f833ceae52ef50f6751c38055e3fe4f3d9abe847462d9e349ab84e32be4aee4ca3a069ffb013989b8af699766b240b3598fd962c6e98b34186612e83d7beb962c5e232f86be799d5d62b000501c7be33355d5db171bed03a6668ac28fb33e6843b424e456762368f59e0befadf5c5a6d51c4ec62a30c21bd967989090257a1063f87c83f09af6c78ffac8deedc3067d75a72d616f79814d7f62d3213c5d6d89270ab9df910d1664e4e23e3f2c8c654dbb897846394abee7fbed738d797060c678241e022009fdd9e17d8e428f1c39aecaaa42347719aff3dedcd4a3e50a482623af33b9a252a3230b4da9853fbf056bc2c5025aabccec84d5ba3d20e6f7be78dee20e2317d74c7b3036f66597873761bb24383165347f2fd2bfd50ca55eff2ce8741ebb0b26bf594bbbb2195ae94f4ae77a50aa8b3cdc9ec3374ad9084e50b62c9b8498a0a110598a59399a2085c404792dc44068bcf6a11b8c42d98490b63135205a0771011d6756db913f30053d2b2bf5398b1162addb75ddfb9286c6deae127b051db6b6c7c09b46ef7f2992e239851b2c0541845104c2a9d2af33afb94bd9f2d950658d5d130c2ca885f9fb3650e76c6e263f90e165e44c06a3bb363809327bd658a7ecfc7c7515d4ad575c4694f6909f044966977a9fe114756c1f2fc77f2cca12a86660faa1466e7d523c5ad2b0bcfddb169e7f092cdad53737187f8f64059f1fee9bd30bd118fb97989a8750b5b4f9d24881cf2844153d2c07d41f1f9d3d3526bf9af9d4aa1fedd7c671697a85337a5e429cdda144dd0930de16f5f323d24e65defb5115de6b1dfd828c70082673c6ff8d22f7d750e77a484e4bc84397a608a96f5dcc6e02df1c98cd72dff3cbf3b4ce6a5ae45712dbbebd13eeea07653285249c5aec668aef656244c77a383debedcbf741ead026be2f2ceb15290e87b84aa2b3bb21ae6772ba22cbaf92fca1bfcdf06c4290f38986ef384938537a050c40b4ac5309e6f3e02bb49980ed0d157142008979f8d5e41db674d2c17caa8d63249f9f302e277568bff238629c957e9c9e399c39b3e06d74679acabfc581ed6a9c8ed82d0363eb5b19f1b3ac663b08ec4bd85aad73cee944a6750809610f84c3c729ec365bb095d257bc383182d9b9df71ac405f9ec8a18eb3d2e21ea79d19c8ed1cb0e5cfd8feee5248ffe382c8b8262cea32bb8026d00b8bf4f530f54eea24a6eed6d99e380e474d11cf85bd8367dfe77dedde8d9f1dd7ebb1e7bcafc867daaecff529b42012d4f519a65329c171b5ed006168e9bfadd5b86db0a58da6c3b2748e7d179b752950585fa2af29923c5bf8a36fba5c3d3aba5c3eb371e0d82cfbc74ef179b9e7cf1ab62f3d86538f6f3e8762175a3e8fb4ff82a27b782eff882a8ef8b7413a941cd38cd007b50b01b5b9686623e044e0d15807f3a1f1be769857fd03b6e94cb00d160a5185f100acee4b90cc2fb982e7aff1fec537fba5a8a6ef34f3b54729f8d4cde20dc14e9e57a013c8008073a0eb91aa47c3cb6808f1f683f22a12b15a300f0ffc060f4cf1584a079403bb2ffeecb3c41599616f72f6de57361b8605c7514fdb93249f7c91bb03d406ef6095f1e24d3b7344f5de954ab09d069718d7a327af0bafa233513734fbe238f16cc2daf90d1c15d3309c464d93c02bbbfbc28ec81abbc34afa20ada41a9ab201a164eefc5ca3a8a6ab6af2c148450558012c186f1c474319a19365accbd1ba3199d5d0dcc38dd7ca0e178dc8c1e46323bcf3b0c96f2a51d769f5a05ceb65e6864aa21151524bf077f520c392b9f05c2c21459eac638b7ac3a344ee50366648595647dcd636fc4e4389e97b15a93ef03d2f29a086d7cbb698561508cb19e8efbe6dbe2d0e168b32c4df3de92bcac4b36740beab264451ac8026680d779e84bd8e53c691b7b4769ac6c5c4cedec2d6966c20be93ea47cdc5d945c7aa8be31a2f90b909d4b095e640ab2df08c168edafde315cc5687b4a4f7bb8678b85f1a324956f6a7a054b662de91c0daee40fde90ee9d72cabc9e76f5505b6c3650e73c0ba6e677be95ec3a6b0b87bff7f97c8c18988db4f9cfd4399c5682c58ee5a913fb2e3368ecb3636f8093ad6516bdd877aa1af6b4e05e3a1b8a77e2d27e8ff7eaee4d49ca6a35e9f2798028cf79c741f6ff4539dd6174ab1baaba3272ec2fffea2a3cbd68d82c966bfba3e45841d0b4bfda549d3003fabe0ed1b8bc9ed78da54309117975db955766a7e3200851480e5a8e1a6ff985239e1936b4a79da3faed5332ad75795af7c7e5c455e71e4de95df8b887477a076aecdbec820c7d671ad2a53a2b625b3a633dc3692fdd4eb60416b180de4e7d302a98e87e401e9bc582c3a56eb8e66c6a7e831fc68c3138f6abee31c5c5c1840e7af64b268dddeb233385891ecca19d6195f9e0cf8b67539ca3365a9dc30743edd392a66cb40350daa736bcfa0ea2ecd21da38b6eebb46c193aef7a7c6cbcae9b67a31e6aa3c8c0d8667cfb06c0e723637030fc78bd81a63757ccfaa5ae0971b6ece1a626282333a9bb71ec171a5c88cc273fe5a51470e19e00b34f40ab4f7feec9f10b9d96bd1bb30d8ed063f4f2fb3ecf339b8b7299347a63aceb7645e0b4817288fd831e827b0e20ff6dc2f2c5900f9b475d21b607b3d7cf9af315f5c1ce64202f7f91ff8a3603504fc27d4eebc5476adab1bf2521a32ec2aec1a90c1efc63a8e0f92dee902dda68a3a5ac67b9304e11924c14cb34fd2e812e0edbe3c3d01ecfc39ee7c8f2b1106f93390aab022a9f89c160f793ea29d91061eef0e1d78adb0512d53d63e8e1fb5ad5d854a953a48ef731f7b01f940c124395e69b2c6a67554e67f206275340f20bdd130febd736b4e6cdd00787b177a4e7450ce9a433b1e002e6264cd42ab7f71e93d7a08c26c807a3274cb2ade71a2c25488985a4ce5557a161db3c28d9ffc64813af7e73143b325139729e4afbd3d88b8439eb59a8d25a79ebbd136d4517c4724e9a39bf0f4bea6b64017dacedfc424f16feb2fcd02705bab6f1175328f3e2d6b9c52fd35d9afbfa8c2b237557cb06b8102a161b7fefc00679ac697bc4f831d306b8d22282f992bb0f87dc4df7e176e9c232c01b603f53ec2bc900bb69d8f81bd561bb505c1dc7e6b488f4cfe73f9a6d674cc0512509958c64aee204105144abb59b1a523c12ee19c97c041ab29fe6120b56b6a22784ce26dfb038cfbb5a8ed5e8039e8198d5e5d96d2d7e385f49ebe03da2d9d070e5b1aa32f45de473d5aa2a7163d88a419547d9e2b6b2b327c75b2d79319aa7cf139b9a499401b5fec2c163e242982791a173fb2ccfc7f194f339b5c2901c3b22afa2d56fa415670ad33a55878bfad27d0c438a75647b94147c6f906df4494231c638cc118a2aa1df96b8b33c2e180f859d4e449f5b068835c6f49625f9707e524c63ec0529c1e0900ad99588731f0816bdbff3a1051e03b03f5cddbf7cfdb3d7046b1ab893a65fc805017556852585ac6fda9b4a4c7f086f40a7920eea577d1fc03df66545877e05ea90ea2fe59aac176d74703e24d303a73f14f36d5fa7384ea0bbce12f76a94488c0889b8b8bd70d275956172f47c6dcce9dbbde3c4e66151b7a5a97755f670e96fb97f1a474ddbfb0f6f730a2a87480e4ce50c196145b0151c9b5aae201a9b9423213106cddaee4b5d0acd91fab396c21105574a7d6e038ee7efdbed33f61a3187ff17c9d17cf371d69670a5772bc7dfafbb7f62712f2d845d0f2ab1c238a54c0c9b02670d806f0a38695f18c33812bb0bbc003dc2d2e764dd3eaf20db83df87fb0f0846a46d85ba849e9d5ea473bcb469965ece73cdc8db7037abb0b573631a74b1aa78f83c0dffc26fcf1c363f935c0b5518740982f5acb229908d629fa7fc511761583ebdb4171abac92189bbdf4a0ca2a01546011a9cd773ee1ca7a098fcd9121aab40822932e15cca56ef456276be76cabc79d41eaf2662c02b73b0e646c404b11f9f15437f199d59326b24ddb084dc21cbdb9973e4919cd421ed2e989a52f79ba734b382c3033565d6b23bcc3b7a362d87bd6f01721a84ea7ec9ca6ff051e6ee5ae8ff06d874c05d096c6c56641c683cb9a2a1ecd92380c864035b9e9c8ada2ce23bfb70c3cc36f1e06475606ca839153402b55083a6d2b3f41a7937d47c6f9e43d5e96489d8d86b7fe7cc18d3c1b1d19962df90345d5a0d42740b7e8feebe1deac9464bd51ffbad0f2b4987e08a051e9ec13b6dd3388e805a46d71e2915bf92468d180793fbf6c9ec93ead56ef0e83d5bc9bd10017b07c0f2e36a4be924a12b14354e17d75bca15f33baa50d758b6d296a9f45a2d9efc145dfc4e0d6778", 0x2000, &(0x7f0000007300)={&(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7, 0x408010, 0x5, 0xaa, 0x4, 0x5}}, &(0x7f0000002100)={0x18, 0x0, 0x8, {0xdb75}}, &(0x7f0000002140)={0x18, 0x0, 0x2, {0x10000}}, &(0x7f0000002180)={0x18, 0x0, 0x5, {0x9}}, &(0x7f00000021c0)={0x18, 0x0, 0x9, {0x7}}, &(0x7f0000002200)={0x28, 0x24, 0x0, {{0x1f, 0x5}}}, &(0x7f0000002240)={0x60, 0x0, 0x8, {{0x4, 0x7619, 0x3, 0x7, 0xd12, 0xff, 0x3ff, 0x9}}}, &(0x7f00000022c0)={0x18, 0xfffffffffffffff5, 0x6, {0xfff}}, &(0x7f0000007600)=ANY=[@ANYBLOB="130000000000000008005600000000002b265c00"], &(0x7f0000002340)={0x20, 0xfffffffffffffffe, 0xfffffffffffffffc, {0x0, 0x2}}, &(0x7f0000002380)={0x78, 0x0, 0x3, {0x0, 0x2, 0x0, {0x0, 0x9, 0xffff, 0x800, 0x7a, 0x1625, 0x101, 0xffffff00, 0x80000001, 0x1000, 0x43b, 0xffffffffffffffff, 0xee01, 0xffffffff, 0x2}}}, &(0x7f0000002400)={0x90, 0x0, 0x7f, {0x1, 0x3, 0x5b09, 0x1, 0x20, 0x80000000, {0x0, 0x1, 0xe4, 0xa9b, 0x8, 0x69, 0x80000001, 0x65cf, 0x8001, 0x4000, 0x0, 0xee01, 0xffffffffffffffff, 0x6}}}, &(0x7f00000024c0)={0xe0, 0x0, 0xb13a, [{0x1, 0x96, 0x0, 0x40}, {0x2, 0x81, 0x8, 0x2, 'syztnl1\x00'}, {0x3, 0x2, 0x8, 0xffffffc1, 'syztnl1\x00'}, {0x4, 0x2, 0x3, 0x5, '.[\\'}, {0x4, 0xe2b9, 0x4, 0xffffb952, '&{-#'}, {0x0, 0xfff, 0x8, 0x17eb, 'syztnl1\x00'}, {0x2, 0x101, 0x0, 0x9e06}]}, &(0x7f0000006a40)={0x500, 0x0, 0x80, [{{0x0, 0x3, 0x225, 0x10001, 0x9, 0xfffff912, {0x4, 0x0, 0x59, 0x1, 0xd3a, 0x3, 0x6c18, 0x2, 0x0, 0x1000, 0x1, r1, r2, 0x8, 0x5}}, {0x5, 0x1, 0x0, 0x8000}}, {{0x3, 0x0, 0x2, 0x2, 0x6, 0x5, {0x4, 0x2e, 0x8, 0x3, 0x6, 0x401, 0x51, 0x3, 0x6, 0x2000, 0x8, 0x0, 0xee00, 0x0, 0x20}}, {0x6, 0x401, 0x8, 0x5, 'syztnl1\x00'}}, {{0x6, 0x2, 0xfffffffffffffff8, 0x100000001, 0x6, 0x8, {0x4, 0x400, 0x1, 0x4, 0xfffffffffffff2f4, 0x7fffffff, 0x6cf7896c, 0x8, 0x0, 0xa000, 0x10001, r4, 0x0, 0x57}}, {0x6, 0x7, 0x0, 0x8}}, {{0x0, 0x2, 0x0, 0x4000000000000000, 0x200, 0x3, {0x1, 0x3ff, 0xa, 0xffffffffffffffff, 0x800, 0xff, 0x3, 0x9, 0x20, 0x1000, 0x979, 0xee00, 0xee00, 0x1, 0x3}}, {0x4, 0x2, 0x8, 0x8, 'syztnl1\x00'}}, {{0x3, 0x0, 0x4, 0x401, 0x0, 0x9, {0x5, 0x8, 0x0, 0x100, 0x8001, 0xffffffffffffffff, 0x100, 0x988, 0xfffffffc, 0x8000, 0x8bf8, r5, 0xee00, 0xc8c3, 0x4}}, {0x4, 0x1, 0x8, 0xfffffffb, 'syztnl1\x00'}}, {{0x0, 0x1, 0x5, 0x2, 0x7f, 0xfa6, {0x6, 0x1, 0x8000, 0x8, 0x5, 0x5b7719c0, 0x99b, 0x401, 0x7, 0x8000, 0xffffffff, 0xee00, r6, 0x6, 0x401}}, {0x1, 0x6bfc, 0x1, 0x0, '*'}}, {{0x5, 0x3, 0x623, 0x7fffffff, 0x80000000, 0x1, {0x6, 0x8000, 0x1f, 0x7fffffff, 0x9, 0xff, 0xffffffff, 0x20, 0xffff0001, 0x2000, 0x5, r7, r8, 0xe6b, 0x3}}, {0x4, 0xa00000, 0x1, 0x2, '\\'}}, {{0x2, 0x2, 0x0, 0xfffffffffffffffb, 0x7fff, 0x1, {0x0, 0x10001, 0x1900, 0x5, 0x0, 0x3, 0xffff0000, 0x101, 0x8, 0xc000, 0x10001, 0xee00, r9, 0x6}}, {0x0, 0x0, 0x3, 0x5, '{]]'}}]}, &(0x7f0000007200)={0xa0, 0xfffffffffffffff5, 0x9, {{0x4, 0x0, 0x6273, 0x35cb, 0x10001, 0x1, {0x2, 0x8, 0x5, 0x6, 0x483, 0x5, 0x0, 0x101, 0x5, 0x4000, 0x9, r10, r11, 0x5, 0x4}}, {0x0, 0x7}}}, &(0x7f00000072c0)={0x20, 0x0, 0x9, {0x2c, 0x4, 0xffffffff, 0x3f}}}) 02:02:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x30, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000040)=0x6) 02:02:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00'}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64=r3, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000000000002900000000000000"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f0000000180)={0x18, 0x0, r3, {0x2}}, 0x18) pipe2(&(0x7f00000000c0), 0x4800) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) read$FUSE(r5, &(0x7f00000064c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r1, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r6, {0xc3f}}, 0x18) r7 = io_uring_setup(0x3684, &(0x7f0000000200)={0x0, 0xd9ac, 0x10, 0x1, 0x25a, 0x0, r1}) r8 = syz_io_uring_setup(0x241b, &(0x7f0000000280)={0x0, 0x5383, 0x10, 0x1, 0x2f8, 0x0, r7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_setup(0x2f97, &(0x7f00000024c0)={0x0, 0x66b9, 0x1, 0xfffffffd, 0xa7, 0x0, r8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0xe4}, 0xa) 02:02:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x1}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:02 executing program 3: ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0xd8) 02:02:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x134, 0x0, 0x100, 0x75d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff0d8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xedc5, @local, 0x80}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1000, @mcast2, 0x5}}}}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ed}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40001) 02:02:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xab, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, &(0x7f0000000000)=[@increfs_done, @release, @register_looper], 0xb1, 0x0, &(0x7f0000000180)="0d74b839d7c0b3736a4f0b2561f16111fe85e54f6fc76fa3e0de15f07ada07ba5fe6ecd46c63ad728015726100cfd87750bdfdca38286740db753046198c53a39c1a3e3ea9eede905154ff1f8709176e6f5bb2c580c01e2a9998814066717b4cde812bab4fc8c7ab173b79c06434e989be9f37f2e9922bfdaf8c05d66532c55c09064b117a26164ebd8939492859bb22d80f7bb6e98ae157c1889aaba6999564cca01e58940e5bee9cec0787f31cc97594"}) 02:02:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x18, 0x6, 0xfff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000000c0)=""/59, &(0x7f0000000100)=0x3b) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x35, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:02 executing program 3: syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./file0\x00', 0xbcb, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="a487f518668b9dd6663ca937c933497516", 0x11, 0xfff}, {&(0x7f00000000c0)="7fc63d6cd982a91c67d959161be640b9482359d97018c1e1be52f296c35235ff395c696d79b9e5ad3e082c9e4645caed4d726b687273b719b1b489f2f9edba42e18668ac952a5f8c230e88c4eea96ba774fee668ed779bf368496d797e4d96a4b1e99e0454727ca8efab389a3d89fbc807c803d7871a2eb28cfa2763af2d84613572c1999e92250f29f76e4569d2c471faecce5c70ae4432d24f15afd57f97", 0x9f}], 0x1c089, &(0x7f00000001c0)={[{'{@)*\x1a::'}, {}, {'}'}, {'$\xb6/){^$'}], [{@smackfsroot={'smackfsroot'}}, {@smackfsroot={'smackfsroot'}}, {@appraise_type='appraise_type=imasig'}, {@seclabel='seclabel'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, '[_:{}#+*},{'}}, {@fsname={'fsname'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':/&'}}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3d, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:02 executing program 1: r0 = fork() r1 = fork() syz_open_procfs$namespace(r1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x4208, r3) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000200)={0x1}) r4 = fork() syz_open_procfs$namespace(r4, 0x0) syz_open_procfs$namespace(r0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000180)) socket$inet_udplite(0x2, 0x2, 0x88) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000002280), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000000)) 02:02:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x30}, [@alu={0x7, 0x0, 0x1, 0x6, 0xa, 0xffffffffffffffff, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0xc6, &(0x7f0000000100)=""/198, 0x40f00, 0x2, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x9, 0x9, 0x40}, 0x10, 0x19bc3}, 0x78) 02:02:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = syz_io_uring_setup(0x5d61, &(0x7f0000000000)={0x0, 0x8c65, 0x4, 0x1, 0x265}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x496b, &(0x7f00000009c0)={0x0, 0xd949, 0x10, 0x1, 0x124, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000940), &(0x7f0000000a40)) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="dc030000", @ANYRES16=r4, @ANYBLOB="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"], 0x3dc}, 0x1, 0x0, 0x0, 0x90}, 0x4044090) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000980)={&(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x1, 0x0, 0x1, 0x2}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000740)="8ea0253f8f4f12e0e1dc28a3304dc45645603b0bd186abe71a", 0x19}, {&(0x7f0000000780)="ff09de9612fa9a8234e6c198c08a2b3e937a2ac6b2b77eb6dc1eeb2e8bf80a64e908a6efff567d9c108f834a4959fbb9613da5203423a74cc8f8fbaf587b18011589ec4d1c3356243e7c87f0b21f06bde572c690904afc6869368f141689d9bdaf", 0x61}, {&(0x7f0000000800)="49fd4f01a1fd90a238a667181861018678f58dc9e0e5ca126753fe451e951b092f3c4b3150541a425cef5becbd30a3ddddd2f35c5bc61de60b87e64ab91d9e264a5762875a3fc031685ab24b334661c2b0bfc165cd77549f3389167d8dce68ef2071e21106b28cda2d7f1a981e55dcf6c7b262dec50841f5ed78656da60b529e68f7782ede5a9b8749ce1670a77d8aa4adb97ee4dea4010c7bd07fa9bfc7fa8110e42f120f591bcc698937defa24ab8014865d464ae524a7c09fed2c76b472de2e5de11ae5d9c41e9e", 0xc9}], 0x3, &(0x7f0000000940)}, 0x0, 0x4000810}, 0x200) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r6}, 0x8) pipe2(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x77b}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4fe, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @alu={0x4, 0x0, 0x3, 0x4, 0x0, 0x6, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000b00)='GPL\x00', 0x22d, 0x95, &(0x7f0000000b40)=""/149, 0x0, 0x10, [], 0x0, 0x1b, r7, 0x8, &(0x7f0000000c40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0xc, 0x0, 0x4}, 0x10}, 0x78) 02:02:02 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x45, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x1, 0x6, {{0x16, 0x4, 0x3, 0x9, 0x58, 0x64, 0x0, 0x20, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0xb7, 0x3, 0xe, [{@local, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x79}, {@broadcast, 0x1}]}, @ra={0x94, 0x4}, @generic={0x89, 0x3, "ea"}, @rr={0x7, 0x13, 0x46, [@multicast2, @remote, @remote, @broadcast]}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) 02:02:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) pipe2(&(0x7f0000002640), 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) 02:02:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000140)={0x2}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) 02:02:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x24d9, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2, 0x20000a7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) r2 = syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:02:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4d, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 02:02:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000240)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000000)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x890c, 0x0) 02:02:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000000)=@raw=[@generic={0x8, 0x7, 0x0, 0xfe80, 0x7}, @generic={0x3, 0x8, 0xd, 0x1, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xead, 0x0, 0x0, 0x0, 0x1}, @generic={0x0, 0x6, 0x3, 0x7, 0x6}, @jmp={0x5, 0x0, 0x2, 0x0, 0x1, 0x100, 0x1d}, @exit, @ldst={0x1, 0x3, 0x0, 0x6, 0x1, 0x80, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x49}, @map={0x18, 0xb}], &(0x7f0000000080)='syzkaller\x00', 0xffff, 0xe0, &(0x7f0000000100)=""/224, 0x40f00, 0x1, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x4, 0x3, 0x1}, 0x10}, 0x78) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r1}, 0x10) 02:02:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0xa7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000100)) connect$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x4, 0xfa, 0x41, "189d6be523f2bbcf002afc2b1213c6b9ca0b9ad0c85b16ce3272442b7060293250483168618a605918ca6b4d372b2419d427db8afa4abed23c3a8f915bd1c1", 0x29}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:03 executing program 4: setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x40, 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048080}, 0x8000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x3f, 0x8, 0x1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x60, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) 02:02:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000000)={0x60, 0x0, 0x0, {{0xea5, 0x3, 0x6, 0x20, 0xb826, 0x3f, 0x3, 0x4}}}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)=[@register_looper, @dead_binder_done, @register_looper, @dead_binder_done, @exit_looper], 0x4b, 0x0, &(0x7f0000000100)="1920eda99660c1ec2f8bb9f0776a5f31f290337953168677fdad5ef17211ed9381777e463fc6572765e9e58e2ee1be562cf54c77d1d66f1f6a70069fee005776672ba9f39b78be4ff682e5"}) 02:02:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x61, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0xff) socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:03 executing program 4: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000008c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/198, 0xc6}, {&(0x7f0000000840)=""/96, 0x60}, {&(0x7f0000000200)=""/101, 0x65}], 0x3, 0x0, 0x5c}, 0x3) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="a79494a9", @ANYRES16=0x0, @ANYBLOB="00082abd7000ff0500"/30], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af5, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00', r4) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0xe) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r2}, 0x8) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r3}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0xc, &(0x7f00000005c0)=@raw=[@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x80}, @map={0x18, 0x6, 0x1, 0x0, r3}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000640)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x1, [], 0x0, 0x1b, r6, 0x8, &(0x7f00000006c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xa, 0x3, 0x8}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) statx(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000940)) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000800)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 02:02:03 executing program 2: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00', 0xffffffffffffffff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x84) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000040)=[{'TREBLE', @val={' \'', 'Synth', '\' '}}], 0x24) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x408, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_TID={0xc}]}, 0x20}}, 0x40000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="180000287561ba0000000000050000001800000000000100000000000100000795000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x14, [], 0x0, 0x1b, r4, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x4, 0x46, 0x9}, 0x10, 0xffffffffffffffff}, 0x78) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000540)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r5, r6, 0x0, r7}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x8903, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@loopback, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000000500)=0xe8) 02:02:03 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x122e, &(0x7f0000000540)={0x0, 0xbffc, 0x0, 0x1, 0x275, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00', r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x23c, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x218, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "68103bd649b7d96b5d76df0a7cbe734001be9d22994be10d9b97e7dce009"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "7008502ba47d12a5743e3bad9910623d8afc12035b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdd8}, @TIPC_NLA_NODE_ID={0xa1, 0x3, "ca482dc2c83c398ce9194a5e6834072cf61afe683fa8d40145be69760ed6fb054c6ccd092810689e82da401f860a5efbc17f43b99e019582e9baac8d0994d56b51d5ebf8d6580f5058fc8976e927ed0b55c6687be7cec4221174bfa89b0ae4f2e073bdc3416dca75ba14cc88494e3cecf6381bbdd77bc58d3f4c76ff1036c165111280195da375aefba7f201629e1f7f991848e81279d9ac3f37bf7a5e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "a8c82327f27f1d425c589677adc96464395f4b46eb6c2fb259ab71"}}, @TIPC_NLA_NODE_ID={0x90, 0x3, "6d3d0fe4611572696ccaf0fd8c17afae51d9554ba031738df29e97b83e7c671b39ef000dab0b9cd4af52e634e52242eafa1184bbbdf5108c1f799b603a1668d392a6fc89020e5e4f5f49dcce8d8d6a665347a7736d84bce32da1d1dfec58f0b16dd307e11fab68e99d3d6179fc623d3d3246b1c1e91988bc84455c7dd933a9f9eef29f56fbfc0699c068126d"}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8b1}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2001000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x7f}}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syztnl1\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'syztnl1\x00'}}]}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x64, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:03 executing program 3: r0 = fork() sched_rr_get_interval(r0, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) 02:02:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x678e, &(0x7f0000000000)={0x0, 0x17be, 0x4, 0x1, 0x4d}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = syz_mount_image$erofs(&(0x7f0000000100)='erofs\x00', &(0x7f0000000140)='./file0\x00', 0xebab, 0x5, &(0x7f0000000440)=[{&(0x7f0000000180)="52f28f887aab1682d1cb3f539dc53a9a3062a53d0d6eec3721121fef07731811f1f71f17582cd16f23509ac9434df0f47a58bef64cee679c43b0ff2a5403e4593eb10cb1267392ef156b3406f25729babf0b53ff9642fe294177f5d047a319c89b9bf2", 0x63, 0x7}, {&(0x7f0000000200)="7f67170e17eba42a90227c4864d6a7fd4707712b6e72ebdb18bf6a90d2fc8a6e3d90d15cbaeccd8899e67dbdb0b87eff087838", 0x33, 0x6db}, {&(0x7f0000000240)="699ba006e3508dcd07c2deaa6bda81dc7abe57cfb12e782394c3e5bd1e3e97693ac68d78dd3b21af818a146a073999eb49212d3fa60a68fa14c67e1c1a26e827b70ebb132fda00cec21d8a00537b6a1d344363f5bd029ea420b22545c1cac6ff92cb5720d9f4eaa65cae265f98cd84e388517bc2a4a9fa7f48266192fee1e3399eb7b8f16633ba8cd3f162e7b3a6b74860776822e5528ffbb1c6348903a6", 0x9e, 0x9}, {&(0x7f0000000300)="bdd8c12c31385ea056663b100b4c716f330ee45cdfa256b2bafdca2e", 0x1c, 0x3ff}, {&(0x7f0000000340)="692ec61757a631eccc6350c40587e303dafb4592fa5f04600e4178d16dc0e36e4cafdf4d418522428312e057ce47f9f69097bcc3ddf7bf485e065e8ee18cdfe4e9d8500f11765825daff8aeee30fe9eb39cbb21c0794f6240c7954ad16c8a026169bb23d64ef5444dbcbfcf59cb9607b21292fc5f78a02cae32304b815e9cc0c41ca2a0f03bedf952de911c1754da3585f9675e7b3c224621b61aa32b6e46fc4f27f5fd7ae222c3fdda63955c092126a6faa7c7fed52603de55096450e46be614560", 0xc2, 0x1}], 0x240000, &(0x7f00000004c0)={[{@acl='acl'}, {@nouser_xattr='nouser_xattr'}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_type={'subj_type'}}, {@appraise_type='appraise_type=imasig'}]}) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000540)='net_prio.ifpriomap\x00', 0x2, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r7 = syz_mount_image$fuse(&(0x7f0000000580)='fuse\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000600)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x10000}}, {@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x2200}}], [{@subj_user={'subj_user', 0x3d, '#\xfd%('}}, {@fowner_gt={'fowner>', 0xee01}}, {@fsname={'fsname', 0x3d, '/-^\xe5'}}]}}) syz_io_uring_submit(0x0, r1, &(0x7f00000007c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r2, r3, r4, r5, r6, r0, r7], 0x7}, 0x100) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:03 executing program 4: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000500)={0x0, 0xfffffffffffffffc, 0xa5, 0x9, @scatter={0x4, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/201, 0xc9}, {&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f0000000280)=""/92, 0x5c}]}, &(0x7f0000000340)="776863dcf4d1af798cee4a69f3bb47d30013cd3ec8d30ff87139e2993d1033c6a813b41ecd6c3aaabadd267599f61180ecbc87c109a201c8d51ee4f6329378bb9f95194ed7d54bc1163f4f4b58c938a1d36f06d5b4f546b18978673c12882660cb421e2efa841bd31ed30e7c9d1da12489dd9f7367778f2d96133abd648d2fad2edd9d4f01a6da7ef06fbf6ba5d4825d29d02cf8d5aaa05848096ae25c69619c70d409440c", &(0x7f0000000400)=""/163, 0x80000000, 0x22, 0x2, &(0x7f00000004c0)}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x130, 0x0, &(0x7f0000000840)=[@acquire_done={0x40106309, 0x1}, @acquire, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@flat=@handle={0x73682a85, 0x10b, 0x2}, @fda={0x66646185, 0x0, 0x2, 0x38}, @fda={0x66646185, 0x2}}, &(0x7f0000000640)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000006c0)={@flat=@handle={0x73682a85, 0x100a, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/21, 0x15, 0x1, 0xa}, @fda={0x66646185, 0x6, 0x2, 0x27}}, &(0x7f0000000740)={0x0, 0x18, 0x40}}, 0x40}, @request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000780)={@fda={0x66646185, 0x6, 0x2, 0xd}, @fda={0x66646185, 0x8, 0x2, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000800)={0x0, 0x20, 0x40}}}, @increfs={0x40046304, 0x3}, @increfs_done, @enter_looper], 0x3a, 0x0, &(0x7f0000000980)="5f688d39fd9918711d2b75cdd282724ca608a8abe5da28027be1bdd52ca82e7f17a9e7d7f9981fe96c62e54465ade395923af1c9316b829232a5"}) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) 02:02:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 02:02:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x74, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x891b, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x6395, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000000)=r1) 02:02:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 02:02:03 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0xa, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x6, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x8000000000195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0x8001, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r2, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) syz_mount_image$fuse(&(0x7f0000000080)='fuse\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x4002, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read'}}, {@max_read={'max_read', 0x3d, 0xffffffffffffffff}}, {@blksize={'blksize'}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}], [{@context={'context', 0x3d, 'sysadm_u'}}]}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000002c0)={0x10}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f0000000000)={'syztnl2\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f0000000040)=@raw=[@alu={0x7, 0x1, 0x5, 0xa, 0x7, 0x50, 0x4}, @alu={0x7, 0x1, 0x9, 0x0, 0x4, 0x0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x5e}, @generic={0x5, 0x1, 0x3, 0x3, 0xffffffff}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4b}], &(0x7f0000000080)='GPL\x00', 0x8, 0x54, &(0x7f00000000c0)=""/84, 0x41000, 0x5, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x5}, 0x10}, 0x78) 02:02:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x94, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x70ad, &(0x7f0000002040)={0x0, 0x9d12, 0x0, 0x2, 0x379, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000020c0)=0x0, &(0x7f0000002100)) syz_io_uring_submit(r4, r3, &(0x7f0000002280)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000002140), &(0x7f0000002240)='./file0\x00', 0x20, 0x1000}, 0x6) setsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f00000022c0)="da2b1c7238017dcc0a068ec6b568ad59768e4db74f07381027f2ae84a53574b45f1a015f5c00049b1140029e1d33757c1d66b39687", 0x35) read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x2020) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000002300), &(0x7f0000002340)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000002040)={r1}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f00000020c0)={r2}, 0x8) [ 2483.044601][T10515] fuse: Bad value for 'user_id' 02:02:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0xb1, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'gre0\x00', 0x0}) io_uring_setup(0x5389, &(0x7f0000000000)={0x0, 0xd29, 0x2, 0x1, 0x314}) 02:02:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@initdev, @in6=@private1}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) [ 2483.080696][T10523] fuse: Bad value for 'user_id' 02:02:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$tcp_congestion(r1, &(0x7f0000000000)='hybla\x00', 0x6) 02:02:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x400c0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000040)) 02:02:03 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x2}, {}, {}, {}, {}]}) 02:02:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0xea03, 0x4) 02:02:03 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x890c, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r4 = geteuid() write$FUSE_ATTR(r0, &(0x7f0000002080)={0x78, 0x0, r3, {0x0, 0x5, 0x0, {0x5, 0x100, 0x20, 0x7f, 0x4, 0xc61d, 0x200, 0xffffffff, 0x6, 0xa000, 0xb, r4, 0x0, 0x0, 0x9}}}, 0x78) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000002100), &(0x7f0000002140)=0x4) 02:02:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x38}], &(0x7f0000000200)='GPL\x00', 0x7, 0xaf, &(0x7f0000000240)=""/175, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x7, 0x7f, 0x5}, 0x10}, 0x78) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x5c, 0x0, &(0x7f0000001580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x1, 0x9}, @fda={0x66646185, 0x5, 0x0, 0x1e}, @fda={0x66646185, 0x8, 0x0, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x48}}, 0x1000}, @acquire, @increfs={0x40046304, 0x3}], 0xc3, 0x0, &(0x7f0000001600)="95394d7e61744c1a7ca15e7f5dd55255fbd163790d53007f4e4c5cf5079ff5bd52d82e1657e745cbbba112037d5c798137b7b7b8fe798404879deb987c4095e6a81fb16397c271ce189cdfab74d0377fc97dab148a3558ef293341e8ec13f4187a7bb2338bdaf5d1bed7044068c60920aad712fbaf93749ff0f2f7a3332ed933ef8e80abbb38aaa61f92f49ad5810c02f9adb90116378e7a495bd405f4ae28c7e60145049caf3d1d63aa8ab58b6348fd684f9acad8db28ca426b74ad4bcda8b5e754ea"}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r1, r3, 0x4, r4}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='fuse\x00', 0x200000, &(0x7f00000017c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@max_read={'max_read', 0x3d, 0x60b}}, {@allow_other='allow_other'}], [{@obj_type={'obj_type', 0x3d, 'syztnl1\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) syz_io_uring_setup(0x403af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa8, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x22}, 0x10) 02:02:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040), 0x0) 02:02:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x6, 0x4) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0xffff7fff) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x1da0, &(0x7f0000000200)={0x0, 0xde5d, 0x1, 0x3, 0x3a6, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r5, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x9) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x3, 0x400) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="9af80065390d2ebdabb235aaffd550e76cf84fad058f3a1f97add9d1839c65002aa356a81e326531b2df81d950bc00d4997354aec255cf63f7eac4e834accd080608701743da0da288485fac2285624f8c1d429ad879faed97d19e89ba2e5c6ec93fe9afb59fe3f4b6e135016f97b5051b89dedffd000000000000000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf250b00000008003c000800000008000600", @ANYRES32=0x0, @ANYBLOB="050033000000000005002a000100000005002e000000000005002e000000000008003b000100000005002d0001000000050029000000000005002e0001000000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x77df, &(0x7f0000000000)={0x0, 0x27bf, 0x2, 0x0, 0x384}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x3, 0x2004, @fd_index=0x5, 0x368, &(0x7f0000000140)="a89110660cf986bfbf52555a5a38022a36a910b1e787b788e1af7908c29e338368eac7d7cb84ccdfd3d2c56772d66b01b9913302f5a27c987a90cad0dbd1de7e504c138d53d9150a1acb0af900928499ba3594748b32b6de8ba93c971257b643b6ab15ce3822902e0df662fde8fb58a3c04110c32a560e0d00f525f5dcd45e3d5e1c", 0x82, 0x1f}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3}, {}, {}, {}, {}]}) 02:02:04 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, 0x0) 02:02:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f0000000000)={'erspan0\x00', 0x0}) 02:02:04 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="280000000400000000000000000000000400000000000000200000000000000000000000000000005fbddaaa61317b56f028ec64c552c276ba4c687cdcd9c9e735b30990110ab9b61e08c2d1351ceeccdab9f3801ba127f751539e37abbf552973e8fad92568fd96b60a6d39cad7a006e68c401da09f815fea900f30b3b6e0f62c0b5437de3f9f3af9c99d22df8bbea9a3f528d1ff7c9a46e0e935f01bcc0d8f3d5af189ba4d5f2720645f3566bdd0cbb4f9b96996aed542ab398f4bbd7f017780b1672704f83c79a02b665b895551175bd9d8e05ff3a8536d075fed"], 0x28) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x7fff}}, 0x18) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x20}}, 0x18) 02:02:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x1000000, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x5b, 0x9, 0x3, 0x2, 0x40, 0x5, 0x8e, 0x3, 0x6a, 0x1, 0x3f, 0x9, 0xf8, 0x8}, 0xe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 02:02:04 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0xffffff3e) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) 02:02:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x15}, {}, {}, {}, {}]}) 02:02:04 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), 0x4) 02:02:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x84, 0x0, &(0x7f0000000300)=[@increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x2}, @clear_death={0x400c630f, 0xffffffff}, @enter_looper, @reply_sg={0x40486312, {0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/89, 0x59, 0x2, 0x2e}, @flat=@binder={0x73622a85, 0x1}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}, 0x40}], 0x71, 0x0, &(0x7f0000000140)="b88e6fb6b3217fc66f7f4fd449fcf43e296e8b47c921d38cffb083924901c0e9d2d71adbe8b1dc1b51154569ac474be2b3a51269c3952ceee4d3b4ada7e481974f11f8f1e61794da57cea48b768ca9b7999d5c4d38ddc33a71a5fce0b9e3e9532c3c85edbfa7309efd7aba82848f6df7c4"}) r1 = socket(0x26, 0x4, 0x7) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000100), 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x54, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff7fff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x8004) 02:02:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x1, 0x8, 0x9, "2c0a45cf87532982b0f0330f81cd5e6063e3208f962e343e2ba6cfefcc082ddbdb0a8b8128dd424346892f0fd31871291feeacfb255a5f1e82064c99082a6a", 0x3e}, 0x60) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x1f, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000040)={r1, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3, 0x200) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000000c0)={r1, 0xffff}) 02:02:04 executing program 4: sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="ccd7d1a3aecad8ae01902fcb32ed95ba99397ee8d1e3e6669f673734233f48d462d2613bbc99f8a5cb3c71e85b76157a47d1d961cf5f7e7fc006c3a42e744c07f0b209d796575ca3a4db969b5a1896866ba3fd3d087130673e9ef733b815f9f2cb879a371783a4d3537d0ab106e007e382bfc18a1ee9f7e0bdaba35e69775f11c94d826f3205e779b3d9f3d0f71651f68d02f72769c8831a92b50fa14149b937a25d2acddaceb5d947d6a943dc0e479405448c985624e571643eabdc5b69f154c1858f0c1f64a83ba40738b226ab45ee0a8a4c54323a74d8cdc1ede6f1734d11e54db2b9b48db369dc", 0xe9, 0x8804, &(0x7f0000000140)={0x23, 0xe2}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x2, 0x1, 0x40, 0xfe, 0x2, 0x47, 0x4, 0x2, 0x20, 0x2, 0x3, 0x3f, 0x4}, 0xe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:04 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) 02:02:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1d}, {}, {}, {}, {}]}) 02:02:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) 02:02:04 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x7f, 0x0, 0xfff, 0x9}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000000)={'gretap0\x00', 0x0}) 02:02:04 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0xa3, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f0000000000)={'gre0\x00', 0x0}) 02:02:04 executing program 4: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5fb}, [@ldst={0x3, 0x1, 0x2, 0x0, 0x4, 0x20, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x9, 0x7, 0x0, 0x10, 0xffffffffffffffff}, @exit, @map={0x18, 0xa}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x71, &(0x7f0000000140)=""/113, 0x41000, 0x0, [], 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xb, 0xfff, 0x8001}, 0x10}, 0x78) 02:02:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25}, {}, {}, {}, {}]}) 02:02:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 02:02:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x5f51, &(0x7f0000000000)={0x0, 0xb0ac, 0x0, 0x0, 0x1b9}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r3, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x5ead, &(0x7f0000000180)={0x0, 0xe154, 0x8, 0x3, 0x1bb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x6, 0x0, @fd_index=0xa, 0x1, 0x0, 0x8}, 0x80000004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x28}, {}, {}, {}, {}]}) 02:02:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) 02:02:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r1}, 0x8) statx(r1, &(0x7f0000000200)='./file0\x00', 0x2000, 0x800, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000002400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other='allow_other'}], [{@subj_role={'subj_role', 0x3d, '#[-&]]&,*'}}, {@euid_lt={'euid<', r3}}]}}) write$FUSE_LK(r1, &(0x7f00000022c0)={0x28, 0x0, r2, {{0x4, 0x7}}}, 0x28) 02:02:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x2d}, {}, {}, {}, {}]}) 02:02:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0x80000000, 0x4) [ 2483.959598][T10654] fuse: Bad value for 'fd' [ 2483.990999][T10654] fuse: Bad value for 'fd' 02:02:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) 02:02:04 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000000)={0x0, 0x400, 0xffff, 0x5d8e62ae, 0x5, 0x4, 0x1dff, 0x9, 0x51, 0x5, 0x1, 0x7f}) socket(0xa, 0x5, 0x7fffffff) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340)='gtp\x00', r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0690ad6", @ANYRES16=r1, @ANYBLOB="000427bd7000ffdbdf2502000000080002000000000008000400ac14142c08000100", @ANYRES32=0x0, @ANYBLOB="08000400ac1e0001"], 0x34}, 0x1, 0x0, 0x0, 0x20000051}, 0x8454) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r3, &(0x7f00000004c0)={0x1f, @none}, 0xa) syz_io_uring_setup(0x48d8, &(0x7f0000000580)={0x0, 0x1978, 0x0, 0x0, 0xfffffffe}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r5, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000680)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_io_uring_setup(0x47e0, &(0x7f0000000180)={0x0, 0x20006fd4, 0x24, 0x1, 0xef}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000480), &(0x7f0000000240)=0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_submit(r2, r6, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r0, &(0x7f0000000280)={0xa0000011}, r7, 0x3, 0x0, 0xb45955c76948cf39}, 0x401) 02:02:04 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffffc5}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xd8, &(0x7f0000000300)={[{0x8d, 0x4e00, "e129afb5bf81e7d7c0ba8103c6ad4bb27ddfb81e6322dc77c34e791107b9d2c3031eb761d0fd8b10c0b6348dd112842f05e914cb913d2f9a4a17431fdb679c5d190605a9f7510f38dfb4caaacaa7604c179ae4a3bddaded284108e551086839e1272d93eabbd2ce21f67a240570816671c6bb8c548b127ce365c5bde8b571146c7537082bb9eaa3b9d180ef306"}, {0x3e, 0x4e00, "65636cc1091dca843ad97902ce67a8936fd18bd3d6b5366c901749a077bcaf84ad464979ce8135b655f20b91d72e7549bca7847a78ccb107beae422a6bc2"}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "94aa5ae7", {0x3, 0x0, 0x0, 0xff}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xd0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x890c, 0x0) 02:02:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6000080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8}]}, 0x40}}, 0x800) 02:02:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r0, 0x6}) 02:02:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x30}, {}, {}, {}, {}]}) 02:02:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0xfff, 0x8, 0x0, 0x200, 0x1, 0xffff, [], 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x40) setsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000180)="118d9c665bd0ae1bfe854a60306b5aab9f758c2c5f2380664c5324786ac405462f413357229da9fa656e86a8cd60ab46c9267335fc8e2a2da2c22233ec3f8992e090a480fa17cfb0c3c27559c0c316ec154c68587acdc0cf7d5677598103074ffde0072e6be2c7e9bf3320dca75b48d8f9305553138835888ab08cc37b68ee73f31e", 0x82) 02:02:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x34}, {}, {}, {}, {}]}) 02:02:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0xffffffffffffff3f) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002040)={0x10, 0xfffffffffffffffe, r1}, 0x10) 02:02:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x9, 0x0, 0x10000}) pipe2(&(0x7f0000000080), 0x84000) socket(0x1f, 0x2, 0x1ff) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)={0x0, r1}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) syz_io_uring_setup(0x327b, &(0x7f00000005c0)={0x0, 0xe5b8, 0x8, 0x2, 0x93}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000640)) r2 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x6, 0xc000) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000003c0)={0x20, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xfff, 0xe2, &(0x7f0000000180)=""/226, 0x40f00, 0x10, [], 0x0, 0x0, r0, 0x8, &(0x7f0000000280)={0x5, 0x6}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xc, 0x1, 0x8}, 0x10}, 0xcb) 02:02:04 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x35}, {}, {}, {}, {}]}) 02:02:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 02:02:04 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8a2, 0x400540) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000280)=0x80) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000002c0)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x1dd}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000240)=0x20, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000040)) [ 2484.414497][ T3700] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2484.774745][ T3700] usb 1-1: config index 0 descriptor too short (expected 65477, got 72) [ 2484.934718][ T3700] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2484.943754][ T3700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2484.953347][ T3700] usb 1-1: Product: syz [ 2484.957665][ T3700] usb 1-1: Manufacturer: syz [ 2484.962290][ T3700] usb 1-1: SerialNumber: syz [ 2485.006109][ T3700] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2485.574493][ T3700] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2486.415606][T10190] usb 1-1: USB disconnect, device number 85 [ 2486.604510][ T3700] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2486.611504][ T3700] ath9k_htc: Failed to initialize the device [ 2486.618294][T10190] usb 1-1: ath9k_htc: USB layer deinitialized [ 2487.184452][ T3700] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2487.544834][ T3700] usb 1-1: config index 0 descriptor too short (expected 65477, got 72) [ 2487.704976][ T3700] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2487.714447][ T3700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2487.722503][ T3700] usb 1-1: Product: syz [ 2487.726772][ T3700] usb 1-1: Manufacturer: syz [ 2487.731607][ T3700] usb 1-1: SerialNumber: syz [ 2487.774860][ T3700] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 02:02:08 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002040)={0x60, 0x0, r0, {{0x3, 0x5, 0x200, 0x6, 0xffffffffffffff3e, 0x9, 0x5}}}, 0x60) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x890c, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) 02:02:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0xa995, 0x4, 0x1, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x7, 0x3103) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x4, 0x7}) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000001c0)) 02:02:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3d}, {}, {}, {}, {}]}) 02:02:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 02:02:08 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x8902, 0x0) 02:02:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r2, 0xca4, 0x80000}) socket$inet_udplite(0x2, 0x2, 0x88) [ 2487.927136][ T8169] usb 1-1: USB disconnect, device number 86 [ 2487.947779][ T3700] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 2487.969152][ T8169] usb 1-1: ath9k_htc: USB layer deinitialized 02:02:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x45}, {}, {}, {}, {}]}) 02:02:08 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000180)={0x0, 0xfffffffd, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000040)={0x3}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) 02:02:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = socket(0x22, 0x1, 0x44c1) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x8000, 0xca, {{0xe, 0x4, 0x1, 0x3f, 0x38, 0x68, 0x0, 0x2, 0x4, 0x0, @local, @local, {[@cipso={0x86, 0x24, 0x2, [{0x1, 0x7, "c674f8ff21"}, {0x5, 0x5, "661699"}, {0x0, 0x12, "01f5e02d80b95fb1c56327cb207abed8"}]}]}}}}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0x6) 02:02:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="4ca2780000000040000000074b1600ec0065000007049078ac1414bbe00000018313520000000064010102ac1414bb00000000072b18ac14141ee0000001ac141415ffffffffe000000164010100ffffffe0000002ac14142fac1414bb8606a4b65eec44448b330000000000000fffac1e0101fffffeffac1414bb00000004ffffffff00000000ac1e010100000020e000000200009fee6401010100000b0b0a01010000000005444cf581ac1414aa000000ffac1414bbfffffe010000000000000001ac1414aa00000002ac1414bb00000724e000000100000200ffffffff00000083ac141440000000057f000001000001020100000000"]}) getsockname(r0, &(0x7f0000000180)=@ethernet={0x0, @local}, &(0x7f0000000200)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d}, {}, {}, {}, {}]}) 02:02:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001300)=@bpf_tracing={0x1a, 0xc, &(0x7f00000001c0)=@raw=[@alu={0x3, 0x1, 0x8, 0x4, 0x0, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x0, 0x0, 0x0, 0x50, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x50, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x8, 0x1, 0x4, 0x100, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1f}, @generic={0x9, 0x0, 0x6, 0x0, 0x1}, @alu={0x7, 0x1, 0x2, 0x7, 0x2, 0x4, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000240)='GPL\x00', 0x3, 0x1000, &(0x7f0000000280)=""/4096, 0x41000, 0x9, [], 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x0, 0x0, 0x1000}, 0x10, 0x2612b}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_ext={0x1c, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x27}, [@map={0x18, 0x4, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map={0x18, 0xb, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x3e}, @generic={0x0, 0x1, 0x8, 0x3ff, 0xffffc815}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, r3, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x4, 0xc3, 0x40}, 0x10, 0x19839, r4}, 0x78) 02:02:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x21, 0x4) r2 = socket(0x18, 0x2, 0x7) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) 02:02:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) syz_io_uring_setup(0x3e, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x3, 0x3, 0x7f}, 0x10) 02:02:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000180)={0x78, 0x0, 0x0, {0x3, 0x200, 0x0, {0x4, 0x2, 0x6a, 0xa29, 0x1, 0x7f, 0x9, 0xae194380, 0x8, 0xc000, 0x8, 0x0, 0xee01, 0x7, 0x75a5b7f9}}}, 0x78) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x2, 0x1ca, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000002c0)={r4, 0x8, 0xab5}) syz_mount_image$fuse(&(0x7f0000000300)='fuse\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x8e2821, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x9}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@!'}}]}}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = socket(0x1e, 0x4, 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa000}, 0x40001) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40090) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x3ff, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r2}, 0x8) r5 = fork() syz_open_procfs$namespace(r5, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000240)='ns/uts\x00') syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000200)={r6, 0x1, 0x401, 0x2, 0x7fffffff, 0x9, 0x20000, 0x0, 0x99, 0xa515, 0x80}) 02:02:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x60}, {}, {}, {}, {}]}) 02:02:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000100)="026850a1459643748f813c2544089e708e890957be051f9a7ef843d01c5713d83ae04c48a4b8e2c52371624549f8c1318c1672263082b5910aa6314c6c34af282f82ed7da43cde941fc76cd5ea04c24d85c6e6929dcffc5f98d76afc41830c816288c89999059348d9130896e825d7c36f35bb82542761047496200896bb127ba6eb3ba767094b0cd92e55f2cd6ee58a8ead4d20caac5b308a21df7f9627a8f55f26c028cf49d1c93626504536e1fda4debcff44b820e6dc20385600f80d57143670696b01d9ffd2b74987e72f392e467b67900ce13b9c1f5278d88cfdb63cb73ad42849ac732e75753bae00af181d2ca808", 0xf2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x9) 02:02:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$tcp_congestion(r1, &(0x7f0000000000)='vegas\x00', 0x6) 02:02:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000600)={0xffffffffffffffff}, 0x80000) bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x13}}, 0x20) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000340)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r1}, @ldst={0x2, 0x0, 0x1, 0xb, 0x2, 0xfffffffffffffff4}, @call={0x85, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400}, @map={0x18, 0x7, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0x6, 0x4, 0x8, 0xfffffffffffffffc, 0x8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x5c, &(0x7f0000000400)=""/92, 0x41000, 0x10, [], 0x0, 0x1b, r1, 0x8, &(0x7f0000000480)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xd, 0x4, 0x9}, 0x10}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @alu={0x7, 0x0, 0xb, 0x3, 0x8, 0xffffffffffffffe0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x7ff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0x2, 0x9, 0x4, 0x7f}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x40, &(0x7f0000000240)=""/64, 0x41000, 0x4, [], 0x0, 0x17, r3, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x6, 0xfffffffe, 0x4}, 0x10, 0x2b2f8, r4}, 0x78) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @none, 0x7}, 0xa) 02:02:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd4, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xb3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8086}, 0x1010) 02:02:09 executing program 1: statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400, 0x10, &(0x7f0000000480)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x9, 0x7, 0x34]}, &(0x7f0000000080)=0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b000140000000000", @ANYRES64=r4, @ANYBLOB='\x00'/108, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000000000002900000000000000"], 0xb0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x9000}) 02:02:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x61}, {}, {}, {}, {}]}) [ 2488.467692][T10827] ================================================================== [ 2488.475802][T10827] BUG: KCSAN: data-race in exit_signals / mm_update_next_owner [ 2488.483354][T10827] [ 2488.485670][T10827] write to 0xffff8880949ce02c of 4 bytes by task 10818 on cpu 1: [ 2488.493382][T10827] exit_signals+0x118/0x550 [ 2488.497892][T10827] do_exit+0x197/0x15e0 [ 2488.502047][T10827] do_group_exit+0x17d/0x180 [ 2488.506637][T10827] __do_sys_exit_group+0xb/0x10 [ 2488.512364][T10827] __se_sys_exit_group+0x5/0x10 [ 2488.517221][T10827] __x64_sys_exit_group+0x16/0x20 [ 2488.522246][T10827] do_syscall_64+0x39/0x80 [ 2488.526666][T10827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2488.532589][T10827] [ 2488.534914][T10827] read to 0xffff8880949ce02c of 4 bytes by task 10827 on cpu 0: [ 2488.542568][T10827] mm_update_next_owner+0x1d9/0x4b0 [ 2488.547802][T10827] exit_mm+0x33c/0x430 [ 2488.551902][T10827] do_exit+0x3fc/0x15e0 [ 2488.556122][T10827] do_group_exit+0xce/0x180 [ 2488.560637][T10827] get_signal+0xf93/0x1510 [ 2488.565072][T10827] arch_do_signal_or_restart+0x2a/0x270 [ 2488.570631][T10827] exit_to_user_mode_prepare+0x11a/0x1b0 [ 2488.576264][T10827] syscall_exit_to_user_mode+0x20/0x40 [ 2488.581732][T10827] do_syscall_64+0x45/0x80 [ 2488.586158][T10827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2488.592102][T10827] [ 2488.594422][T10827] Reported by Kernel Concurrency Sanitizer on: [ 2488.600567][T10827] CPU: 0 PID: 10827 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller #0 02:02:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000001480), &(0x7f00000014c0)=0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000001500)={0xfffb, 0x1, 0x5, 0x24}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000100)=""/101, 0x65}, {&(0x7f0000000180)=""/178, 0xb2}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/87, 0x57}, {&(0x7f00000012c0)=""/59, 0x3b}], 0x5, &(0x7f0000001380)=""/142, 0x8e}, 0x40002021) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001840)={0xe8, 0x0, &(0x7f00000016c0)=[@free_buffer, @increfs={0x40046304, 0x3}, @request_death, @acquire_done={0x40106309, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001540)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/11, 0xb, 0x2, 0x38}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000015c0)={0x0, 0x28, 0x40}}, 0x400}, @register_looper, @acquire_done={0x40106309, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001600)={@fda={0x66646185, 0x6, 0x2, 0x18}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x3, 0x0, 0x40}}, &(0x7f0000001680)={0x0, 0x20, 0x38}}, 0x400}], 0x5f, 0x0, &(0x7f00000017c0)="ea919f30460907fbd4de21be90f872e128420e383c34a0bfdc05602a34685ff09fa4e44486d8057cd26759038de6ff4cebc1a0f0a6c9ee99ac09faabc07dec7907558581479f6de2a07472fe06b9f6203f4cbf3b90d2b9df91d29d3005d8aa"}) 02:02:09 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, 0x0) [ 2488.610381][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2488.620466][T10827] ================================================================== 02:02:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x64}, {}, {}, {}, {}]}) 02:02:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x2}) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0x60, 0x40800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040)=""/221, &(0x7f0000000140)=0xdd) 02:02:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000004240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004300)={0x11, 0xd, &(0x7f0000004180)=ANY=[@ANYBLOB="850000007b000000183b000001000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000005000000ffffff181500000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000006451e98a00000003640001120d0000850000008500000018130000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='syzkaller\x00', 0x81, 0x3, &(0x7f0000004200)=""/3, 0x41000, 0x8, [], 0x0, 0x0, r3, 0x8, &(0x7f0000004280)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000042c0)={0x4, 0x4, 0x80000001, 0x6}, 0x10}, 0x78) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1, 0x34aa}}, 0x30) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, r5, {{0x20, 0x0, 0x1, r4}}}, 0x28) 02:02:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x2b, 0x1, 0x0, [0x0]}}, 0x29) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x6, 0x0, 0x3}}, 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x81, 0x7, {{0xd, 0x4, 0x3, 0x6, 0x34, 0x67, 0x0, 0x20, 0x29, 0x0, @private=0xa010101, @multicast2, {[@generic={0x89, 0x5, "728c7e"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xe5, [@broadcast, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast]}, @generic={0x94, 0x3, '\n'}]}}}}}) ptrace(0x4207, 0x0) 02:02:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000180)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r2}) 02:02:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x74}, {}, {}, {}, {}]}) 02:02:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) 02:02:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8903, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x80000, 0xfe64) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000000), 0x80000) 02:02:09 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x94}, {}, {}, {}, {}]}) 02:02:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x74}, {}, {}, {}, {}]}) 02:02:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000000)={'gretap0\x00', 0x0}) 02:02:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x8001) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000002440)={0x258, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2905}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2bb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x955}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1066}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b798abe067d76851dc2ccbf240dc3d8df89b227b0e9877efe3df34a8f153f3ec"}}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffd73}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1af}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffe01}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xef}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x8000}, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r3, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1108000, &(0x7f0000002280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040)) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000026c0), &(0x7f0000002740)=0x60) 02:02:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xf, &(0x7f0000000000)=""/146, &(0x7f00000000c0)=0x92) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0xb1}, {}, {}, {}, {}]}) 02:02:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x74}, {}, {}, {}, {}]}) 02:02:09 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x10000000, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket(0x1a, 0x800, 0x8) socket$inet(0x2, 0x1, 0xd17) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x8902, 0x0) 02:02:09 executing program 0: read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/95, 0x5f) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @any, 0x2}, 0xa) 02:02:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x74}, {}, {}, {}, {}]}) 02:02:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5}, {}, {}, {}, {}]}) 02:02:09 executing program 1: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000500)={0x401, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000540)={0x0, r0}) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r1, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r2, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) r3 = geteuid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000100)={0x3d8, 0x0, 0x0, [{{0x2, 0x2, 0xe6, 0x3, 0x2, 0x75a, {0x0, 0x7, 0x1d8b, 0x75, 0xfcc, 0x100000001, 0x3, 0x2, 0x0, 0x6000, 0x2, 0xffffffffffffffff, r1, 0x3, 0x800}}, {0x3, 0x200, 0x0, 0x101}}, {{0x0, 0x3, 0x9, 0x6, 0x4, 0x40, {0x2, 0x887, 0x3f, 0xff, 0x7fffffff, 0x3, 0x80, 0x6, 0x200, 0xc000, 0x2000000, 0xee01, r2, 0x4, 0x5}}, {0x6, 0x75, 0x12, 0xf90, '.:\'[}[!-)))%@@+[-#'}}, {{0x6, 0x0, 0x6, 0x1200000, 0x7, 0x80, {0x2, 0x0, 0x8000, 0x9, 0x1, 0xfffffffffffffbff, 0x1, 0x8, 0x2, 0x2000, 0x4b, r3, 0xffffffffffffffff, 0xffff, 0x4}}, {0x0, 0x1, 0x8, 0xa7dd, 'syztnl1\x00'}}, {{0x0, 0x0, 0xc1a4, 0x5, 0x80000001, 0x3, {0x6, 0x100, 0xffffffff80000000, 0xff, 0x80000000, 0x9, 0x8001, 0x1, 0x1608, 0x8000, 0x57a, r4, 0xee00, 0xfff, 0x7d}}, {0x3, 0x84d0, 0x8, 0x10000, '-#@:%{]+'}}, {{0x5, 0x1, 0x1000, 0xffffffffffffffff, 0x1, 0xffffffff, {0x6, 0x0, 0x20, 0x100000001, 0x7, 0x4, 0x4d, 0x3, 0x1, 0x1000, 0x4, 0xffffffffffffffff, 0x0, 0x944, 0x4}}, {0x0, 0x0, 0x8, 0x3a84, 'syztnl1\x00'}}, {{0x2, 0x2, 0x3, 0x7, 0x8, 0x1, {0x1, 0x10001, 0x1, 0x7, 0x7, 0x0, 0x5, 0xfffffffd, 0x100, 0xc000, 0x10000, 0xee00, 0xee01}}, {0x0, 0x2, 0x8, 0x6, 'syztnl1\x00'}}]}, 0x3d8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000580)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:09 executing program 3: read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/109, 0x6d) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, 0x0) 02:02:09 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)={0xb0, 0x0, r2, [{{}, {0x0, 0x0, 0x1, 0x0, ')'}}]}, 0xb0) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)=ANY=[@ANYBLOB="9002000000000000", @ANYRES64=0x0, @ANYBLOB="060000000000000000000000000000000100008000000000050000000000000001000000000200000500000000000000080000000000000000000000000000009e00000000000000000000000000000008000000000000000700000000000000050000000000000003000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="617c0000000000000000000003000000000000000400000000000000010000007f0000007d00000000000000020000000000000000000000000000000500000000000000050000000000000002000000ee5d000000000000000000000300000000000000060000000000000001000080000000000100000000000000000000000000c00000000000090000000000000000a0000004000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="810000002000000000000000060000000000000009000000000000000129891860000000e100000000000000050000000000000003000000000000000800000000000000050000000000000000000000090000000000000000000000030000000000000000000000000000009501000000000000030000000000000000000000000000000000010001000100000800000010000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000008000000000000000000000000000000000000000000100000001000000ff7fffff29000000000000000400000000000000000000000000000000000000000000000000000000000000fe741891060000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000200000007000000810000000000000003000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB="0100000000000000000000000100000000000000050000000000000002000000070000002840000000000000"], 0x290) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000040)={0xa0, 0x0, r2, {{0x6, 0x2, 0x8, 0xa1f, 0x3, 0x9, {0x6, 0x100000000, 0x80, 0xfffffffffffffffa, 0x5, 0x7ff, 0x10000, 0x7f, 0x1, 0x6000, 0x5, 0xffffffffffffffff, r3, 0x10001, 0x1}}}}, 0xa0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x5411, 0x0) 02:02:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x2}, {}, {}, {}, {}]}) 02:02:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x2, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@max_read={'max_read'}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '@-/[+.'}}]}}) 02:02:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r2, &(0x7f0000000300)={0x18, 0x0, r3, {0x2}}, 0x18) read$FUSE(r1, &(0x7f0000004480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)={0xb0, 0x0, r4, [{{}, {0x0, 0x0, 0x1, 0x0, ')'}}]}, 0xb0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000002c0)={0x30, 0x0, r4, [{0x1, 0x101, 0x8, 0x4, 'syztnl1\x00'}]}, 0x30) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x27, 0x1, 0x2, 0x7, 0x8, 0x8e, "9ec3d74f94faedd82f9cacad80d30445f944984144b1525fe8446ba1ddde649e141e9e788a2174b9995ee292b4f27471da9528b626efe41bdb99700dfaa090", 0x31}, 0x60, &(0x7f0000000200)=[{&(0x7f0000000100)="56e25d59dc2bde0073fc98594fbab9bf6f8b43a7d107caf5a95132aa5f96ff4092fbedef8740be7a90497ba779763406895399d747f1d0e58de3fe9e2ecdf28c2873632447a3fcca1c92c98756999e5f0cfa1852caba513b85ad4bf0a18bd56e17bae4b5464a0dea4e64e53f19dab20334969024199e699f24e2c50d7d5dac7b8e516f2aed865464d443b4cc11e4c6fa4df85f8ee385f2fd9a52aec33b840057f64e7fbd4017d0ea8429c0d4a2be6bea383c5b913b3d0750d58047bb127201964bd01fa05d1932da97ae9cb29d9b30c158e28aefa90417d3145a77d41df9fa1489705a61911152497c2a8b0dd1e37884c036a58c303509", 0xf7}, {&(0x7f0000000080)="703bbe9a644eaa25d8a75efe59ac99e52531b05f7eac5540422d", 0x1a}], 0x2, &(0x7f0000000240)={0x20, 0x29, 0x8, "0f84ce53ed12532435a3bb18b38b6610"}, 0x20, 0x4000051}, 0x20008001) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 02:02:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:02:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x3}, {}, {}, {}, {}]}) 02:02:09 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3afc, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xac, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000340)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r6}, 0x10) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r0}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:09 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x8902, 0x0) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000080)=""/20, 0x14, 0x40000061, &(0x7f00000000c0)={0x23, 0x5, 0x0, 0x6}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000002880)={0x12c, 0x0, &(0x7f0000002640)=[@release={0x40046306, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0xb224bd2556c7b2d4, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002380)=ANY=[@ANYBLOB="8561646600000000040000000000000002000000000000003800000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a6466000000008a5bd391d82ad2e7", @ANYRES32, @ANYBLOB='\x00'/12], &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002140)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/4096, 0x1000, 0x2, 0x25}, @ptr={0x70742a85, 0x1, &(0x7f0000001140)=""/4096, 0x1000, 0x1, 0x21}, @flat=@handle={0x73682a85, 0x200, 0x1}}, &(0x7f00000021c0)={0x0, 0x28, 0x50}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000002240)={@flat=@weak_binder={0x77622a85, 0xb, 0x8000000000}, @flat, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000022c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x1}, @register_looper, @decrefs={0x40046307, 0x400000}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002580)={@fd, @fda={0x66646185, 0x9, 0x2, 0x26}, @ptr={0x70742a85, 0x0, &(0x7f0000002480)=""/224, 0xe0, 0x2, 0x37}}, &(0x7f0000002600)={0x0, 0x18, 0x38}}}], 0xbc, 0x0, &(0x7f00000027c0)="8cb8e4ac340006427fa4cb574c20c7b6fd97b96acbdd7cf741fe13586109ee1853970395be4d07df9f76abb161fad9bb26b1a62d4e52318f9ff477b381675affaf38d01de3a02f76132b02e92d68b7e371f5197eb68d69c89fd463225bcd13c0dafc1924d2c92fe448f967ee9310241b16512692d63455d35f3aa6cc228a4d7842a6a4027e0e058239eb2149a1c03fb7a33adc482917f498bbba193f1d5bc36561041b780bfc1bef85c8d3abc1c81b795dd07f4b463d862c82cbd1fd"}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000002200)) 02:02:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:02:10 executing program 4: r0 = socket(0x1a, 0x2, 0x2) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x2, 0xfb, 0x7f}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x3, 0xfffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) 02:02:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x4}, {}, {}, {}, {}]}) 02:02:10 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x890c, 0x0) 02:02:10 executing program 4: write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r1, 0x1c}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:02:10 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socket(0x29, 0x1, 0xd842) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x890c, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000180)=""/246, &(0x7f0000000000)=0xf6) 02:02:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 02:02:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x8001) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000002440)={0x258, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2905}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2bb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x955}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1066}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b798abe067d76851dc2ccbf240dc3d8df89b227b0e9877efe3df34a8f153f3ec"}}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffd73}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1af}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffe01}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xef}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x8000}, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x80000001, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0x8, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0xc0000000000000, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r3, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x1108000, &(0x7f0000002280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040)) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000026c0), &(0x7f0000002740)=0x60) 02:02:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x5}, {}, {}, {}, {}]}) 02:02:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:02:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)={0x2e, 0x4, 0x0, {0x6, 0x4, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) 02:02:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000500), &(0x7f0000000540)=0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = accept$nfc_llcp(r1, 0x0, &(0x7f0000000480)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)={'batadv0\x00'}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x328, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbed}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x499}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff00}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40800000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_SOCK={0x100, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x743}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xac}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x35ab7326}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x371, @loopback, 0x10001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x76, @remote, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x401, @ipv4={[], [], @local}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x52973427}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xc845, @local, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @remote, 0xff}}}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0xeddfc7382b59febb}, 0x40041) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x2, 0x0, 0x8, "120249aa21ea18b1fdf3d7c35ee74c1d45c25fb9df59e06b6a57bbee34b04d3ca7b673847b09bc69e1859f5009a265438032d78b068f6fee59edd7494e9d20", 0x19}, 0x60) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7025, &(0x7f0000000700)={0x0, 0x2994, 0x10, 0x2, 0xa3, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000005c0), &(0x7f0000000600)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x200002, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000640), &(0x7f00000006c0)=0x60, 0x800) 02:02:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x6}, {}, {}, {}, {}]}) 02:02:10 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x94}, {}, {}, {}, {}]}) 02:02:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:02:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8902, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x10, 0x800) 02:02:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x2833, &(0x7f0000000180)={0x0, 0xd788, 0x1, 0x1, 0x2eb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r4 = socket(0x3b, 0x3, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf4, 0x0, 0x10, 0x70bd28, 0x8, {}, [@TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4e0}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "5750cf5891a3d1e2c3a36f64440cf4504fe3dc6ec9aa083758d01521"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "7229a201fab25c051c528574a3b66cb2d84d4e7e"}}, @TIPC_NLA_NODE_ID={0x29, 0x3, "ead046a69e1949544765527b24770463969e07a3c5c4cf3cbddca19889145ffd331cd4b0cc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8e1a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd1e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc1f}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x8001) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x6000, @fd_index=0x5, 0x0, 0x8b, 0x400, 0x2, 0x1, {0x2}}, 0xba) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x7}, 0xa) 02:02:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x8}, {}, {}, {}, {}]}) 02:02:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read$midi(0xffffffffffffffff, &(0x7f0000000340)=""/180, 0xb4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=""/164, 0xa4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) syz_io_uring_setup(0x7903, &(0x7f0000000200)={0x0, 0x3cd0, 0x8, 0x2, 0x21}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x7, 0x4000, @fd_index=0x1, 0x7, 0x0, 0x0, 0x1, 0x0, {0x2}}, 0x20) 02:02:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x94}, {}, {}, {}, {}]}) 02:02:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x64}, {}, {}, {}, {}]}) 02:02:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, 0x9}) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) connect$bt_rfcomm(r1, &(0x7f0000000280)={0x1f, @none, 0x8}, 0xa) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x23, 0x400) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000340)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000002c0), 0x4) r5 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x72b80) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000180)={0x8001, 0x0, 0x2}) 02:02:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x74}, {}, {}, {}]}) 02:02:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x9}, {}, {}, {}, {}]}) 02:02:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x27, 0x1, 0x0, 0x7, 0xd1, 0x6, "eaff6038c4912fd0749e73af1d7c818a5279485d2fa3397ee31bdbfcb387715ab73d027aceed94eb749f1d72238bf0ac37603c83101c16f204342465e94741", 0x30}, 0x60, &(0x7f0000000180)=[{&(0x7f0000000080)="962a8e9d32feeb4424352a59f7b1837c6a578d85d4bb6b", 0x17}, {&(0x7f00000000c0)="af8b6e1de16f48eb5f44", 0xa}, {&(0x7f0000000100)="67ed9db033d93c45d1b041a5db40e9a2851704f2ef1bfa042c6796d7a0d1091e01e61877465dd49a8516973208307abd48576de352997cabb5781a03e9d316d9dfc3f7bd7cff771dc5d65fd1a6c4e9aaad969061d431d1695d", 0x59}], 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x108, 0x8801}, 0x2000400c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000580)=""/181, 0xb5}], 0x2, &(0x7f0000000680)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'erspan0\x00', r1, 0x20, 0x10, 0x2, 0x3, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x61, 0x1, 0xa, [{@private=0xa010100, 0x3}, {@empty, 0x1}]}, @end, @end, @rr={0x7, 0x3, 0x4b}, @timestamp_addr={0x44, 0xc, 0xf, 0x1, 0x8, [{@private=0xa010102, 0x4}]}]}}}}}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) accept4$nfc_llcp(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x60, 0x80800) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x94}, {}, {}, {}, {}]}) 02:02:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x64}, {}, {}, {}, {}]}) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:02:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x15}, {}, {}, {}, {}]}) 02:02:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x74}, {}, {}]}) 02:02:11 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x642551186a5cdbfa, 0x3, 0xec, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000100)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000480)={0x10}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x78, 0x0, &(0x7f0000000340)=[@request_death={0x400c630e, 0x1}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x9, 0x0, 0x7}, @flat=@binder={0x73622a85, 0x100}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000300)={0x0, 0x20, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x1}, @exit_looper], 0x18, 0x0, &(0x7f00000003c0)="a642e4048abc5500dc35b49bdb0c7c7cb8941d24c1837d0b"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x7, 0x5, 0x6, 0x5}, {0x8000, 0x3, 0x81, 0x5}, {0x20, 0x3, 0x5, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) 02:02:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0xa) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x64}, {}, {}, {}, {}]}) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:02:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74}, {}]}) 02:02:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000000c0)=[@clear_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a62730a00000001000000000000000000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000df223b985241781ece8eb0ac80ee59000000000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @register_looper, @decrefs={0x40046307, 0x2}], 0xb8, 0x0, &(0x7f0000000140)="4a16fbde8af2a81e488033ce64d98922f9f898681c0ef5cb94d5cb61de0d29f30d6672f4ca46bfd3c63dfef95e92a9039b62af0c6899894b0e7112810f02e3135c7302955e15b028cc59e23e05ed5f3331431afbde343eee7745d459ea2467b3b8a242cf7fb26b1aa23c4504c51e2415f4582d8996c9296abb85ba5543a5d4dea156fbd2fb9068288f346ba8b362da645e9236a4683ccabb8ad95534ec936262b7bf45f8ca71f165f47234cc92a37d04a8a0b7d4db55575f"}) r3 = socket(0x6, 0x2, 0x8) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000002c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001600)={'gretap0\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x1, 0x0, 0x401, 0x2, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x66, 0x0, 0x1f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x0, [{@multicast2, 0x7}, {@multicast1, 0x7fff}, {@multicast2, 0x5}, {@multicast1, 0xadb}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x16}, {}, {}, {}, {}]}) 02:02:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:02:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0080000100000004000000404e1100780067000006299078ffffffffac1414aa44102dfd2600800100000004000000810c86067618b9c7864a0000000302060f1999eb020825291802703407114d57a57428c50e4b023a22786f7eac010c26e485e542f76af4c964060d81be2a213266cf50b586a2000c38ccca21c26fb9ed8dda000000"]}) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:02:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74}]}) 02:02:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:02:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x1d}, {}, {}, {}, {}]}) 02:02:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74}]}) 02:02:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:02:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001600)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3f, "26eb6a452d405e7631bb3c988c390f1bb446302056ff09a87130068b476b5f272d74156b25838c3566068d90dadc970c8405d2e9784917cdeac3daa0de39c3", 0x2f}, 0x60) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfe}, @generic={0x4, 0x4, 0x5, 0x401, 0x893}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0x10, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x20, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x17, [], r2, 0x0, r6, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0xf, 0xffffffe0, 0x3}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001540)={'syztnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="0040004000000041000000bd4811002000680000ff049078ac14143dac1e0101440cca93ac1414bb000000049e2c1c62c7b559b80c5cb71c0c8de66c717fc03930ddd97c2a67d9f45564bee416fd73b8716d7ff9aad5d35be1f5947494d954f845af49a3155481ed9e08bfc29b48f162336ea5b907a7e10786fc0a767f4adab1d43f0228816cf3"]}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r8, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000001500)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000001680)="7143b73f3ba44a897c4459d46102794352aa54f286eaa5c8b6f5f41ae425b4c9e6e51fcf03fd062f1659b89816a1453169152160a58873da60c4813f184ad141b8861ba341712d9761e89fb5b93303fda688fc0447be463effc9d63f4e94702a8a91ae17e7fde1b18ed7787ad322d161", 0x70, 0x42}, 0x26e4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x25}, {}, {}, {}, {}]}) 02:02:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000040), 0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74}]}) 02:02:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x28}, {}, {}, {}, {}]}) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:02:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:02:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x94}, {}, {}, {}]}) 02:02:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001600)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3f, "26eb6a452d405e7631bb3c988c390f1bb446302056ff09a87130068b476b5f272d74156b25838c3566068d90dadc970c8405d2e9784917cdeac3daa0de39c3", 0x2f}, 0x60) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfe}, @generic={0x4, 0x4, 0x5, 0x401, 0x893}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0x10, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x20, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x17, [], r2, 0x0, r6, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0xf, 0xffffffe0, 0x3}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001540)={'syztnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="0040004000000041000000bd4811002000680000ff049078ac14143dac1e0101440cca93ac1414bb000000049e2c1c62c7b559b80c5cb71c0c8de66c717fc03930ddd97c2a67d9f45564bee416fd73b8716d7ff9aad5d35be1f5947494d954f845af49a3155481ed9e08bfc29b48f162336ea5b907a7e10786fc0a767f4adab1d43f0228816cf3"]}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r8, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000001500)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000001680)="7143b73f3ba44a897c4459d46102794352aa54f286eaa5c8b6f5f41ae425b4c9e6e51fcf03fd062f1659b89816a1453169152160a58873da60c4813f184ad141b8861ba341712d9761e89fb5b93303fda688fc0447be463effc9d63f4e94702a8a91ae17e7fde1b18ed7787ad322d161", 0x70, 0x42}, 0x26e4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x2d}, {}, {}, {}, {}]}) 02:02:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:02:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x94}, {}, {}]}) 02:02:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x6000, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, 0x0, 0xfa8f92f2b5dd2db5, 0x2, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)={0x290, 0x0, 0x0, [{{0x6, 0x0, 0x1, 0x5, 0x1, 0x200, {0x5, 0x8, 0x0, 0x9e, 0x0, 0xa, 0x7, 0x0, 0x5, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7c61}}, {0x3, 0x4, 0x1, 0x7f, '}'}}, {{0x2, 0x0, 0x5, 0x5, 0x2, 0x5dee, {0x0, 0x3, 0x6, 0x80000001, 0x1, 0x5, 0x0, 0x9, 0x0, 0xa000, 0x4, 0xee01, 0x0, 0x81, 0x20}}, {0x6, 0x9, 0x1, 0x0, '\xe1'}}, {{0x5, 0x3, 0x8, 0x5, 0x0, 0x9, {0x0, 0x3, 0x0, 0x195, 0x3, 0x0, 0x10000, 0x10001, 0x800, 0x1000, 0x2, 0x0, 0xee01, 0x80000000}}, {0x0, 0x100000000, 0x1, 0xffff7fff, ')'}}, {{0x4, 0x0, 0x0, 0x0, 0x911874fe, 0x6, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x2, 0x7, 0x81, 0x0, 0x3, 0xffffffffffffffff, r7, 0x1}}, {0x1, 0x5, 0x2, 0x7, '(@'}}]}, 0x290) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, 0x0, 0x1000, 0x4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002180)=ANY=[@ANYBLOB="9002000000000000", @ANYRES64=0x0, @ANYBLOB="060000000000000000000000000000000100008000000000050000000000000001000000000200000500000000000000080000000000000000000000000000009e00000000000000000000000000000008000000000000000700000000000000050000000000000003000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="617c0000000000000000000003000000000000000400000000000000010000007f0000007d00000000000000020000000000000000000000000000000500000000000000050000000000000002000000ee5d000000000000000000000300000000000000060000000000000001000080000000000100000000000000000000000000c00000000000090000000000000000a0000004000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="810000002000000000000000060000000000000009000000000000000100000000000000e1000000000000000000000000000000030000000000000008000000000000000500000000000000000000000900000000000000000000000300000000000000000000000000000095010000000000000300000000000000000000000000000000000100010001000008000000a0000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000008000000000000000000000000000000000000000000100000001000000ff7fffff29000000000000000400000000000000000000000000000000000000000000000000000000000000fe741891060000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000200000007000000810000000000000003000000", @ANYRES32, @ANYRES32=r11, @ANYBLOB="0100000000000000000000000100000000000000050000000000000002000000070000002840000000000000"], 0x290) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) sendmsg$TIPC_NL_MON_PEER_GET(r12, &(0x7f0000000440)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000007280)=ANY=[@ANYBLOB="90e64bc2bc5b92e81498b83fee2edc1d2d549f98db9bc5322cafed7cf84d3bb88f896f034712c5d5bbad9e396e8c8e8af2386eef991f657e10b318e91fde4f6fc6850b12df28371d5da40046e1b5c2f76d4e77eaa10bd7353433397aa871a212a253c178971f4fe84ad01580c905f03b1eb4efe024a1523065860a494c1161327f8bac6dc18f91f99512873c9bc1a9dab9f083aae0f8952f1364328f45e2e9b38ffafb24980c953b19bbea423f5caf90a46fff57dd8371f013b9cd1f25", @ANYRES16=0x0, @ANYBLOB="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"], 0x1834}, 0x1, 0x0, 0x0, 0x40084}, 0x80) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000006d40)=ANY=[@ANYBLOB="0005000000000000", @ANYRES64=0x0, @ANYBLOB="01000000000000000300000000000000010000000000000001000100000000007f0000000000000006000000000000000600000000000000ff0700000000000006000000000000000300000000000000990000000000000001000000050000000100000000b00000bd030000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000f800020000000000000100000000000000000000000000000007000000ff030000245c24d82f2f2900040000000000000002000000000000008100000000000000060000000000000001000000070000000200000000000000070000000000000000100000000000000200000000000000a90a000000000000010000000000000005000000ffffffff060000000020000005000000", @ANYRES32=0xee00, @ANYRES32=r3, @ANYBLOB="c800000004000000000000000000000000000000080000000000000004000000030000002c5d2f5b0000000003000000000000000100000000000000c2090000000000001c45ffffffffffff09000000ffff000002000000000000000300000000000000000000000000000000000000010000000700000000000000c5060000000000007f000000090000000500000000a0000020000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="ff00000001000000000000000400000000000000000000000000000003000000dade0000255b5d0000000000060000000000000000000000000000000000010000000000000800000000000000800000090000000500000000000000fcffffffffffffff0d0a547100000000070000000000000002000000000000003f000000000000000900000005000000030000000080000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000ff070000000000000200000000000000070000000000000003000000090000007d272f0000000000020000000000000001000000000000001f000000000000000800000000000000fc00000064d40000060000000000000004000000000000000600000000000000feffffffffffffff8000000000000000fcffffffffffffff01800000050000000000000000a0000001010000", @ANYRES32=0xee01, @ANYRES32=r7, @ANYBLOB="02000000030000000000000004000000000000007f0000000000000000000000b40c000006000000000000000100000000000000060000000000000001000000000000004000000090a408760100000000000000000200000000000000000080000000000700000000000000ff0f00000000000006000000000000000180000065bb1f41000001000050000000020000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="040000000100ffff000000000200000000000000030000000000000003000000ff0700009f2e6800000000000100000000000000000000000000000007000000000000008024000000000000000800000200000000000000000000000700000000000000800000000000000000000000004d00006409000000000000e10000000000000000000000d9000000c0a300000060000007000000", @ANYRES32, @ANYRES32=r10, @ANYBLOB="e30c0000050000000000000006000000000000000000000000000000000000000800000000000000000000000000000000000000f9ffffffffffffff0200000000000000040000000700000000000000000000004e02000000000000000000000000000008000000000000000600000000000000070000000000000009000000000000000101000000a00000fc010000", @ANYRES32, @ANYRES32=r11, @ANYBLOB="00000000c72400000000000006bb0fa59bd2e2f800000000000000070000000000000004000000010040002d3b5c2800000000"], 0x500) syz_io_uring_submit(r1, 0x0, &(0x7f0000000680)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x4adea3e7) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, {0x500}}, 0x7f) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 02:02:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 02:02:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 02:02:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x30}, {}, {}, {}, {}]}) 02:02:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001600)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3f, "26eb6a452d405e7631bb3c988c390f1bb446302056ff09a87130068b476b5f272d74156b25838c3566068d90dadc970c8405d2e9784917cdeac3daa0de39c3", 0x2f}, 0x60) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfe}, @generic={0x4, 0x4, 0x5, 0x401, 0x893}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0x10, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x20, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x17, [], r2, 0x0, r6, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0xf, 0xffffffe0, 0x3}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001540)={'syztnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="0040004000000041000000bd4811002000680000ff049078ac14143dac1e0101440cca93ac1414bb000000049e2c1c62c7b559b80c5cb71c0c8de66c717fc03930ddd97c2a67d9f45564bee416fd73b8716d7ff9aad5d35be1f5947494d954f845af49a3155481ed9e08bfc29b48f162336ea5b907a7e10786fc0a767f4adab1d43f0228816cf3"]}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r8, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000001500)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000001680)="7143b73f3ba44a897c4459d46102794352aa54f286eaa5c8b6f5f41ae425b4c9e6e51fcf03fd062f1659b89816a1453169152160a58873da60c4813f184ad141b8861ba341712d9761e89fb5b93303fda688fc0447be463effc9d63f4e94702a8a91ae17e7fde1b18ed7787ad322d161", 0x70, 0x42}, 0x26e4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x94}, {}]}) 02:02:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001600)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3f, "26eb6a452d405e7631bb3c988c390f1bb446302056ff09a87130068b476b5f272d74156b25838c3566068d90dadc970c8405d2e9784917cdeac3daa0de39c3", 0x2f}, 0x60) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfe}, @generic={0x4, 0x4, 0x5, 0x401, 0x893}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0x10, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x20, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x17, [], r2, 0x0, r6, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0xf, 0xffffffe0, 0x3}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001540)={'syztnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="0040004000000041000000bd4811002000680000ff049078ac14143dac1e0101440cca93ac1414bb000000049e2c1c62c7b559b80c5cb71c0c8de66c717fc03930ddd97c2a67d9f45564bee416fd73b8716d7ff9aad5d35be1f5947494d954f845af49a3155481ed9e08bfc29b48f162336ea5b907a7e10786fc0a767f4adab1d43f0228816cf3"]}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r8, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000001500)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000001680)="7143b73f3ba44a897c4459d46102794352aa54f286eaa5c8b6f5f41ae425b4c9e6e51fcf03fd062f1659b89816a1453169152160a58873da60c4813f184ad141b8861ba341712d9761e89fb5b93303fda688fc0447be463effc9d63f4e94702a8a91ae17e7fde1b18ed7787ad322d161", 0x70, 0x42}, 0x26e4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x890c, 0x0) 02:02:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 02:02:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x34}, {}, {}, {}, {}]}) 02:02:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x64}, {}, {}, {}]}) 02:02:11 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x94}]}) 02:02:11 executing program 4: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast2, @in6=@empty}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000000c0)=0x80) 02:02:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001600)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3f, "26eb6a452d405e7631bb3c988c390f1bb446302056ff09a87130068b476b5f272d74156b25838c3566068d90dadc970c8405d2e9784917cdeac3daa0de39c3", 0x2f}, 0x60) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfe}, @generic={0x4, 0x4, 0x5, 0x401, 0x893}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0x10, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x20, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x17, [], r2, 0x0, r6, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0xf, 0xffffffe0, 0x3}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001540)={'syztnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="0040004000000041000000bd4811002000680000ff049078ac14143dac1e0101440cca93ac1414bb000000049e2c1c62c7b559b80c5cb71c0c8de66c717fc03930ddd97c2a67d9f45564bee416fd73b8716d7ff9aad5d35be1f5947494d954f845af49a3155481ed9e08bfc29b48f162336ea5b907a7e10786fc0a767f4adab1d43f0228816cf3"]}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r8, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000001500)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r6, 0x0, &(0x7f0000001680)="7143b73f3ba44a897c4459d46102794352aa54f286eaa5c8b6f5f41ae425b4c9e6e51fcf03fd062f1659b89816a1453169152160a58873da60c4813f184ad141b8861ba341712d9761e89fb5b93303fda688fc0447be463effc9d63f4e94702a8a91ae17e7fde1b18ed7787ad322d161", 0x70, 0x42}, 0x26e4) 02:02:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x35}, {}, {}, {}, {}]}) 02:02:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 02:02:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x64}, {}, {}]}) 02:02:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) 02:02:12 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000003c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x19c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4309}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "1476696bd1eed48f484118fd00d8e7bbb696a596f5847d9acefecc53b2414468b437"}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7402}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x30000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) 02:02:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x3d}, {}, {}, {}, {}]}) 02:02:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 02:02:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001600)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3f, "26eb6a452d405e7631bb3c988c390f1bb446302056ff09a87130068b476b5f272d74156b25838c3566068d90dadc970c8405d2e9784917cdeac3daa0de39c3", 0x2f}, 0x60) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfe}, @generic={0x4, 0x4, 0x5, 0x401, 0x893}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0x10, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x20, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x17, [], r2, 0x0, r5, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0xf, 0xffffffe0, 0x3}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001540)={'syztnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="0040004000000041000000bd4811002000680000ff049078ac14143dac1e0101440cca93ac1414bb000000049e2c1c62c7b559b80c5cb71c0c8de66c717fc03930ddd97c2a67d9f45564bee416fd73b8716d7ff9aad5d35be1f5947494d954f845af49a3155481ed9e08bfc29b48f162336ea5b907a7e10786fc0a767f4adab1d43f0228816cf3"]}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_submit(r7, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE, 0x0) 02:02:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x64}, {}]}) 02:02:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) 02:02:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x45}, {}, {}, {}, {}]}) 02:02:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', r0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x194, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x180000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41}]}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x1d49602518d91b9b}, 0x20000884) 02:02:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000000c0)=[@clear_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a62730a00000001000000000000000000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000df223b985241781ece8eb0ac80ee59000000000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @register_looper, @decrefs={0x40046307, 0x2}], 0xb8, 0x0, &(0x7f0000000140)="4a16fbde8af2a81e488033ce64d98922f9f898681c0ef5cb94d5cb61de0d29f30d6672f4ca46bfd3c63dfef95e92a9039b62af0c6899894b0e7112810f02e3135c7302955e15b028cc59e23e05ed5f3331431afbde343eee7745d459ea2467b3b8a242cf7fb26b1aa23c4504c51e2415f4582d8996c9296abb85ba5543a5d4dea156fbd2fb9068288f346ba8b362da645e9236a4683ccabb8ad95534ec936262b7bf45f8ca71f165f47234cc92a37d04a8a0b7d4db55575f"}) r3 = socket(0x6, 0x2, 0x8) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000002c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001600)={'gretap0\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x1, 0x0, 0x401, 0x2, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x66, 0x0, 0x1f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x0, [{@multicast2, 0x7}, {@multicast1, 0x7fff}, {@multicast2, 0x5}, {@multicast1, 0xadb}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x64}]}) 02:02:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001600)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3f, "26eb6a452d405e7631bb3c988c390f1bb446302056ff09a87130068b476b5f272d74156b25838c3566068d90dadc970c8405d2e9784917cdeac3daa0de39c3", 0x2f}, 0x60) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfe}, @generic={0x4, 0x4, 0x5, 0x401, 0x893}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0x10, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x20, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x17, [], r2, 0x0, r5, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0xf, 0xffffffe0, 0x3}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001540)={'syztnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="0040004000000041000000bd4811002000680000ff049078ac14143dac1e0101440cca93ac1414bb000000049e2c1c62c7b559b80c5cb71c0c8de66c717fc03930ddd97c2a67d9f45564bee416fd73b8716d7ff9aad5d35be1f5947494d954f845af49a3155481ed9e08bfc29b48f162336ea5b907a7e10786fc0a767f4adab1d43f0228816cf3"]}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)) syz_io_uring_setup(0x5656, &(0x7f00000006c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 02:02:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x4d}, {}, {}, {}, {}]}) 02:02:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000000c0)=[@clear_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a62730a00000001000000000000000000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000df223b985241781ece8eb0ac80ee59000000000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @register_looper, @decrefs={0x40046307, 0x2}], 0xb8, 0x0, &(0x7f0000000140)="4a16fbde8af2a81e488033ce64d98922f9f898681c0ef5cb94d5cb61de0d29f30d6672f4ca46bfd3c63dfef95e92a9039b62af0c6899894b0e7112810f02e3135c7302955e15b028cc59e23e05ed5f3331431afbde343eee7745d459ea2467b3b8a242cf7fb26b1aa23c4504c51e2415f4582d8996c9296abb85ba5543a5d4dea156fbd2fb9068288f346ba8b362da645e9236a4683ccabb8ad95534ec936262b7bf45f8ca71f165f47234cc92a37d04a8a0b7d4db55575f"}) r3 = socket(0x6, 0x2, 0x8) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000002c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001600)={'gretap0\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x1, 0x0, 0x401, 0x2, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x66, 0x0, 0x1f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x0, [{@multicast2, 0x7}, {@multicast1, 0x7fff}, {@multicast2, 0x5}, {@multicast1, 0xadb}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x64}]}) 02:02:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) 02:02:12 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@loopback, @in6=@ipv4}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000580)=0xe8) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f00000002c0)=""/184, 0xb8) socket$inet_udplite(0x2, 0x2, 0x88) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000380)=[{'RADIO', @val={' \'', 'Master Capture Switch', '\' '}}, {'SPEAKER', @val={' \'', 'Synth', '\' '}}, {'MONITOR', @val={' \'', 'Master Capture', '\' '}}, {'TREBLE', @val={' \'', 'Master Playback Switch', '\' '}}, {'DIGITAL2', @void}], 0xc4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x2c29, 0x1, 0x3, 0xa7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) getsockopt$inet_dccp_buf(r2, 0x21, 0x99, &(0x7f00000001c0)=""/170, &(0x7f0000000280)=0xaa) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x0, 0x401, 0x2, 0x7fffffff, 0x3, 0x539, 0x9, 0x3}}}, 0x60) accept$nfc_llcp(r2, &(0x7f0000000600), &(0x7f0000000680)=0x60) write$proc_mixer(r2, &(0x7f00000005c0)=[{'BASS', @val={' \'', 'Mic Capture Switch', '\' '}}], 0x2f) 02:02:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x60}, {}, {}, {}, {}]}) 02:02:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x64}]}) 02:02:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001600)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3f, "26eb6a452d405e7631bb3c988c390f1bb446302056ff09a87130068b476b5f272d74156b25838c3566068d90dadc970c8405d2e9784917cdeac3daa0de39c3", 0x2f}, 0x60) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfe}, @generic={0x4, 0x4, 0x5, 0x401, 0x893}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0x10, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x20, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x17, [], r2, 0x0, r5, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0xf, 0xffffffe0, 0x3}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001540)={'syztnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="0040004000000041000000bd4811002000680000ff049078ac14143dac1e0101440cca93ac1414bb000000049e2c1c62c7b559b80c5cb71c0c8de66c717fc03930ddd97c2a67d9f45564bee416fd73b8716d7ff9aad5d35be1f5947494d954f845af49a3155481ed9e08bfc29b48f162336ea5b907a7e10786fc0a767f4adab1d43f0228816cf3"]}) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)) 02:02:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000000c0)=[@clear_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a62730a00000001000000000000000000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000df223b985241781ece8eb0ac80ee59000000000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @register_looper, @decrefs={0x40046307, 0x2}], 0xb8, 0x0, &(0x7f0000000140)="4a16fbde8af2a81e488033ce64d98922f9f898681c0ef5cb94d5cb61de0d29f30d6672f4ca46bfd3c63dfef95e92a9039b62af0c6899894b0e7112810f02e3135c7302955e15b028cc59e23e05ed5f3331431afbde343eee7745d459ea2467b3b8a242cf7fb26b1aa23c4504c51e2415f4582d8996c9296abb85ba5543a5d4dea156fbd2fb9068288f346ba8b362da645e9236a4683ccabb8ad95534ec936262b7bf45f8ca71f165f47234cc92a37d04a8a0b7d4db55575f"}) r3 = socket(0x6, 0x2, 0x8) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000002c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001600)={'gretap0\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x1, 0x0, 0x401, 0x2, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x66, 0x0, 0x1f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x0, [{@multicast2, 0x7}, {@multicast1, 0x7fff}, {@multicast2, 0x5}, {@multicast1, 0xadb}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5411, 0x0) 02:02:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 02:02:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x61}, {}, {}, {}, {}]}) 02:02:12 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x84, &(0x7f0000000080)={[{0x7e, 0x4e00, "821a650e3c56ba0a5616b18643bed89e0843cbb30ee49e3fa7af222caf3d221806b9256a3352fd6fe596cf293abb8f57d3a13a614bbe6451644ae9c7872c1325d9fb6110b5395fb46496e5f96fe8b152e6657d97bc8ba0c358c89445491c5ca6ab7a0f90522abeeddee0605eb87ba82a400762fad7e6487d370b4c5af900"}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x5411, 0x0) 02:02:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001600)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3f, "26eb6a452d405e7631bb3c988c390f1bb446302056ff09a87130068b476b5f272d74156b25838c3566068d90dadc970c8405d2e9784917cdeac3daa0de39c3", 0x2f}, 0x60) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfe}, @generic={0x4, 0x4, 0x5, 0x401, 0x893}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0x10, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x20, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x17, [], r2, 0x0, r5, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0xf, 0xffffffe0, 0x3}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001540)={'syztnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="0040004000000041000000bd4811002000680000ff049078ac14143dac1e0101440cca93ac1414bb000000049e2c1c62c7b559b80c5cb71c0c8de66c717fc03930ddd97c2a67d9f45564bee416fd73b8716d7ff9aad5d35be1f5947494d954f845af49a3155481ed9e08bfc29b48f162336ea5b907a7e10786fc0a767f4adab1d43f0228816cf3"]}) 02:02:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000000c0)=[@clear_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a62730a00000001000000000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="000000df223b985241781ece8eb0ac80ee59000000000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @register_looper, @decrefs={0x40046307, 0x2}], 0xb8, 0x0, &(0x7f0000000140)="4a16fbde8af2a81e488033ce64d98922f9f898681c0ef5cb94d5cb61de0d29f30d6672f4ca46bfd3c63dfef95e92a9039b62af0c6899894b0e7112810f02e3135c7302955e15b028cc59e23e05ed5f3331431afbde343eee7745d459ea2467b3b8a242cf7fb26b1aa23c4504c51e2415f4582d8996c9296abb85ba5543a5d4dea156fbd2fb9068288f346ba8b362da645e9236a4683ccabb8ad95534ec936262b7bf45f8ca71f165f47234cc92a37d04a8a0b7d4db55575f"}) r2 = socket(0x6, 0x2, 0x8) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000002c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001600)={'gretap0\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x1, 0x0, 0x401, 0x2, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x66, 0x0, 0x1f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x0, [{@multicast2, 0x7}, {@multicast1, 0x7fff}, {@multicast2, 0x5}, {@multicast1, 0xadb}]}, @end]}}}}}) 02:02:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 02:02:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 02:02:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x64}, {}, {}, {}, {}]}) 02:02:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@pppol2tp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001600)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3f, "26eb6a452d405e7631bb3c988c390f1bb446302056ff09a87130068b476b5f272d74156b25838c3566068d90dadc970c8405d2e9784917cdeac3daa0de39c3", 0x2f}, 0x60) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfe}, @generic={0x4, 0x4, 0x5, 0x401, 0x893}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0x10, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x20, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x17, [], r1, 0x0, r4, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0xf, 0xffffffe0, 0x3}, 0x10}, 0x78) 02:02:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000000c0)=[@clear_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a62730a00000001000000000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="000000df223b985241781ece8eb0ac80ee59000000000000000000"], &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @register_looper, @decrefs={0x40046307, 0x2}], 0xb8, 0x0, &(0x7f0000000140)="4a16fbde8af2a81e488033ce64d98922f9f898681c0ef5cb94d5cb61de0d29f30d6672f4ca46bfd3c63dfef95e92a9039b62af0c6899894b0e7112810f02e3135c7302955e15b028cc59e23e05ed5f3331431afbde343eee7745d459ea2467b3b8a242cf7fb26b1aa23c4504c51e2415f4582d8996c9296abb85ba5543a5d4dea156fbd2fb9068288f346ba8b362da645e9236a4683ccabb8ad95534ec936262b7bf45f8ca71f165f47234cc92a37d04a8a0b7d4db55575f"}) socket(0x6, 0x2, 0x8) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000002c0)=0x80) 02:02:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 02:02:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x5, 0x74}, {}, {}, {}, {}]}) 02:02:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@pppol2tp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}], 0x2}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000014c0)={'batadv_slave_0\x00', 0x0}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000001600)={0x27, 0x0, 0x0, 0x3, 0x6, 0x3f, "26eb6a452d405e7631bb3c988c390f1bb446302056ff09a87130068b476b5f272d74156b25838c3566068d90dadc970c8405d2e9784917cdeac3daa0de39c3", 0x2f}, 0x60) syz_io_uring_setup(0x3af9, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0xa7, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x14, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x3, 0x3, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfe}, @generic={0x4, 0x4, 0x5, 0x401, 0x893}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x44}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x8, 0x6, 0x10, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x20, 0x24, &(0x7f0000000140)=""/36, 0x40f00, 0x17, [], r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x0, 0xf, 0xffffffe0, 0x3}, 0x10}, 0x78) 02:02:12 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) [ 2492.104452][ T3700] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2492.624540][ T3700] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2492.633659][ T3700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2492.642430][ T3700] usb 5-1: Product: syz [ 2492.646932][ T3700] usb 5-1: Manufacturer: syz [ 2492.651521][ T3700] usb 5-1: SerialNumber: syz [ 2492.694768][ T3700] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2493.264493][ T3700] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2493.685575][ T8169] usb 5-1: USB disconnect, device number 24 [ 2494.284455][ T3700] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2494.291342][ T3700] ath9k_htc: Failed to initialize the device [ 2494.297739][ T8169] usb 5-1: ath9k_htc: USB layer deinitialized [ 2494.684486][ T8169] usb 5-1: new high-speed USB device number 25 using dummy_hcd 02:02:15 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000000c0)=[@clear_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a62730a00000001000000000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB="000000df223b985241781ece8eb0ac80ee59000000000000000000"], &